$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa File: 34510429-d958-3a78-990a-f80264d9221e.roa (raw, json) Hash identifier: /1Yq2VEhRGKQwWpjmARH93bVUYVIqBi1cpyrPJLRqDE= Subject key identifier: 44:4C:4A:1A:90:B2:74:D5:F4:C6:23:AF:48:1B:CE:47:61:56:B9:01 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4975A0B75535B058E1DF5480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:a0:b7:55:35:b0:58:e1:df:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78eaa280-6827-4e0d-8842-36a62de576bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:f9:af:2e:3a:2d:be:c4:a2:da:37:68:16: 5e:6d:9a:ef:7b:e4:ac:3c:ab:17:fc:98:dd:4e:86: f4:94:a2:da:17:de:ad:5e:f7:50:d8:92:b2:73:48: dc:06:38:79:1e:9b:b0:e1:80:3c:1a:5f:db:0b:90: 94:e4:21:d0:3e:7c:24:2d:c3:fe:08:a1:c6:32:bb: 91:b6:2a:ff:d6:6b:8b:cc:78:7a:77:dc:e0:5f:f5: 7e:15:4e:30:85:87:27:d4:be:f9:d4:c4:b4:13:d5: 13:2b:49:b8:c9:46:77:95:ec:91:67:65:8b:98:f0: 32:41:34:43:5f:db:e0:0f:cc:57:47:9e:09:da:9d: bb:77:cd:8f:f2:0a:ae:70:a0:6f:34:96:aa:23:b7: ce:5a:6b:de:df:b0:cb:1a:cb:b5:33:7a:3b:8c:ae: f3:a4:20:00:23:e5:8a:24:cc:dc:08:49:20:62:60: 15:38:6b:76:40:ed:d8:c5:6a:b6:00:59:e9:04:ee: 52:2b:d2:7b:55:1f:36:a1:7f:b7:51:f0:95:c4:4a: 52:d5:47:f5:7b:94:4d:02:c4:5d:d0:d1:5e:c2:3d: 4d:15:55:2e:3e:39:30:3d:9a:e5:95:c1:e9:31:6d: ea:8b:4b:b7:9b:a5:55:99:41:c8:e9:40:fc:98:16: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:4A:1A:90:B2:74:D5:F4:C6:23:AF:48:1B:CE:47:61:56:B9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/34510429-d958-3a78-990a-f80264d9221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:55:a3:05:f6:e9:80:49:1c:01:a9:d8:28:8c:8d:da:09:a9: 3f:c4:2b:89:a5:a9:62:8b:33:21:ff:39:f9:c5:26:48:f5:f3: c8:0f:3d:53:72:cc:53:1c:c5:a5:b3:ff:91:56:3c:42:12:6c: 35:ea:6a:68:64:24:5b:3c:df:17:f2:68:e1:d0:aa:fc:28:d5: 3b:a4:ea:bf:e8:c0:e0:79:d2:66:b5:f9:e3:27:bb:9d:e6:1f: 6a:6f:f5:60:38:56:07:16:6c:65:46:d1:01:bd:59:54:3c:e8: fd:8d:f4:23:88:66:50:28:2a:72:5b:9f:da:3f:7c:58:dd:bd: c0:2c:63:12:41:2b:5c:a7:fd:c8:20:22:46:df:3b:b7:7f:56: 9d:a0:4a:7a:9c:2e:00:af:45:c4:37:38:49:40:2b:90:c6:e5: d9:f0:45:19:0b:e6:6d:4e:dd:00:9c:d0:69:f1:13:7d:04:71: 6b:98:9a:96:6d:2a:e3:e3:49:30:23:bc:3c:e5:92:f6:95:bb: 2f:e0:bb:e5:83:a4:42:4c:a6:97:0a:8f:f8:da:65:bb:62:fb: 6d:8e:0b:8b:a8:35:b6:06:07:54:0d:c8:f9:b2:9d:33:2c:80: ec:6e:65:25:f0:cd:db:cd:4f:0b:68:cf:a8:b6:29:3f:a1:45: 3f:ed:0f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdaC3VTWwWOHfVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhlYWEyODAtNjgyNy00ZTBkLTg4NDItMzZhNjJkZTU3NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNH5ry46Lb7Eoto3aBZebZrve+SsPKsX/Jjd Tob0lKLaF96tXvdQ2JKyc0jcBjh5Hpuw4YA8Gl/bC5CU5CHQPnwkLcP+CKHGMruR tir/1muLzHh6d9zgX/V+FU4whYcn1L751MS0E9UTK0m4yUZ3leyRZ2WLmPAyQTRD X9vgD8xXR54J2p27d82P8gqucKBvNJaqI7fOWmve37DLGsu1M3o7jK7zpCAAI+WK JMzcCEkgYmAVOGt2QO3YxWq2AFnpBO5SK9J7VR82oX+3UfCVxEpS1Uf1e5RNAsRd 0NFewj1NFVUuPjkwPZrllcHpMW3qi0u3m6VVmUHI6UD8mBbopwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERMShqQsnTV9MYjr0gbzkdhVrkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1MTA0MjktZDk1OC0z YTc4LTk5MGEtZjgwMjY0ZDkyMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJVowX26YBJHAGp2CiMjdoJqT/EK4mlqWKLMyH/OfnFJkj188gPPVNy zFMcxaWz/5FWPEISbDXqamhkJFs83xfyaOHQqvwo1Tuk6r/owOB50ma1+eMnu53m H2pv9WA4VgcWbGVG0QG9WVQ86P2N9COIZlAoKnJbn9o/fFjdvcAsYxJBK1yn/cgg IkbfO7d/Vp2gSnqcLgCvRcQ3OElAK5DG5dnwRRkL5m1O3QCc0GnxE30EcWuYmpZt KuPjSTAjvDzlkvaVuy/gu+WDpEJMppcKj/jaZbti+22OC4uoNbYGB1QNyPmynTMs gOxuZSXwzdvNTwtoz6i2KT+hRT/tD2k= -----END CERTIFICATE-----Generated at Sat Oct 10 14:16:22 2026 by rpki-client