$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa File: 3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa (raw, json) Hash identifier: j1/EmGFDnt0oD/Gd0DW8uOFj2E/MURZX4Wrs/2qzHU8= Subject key identifier: 93:AB:BF:18:E0:93:27:2F:04:57:99:7B:12:FD:08:CC:1B:E3:91:D3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0D4261DA33534D0E85227520 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 202 IP address blocks: 168.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:61:da:33:53:4d:0e:85:22:75:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=2fa16e68-8ac6-480f-991c-a335e0aecc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:65:b8:80:56:95:6a:d8:36:c6:fe:a7:96: 77:6c:b7:06:32:3d:e4:24:a9:95:88:38:1c:59:4c: c8:d8:98:1a:e3:2b:5d:e3:d2:61:df:af:69:34:6d: f9:ba:c4:43:13:1a:4c:2d:3c:a6:3a:47:b4:ce:87: 22:ff:e6:45:75:df:32:8d:a6:8d:84:a4:f3:e6:dc: b0:c7:50:02:61:1d:62:e2:8e:74:cc:ec:7e:4e:c6: 47:60:e7:2b:a0:74:22:31:c7:2c:e3:1a:99:5c:44: 20:2b:fd:37:14:5c:8b:b3:17:d9:1b:86:61:a9:a0: 55:b8:ec:73:f3:7f:53:35:3a:55:62:3b:b4:bd:36: 9e:40:6d:d9:79:a5:ad:da:d4:be:e2:cf:73:6d:95: 22:54:09:f6:50:1b:e4:1b:64:18:54:ef:05:10:91: 38:fd:52:8a:47:a1:01:fb:3c:c3:d4:62:a9:86:6f: 5d:8c:13:45:98:7a:1f:7c:69:13:9b:29:27:c5:0c: 7f:fb:fe:f9:20:4c:ad:22:c2:1d:60:4b:94:5e:45: 47:6c:c7:d8:be:50:c2:45:b7:27:9d:50:b6:d7:fd: a6:15:93:e3:34:a6:54:04:3d:22:20:f8:d5:8b:e9: 20:27:3c:35:5c:e7:51:d7:d7:fb:90:08:ed:6c:ea: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AB:BF:18:E0:93:27:2F:04:57:99:7B:12:FD:08:CC:1B:E3:91:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e9825d2-b9e7-35c9-a9e7-98d7aeffb375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:83:dc:43:3b:67:2e:2e:96:9c:b1:ad:4d:eb:f6:2a:71:7f: 28:0b:15:fa:12:a6:94:51:f2:71:2a:84:af:17:46:ed:22:1c: 91:b3:b6:eb:0a:9b:d3:df:4c:8b:83:49:fe:cd:c4:af:9f:94: b9:35:3d:d1:99:9b:63:ce:fa:51:76:73:37:cc:89:42:b7:64: 4b:d5:4d:54:04:e4:e2:0c:72:b6:59:d2:1b:57:b3:cf:42:f4: bf:ec:e8:f1:13:a7:47:ab:26:5c:bc:97:75:e0:1e:32:37:7c: 3a:28:58:17:8a:06:df:19:f0:3b:7d:e1:82:2b:dd:80:ec:ec: 15:74:af:99:80:c8:84:85:1f:c7:82:a5:c7:a0:d8:a3:83:e5: 37:ca:c3:d0:37:bb:94:35:16:61:1c:76:0c:eb:f5:1b:05:41: 0a:0c:2d:df:3a:c5:2e:6d:4f:18:05:3e:f5:f5:62:d4:84:96: e3:b2:d5:ed:99:d5:3a:22:03:d4:b8:a3:ad:49:b9:62:34:72: 4c:a9:74:64:dd:1d:12:e0:61:93:a3:7c:91:af:35:75:20:2d: 6f:41:65:a7:57:39:01:4e:d4:25:32:6b:49:5b:59:9f:83:49: d4:a2:c1:18:50:64:af:d2:7c:ca:00:81:a3:48:67:e7:d9:01: b9:e4:2e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmHaM1NNDoUidSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmZhMTZlNjgtOGFjNi00ODBmLTk5MWMtYTMzNWUwYWVjYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifdluIBWlWrYNsb+p5Z3bLcGMj3kJKmViDgc WUzI2Jga4ytd49Jh369pNG35usRDExpMLTymOke0zoci/+ZFdd8yjaaNhKTz5tyw x1ACYR1i4o50zOx+TsZHYOcroHQiMccs4xqZXEQgK/03FFyLsxfZG4ZhqaBVuOxz 839TNTpVYju0vTaeQG3ZeaWt2tS+4s9zbZUiVAn2UBvkG2QYVO8FEJE4/VKKR6EB +zzD1GKphm9djBNFmHoffGkTmyknxQx/+/75IEytIsIdYEuUXkVHbMfYvlDCRbcn nVC21/2mFZPjNKZUBD0iIPjVi+kgJzw1XOdR19f7kAjtbOp3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOrvxjgkycvBFeZexL9CMwb45HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2U5ODI1ZDItYjllNy0z NWM5LWE5ZTctOThkN2FlZmZiMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmD3EM7Zy4ulpyxrU3r9ipxfygLFfoSppRR8nEqhK8XRu0iHJGztusK m9PfTIuDSf7NxK+flLk1PdGZm2PO+lF2czfMiUK3ZEvVTVQE5OIMcrZZ0htXs89C 9L/s6PETp0erJly8l3XgHjI3fDooWBeKBt8Z8Dt94YIr3YDs7BV0r5mAyISFH8eC pceg2KOD5TfKw9A3u5Q1FmEcdgzr9RsFQQoMLd86xS5tTxgFPvX1YtSEluOy1e2Z 1ToiA9S4o61JuWI0ckypdGTdHRLgYZOjfJGvNXUgLW9BZadXOQFO1CUya0lbWZ+D SdSiwRhQZK/SfMoAgaNIZ+fZAbnkLrM= -----END CERTIFICATE-----Generated at Wed Mar 11 20:51:10 2026 by rpki-client