$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa File: 4053caf1-3eed-37e3-a52a-760e48ba45ea.roa (raw, json) Hash identifier: oVWmK7OfAI19DNDTu+Ov0XF8amsvlBgQPhHgqIEkEyM= Subject key identifier: 71:2B:2D:E9:38:5D:18:A7:77:79:EC:D0:40:A7:DF:F4:F3:3C:B9:07 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E3A2F3DF3A6ACB62774696060 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 60204 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:3d:f3:a6:ac:b6:27:74:69:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=2814f9af-0bea-47c0-bf70-0cb3cfbf9e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:9f:f0:27:09:a7:e0:55:0d:95:d4:3b:e2: 3d:0a:4e:99:ae:eb:ec:83:19:f9:81:74:06:56:59: d2:96:69:2b:02:f3:c2:01:92:ed:8b:dc:c6:2b:38: 87:3c:7c:13:33:91:ea:8d:88:24:45:f3:6c:24:60: e3:1a:01:08:cb:52:62:4f:0b:de:1f:7f:e9:03:78: 7b:ba:76:7e:a1:42:4c:a5:9e:e3:0f:97:94:90:b7: 01:be:9a:8a:eb:75:c0:bb:37:e2:63:cf:74:10:b6: 90:a5:d5:16:08:93:21:42:87:b8:bc:9b:9b:4c:b7: 91:a4:af:47:57:d2:61:8b:1c:95:e7:70:8a:43:2b: 7e:ca:24:77:eb:49:05:5f:70:a3:e1:e9:b1:76:8d: 04:15:c5:5a:9a:07:cd:d1:2c:6c:1a:b7:ec:2c:3a: 95:23:b4:40:cb:2b:46:63:cc:97:ee:86:9f:72:4b: e7:36:9c:ba:36:99:57:8b:37:e9:e5:f4:65:87:0b: 3f:0e:84:d2:c6:f8:de:2b:79:c2:e7:a2:71:2a:f9: c2:61:04:23:db:b3:2b:62:32:ce:85:0d:9a:26:42: e4:2f:bd:49:a1:50:ad:db:ed:64:b1:08:b6:00:fc: 1d:04:93:20:20:9b:80:77:b8:33:cf:4c:98:ac:c7: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:2D:E9:38:5D:18:A7:77:79:EC:D0:40:A7:DF:F4:F3:3C:B9:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4053caf1-3eed-37e3-a52a-760e48ba45ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:67:5a:d7:c5:3c:a0:00:f2:89:6e:f5:0b:61:6e:f3:2f:ab: 08:65:cb:bd:96:15:d0:f0:c8:10:2e:d0:70:8d:df:3a:db:fc: d2:47:d2:af:3d:e9:bb:e0:b3:7b:1f:ca:82:9e:e6:7b:d6:5f: cc:e0:32:14:40:a4:8f:bc:a1:27:a3:d9:50:47:bf:ec:17:ca: 93:e1:b2:35:76:39:67:15:5b:f1:5d:89:4c:3e:26:ae:7c:e8: d8:e4:74:49:da:f1:80:c4:2a:7d:5f:e0:f8:f1:03:80:c5:58: d8:35:8e:9c:83:6f:99:af:49:de:55:63:a7:43:55:b4:ce:8c: 04:8a:28:e5:fd:b2:8d:7a:12:ab:82:f7:3c:ce:5a:25:be:9d: 15:d0:22:76:7d:09:d0:7c:9a:16:05:d9:ba:f8:df:15:10:71: cf:2c:44:e9:80:7d:e2:11:b3:ae:89:ab:3f:09:f7:17:6c:b2: 86:99:dd:8d:46:dc:9f:8e:a3:ea:96:a2:06:13:9a:70:12:de: d7:6e:75:7f:6a:06:b5:25:f5:9f:41:d8:41:fa:c2:05:20:9c: fb:97:d5:ae:e1:4b:c9:4b:7d:80:bc:c7:af:d8:64:91:54:99: 1c:f7:72:9e:a0:25:61:17:b1:21:74:6b:f5:79:df:e3:e2:90: 63:3a:21:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lz3zpqy2J3RpYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MjgxNGY5YWYtMGJlYS00N2MwLWJmNzAtMGNiM2NmYmY5ZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoouf8CcJp+BVDZXUO+I9Ck6Zruvsgxn5gXQG VlnSlmkrAvPCAZLti9zGKziHPHwTM5HqjYgkRfNsJGDjGgEIy1JiTwveH3/pA3h7 unZ+oUJMpZ7jD5eUkLcBvpqK63XAuzfiY890ELaQpdUWCJMhQoe4vJubTLeRpK9H V9JhixyV53CKQyt+yiR360kFX3Cj4emxdo0EFcVamgfN0SxsGrfsLDqVI7RAyytG Y8yX7oafckvnNpy6NplXizfp5fRlhws/DoTSxvjeK3nC56JxKvnCYQQj27MrYjLO hQ2aJkLkL71JoVCt2+1ksQi2APwdBJMgIJuAd7gzz0yYrMfmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHErLek4XRind3ns0ECn3/TzPLkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDA1M2NhZjEtM2VlZC0z N2UzLWE1MmEtNzYwZTQ4YmE0NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChnWtfFPKAA8olu9QthbvMvqwhly72WFdDwyBAu0HCN3zrb/NJH0q89 6bvgs3sfyoKe5nvWX8zgMhRApI+8oSej2VBHv+wXypPhsjV2OWcVW/FdiUw+Jq58 6NjkdEna8YDEKn1f4PjxA4DFWNg1jpyDb5mvSd5VY6dDVbTOjASKKOX9so16EquC 9zzOWiW+nRXQInZ9CdB8mhYF2br43xUQcc8sROmAfeIRs66Jqz8J9xdssoaZ3Y1G 3J+Oo+qWogYTmnAS3tdudX9qBrUl9Z9B2EH6wgUgnPuX1a7hS8lLfYC8x6/YZJFU mRz3cp6gJWEXsSF0a/V53+PikGM6Iak= -----END CERTIFICATE-----Generated at Sun Jun 28 14:43:51 2026 by rpki-client