$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: 6oEaqgtXeF4I3JnBR+Z7jCuUsvZ4Eqyrqr4kwPf6UdA= Subject key identifier: A6:FD:6A:6B:FF:2D:E8:4A:C6:B2:3A:E4:6C:E6:96:7B:D3:1E:F4:26 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6880AA14BCB309DE7F9940 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:80:aa:14:bc:b3:09:de:7f:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=fabd20bd-bd30-4266-9c69-6af0a6b63bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:ab:49:f4:87:9b:da:83:3f:87:11:84:6d: a7:66:57:c7:56:7c:be:fe:b9:6a:d6:df:50:4a:69: c5:3d:ca:c9:f8:a9:d8:55:27:27:92:06:99:90:cb: 2e:4e:07:9d:b3:fd:74:26:51:ee:23:40:3b:c3:4f: 47:b6:ed:04:04:aa:5a:ce:0e:6e:8d:bd:7e:83:b6: c2:cf:5b:71:b6:21:60:4b:96:40:c2:c8:a5:2e:e3: 7f:1a:9b:cc:ea:a9:83:6c:cd:cd:0b:90:77:96:a2: ca:b7:18:24:bd:a0:bc:cb:c3:a2:c9:a5:8e:5e:04: 91:72:eb:46:29:62:45:62:51:42:cf:8c:34:ec:34: 62:22:b4:42:11:91:7c:b5:27:31:6c:95:5e:73:32: 4d:4a:27:d1:12:40:66:99:e5:09:4e:70:32:5a:58: 4c:55:bf:15:16:01:18:b6:93:d9:a2:d4:c2:ea:e3: 6a:df:ba:70:7e:17:98:38:d5:18:2b:31:58:f4:c7: 05:13:60:db:2c:fb:87:e4:a7:07:b8:89:5d:c1:e9: 9f:a0:bc:e5:fa:35:ab:94:6a:6d:bd:c0:91:bc:0d: 70:03:9f:64:63:a4:69:d7:c6:e2:c9:05:67:9d:11: 17:d1:d7:8c:31:9c:96:da:f4:7e:8b:6d:4b:8a:02: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FD:6A:6B:FF:2D:E8:4A:C6:B2:3A:E4:6C:E6:96:7B:D3:1E:F4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f6:27:be:9e:e4:7c:7c:ba:15:0a:e6:6d:85:37:3c:fc:04: d2:0d:51:3d:04:d2:e4:93:7b:3d:da:be:fc:b0:0c:4f:cf:e0: e8:e0:6f:64:d0:8e:d6:80:53:d7:80:a0:3c:0e:df:70:c2:47: 70:b2:92:e1:d2:a9:55:26:15:5a:b1:c3:56:ba:9d:0c:ad:23: 43:94:b5:a5:80:d3:02:9c:17:f3:90:c8:1a:fa:ad:88:1e:3d: e1:27:43:7e:8c:6b:11:3e:0b:60:41:46:bb:f6:18:af:4f:88: c5:60:01:f2:61:70:10:2a:a3:d6:a1:a1:e8:8c:cb:02:55:ff: dc:37:28:40:c6:c2:8b:2e:d5:01:19:27:1b:44:d3:c1:17:97: 28:0b:22:61:9c:7d:f8:e6:7c:06:a8:71:f7:bd:47:51:95:67: 43:64:50:ef:be:77:b7:16:d5:2c:0a:80:90:db:ee:79:f4:27: 7e:14:a3:d5:c6:94:a3:de:61:1e:c7:97:30:c8:44:b6:ca:51: 14:ec:fe:6b:dc:16:a8:22:60:73:f1:ed:bc:b1:b8:ba:dc:9d: 6b:88:79:0d:47:8a:34:2b:76:84:67:de:32:8d:e1:0d:ac:ba: 95:02:6a:c5:01:9c:26:63:fd:02:51:a1:b0:23:bf:36:bb:36: 6b:3c:cd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaICqFLyzCd5/mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZmFiZDIwYmQtYmQzMC00MjY2LTljNjktNmFmMGE2YjYzYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA+rSfSHm9qDP4cRhG2nZlfHVny+/rlq1t9Q SmnFPcrJ+KnYVScnkgaZkMsuTgeds/10JlHuI0A7w09Htu0EBKpazg5ujb1+g7bC z1txtiFgS5ZAwsilLuN/GpvM6qmDbM3NC5B3lqLKtxgkvaC8y8OiyaWOXgSRcutG KWJFYlFCz4w07DRiIrRCEZF8tScxbJVeczJNSifREkBmmeUJTnAyWlhMVb8VFgEY tpPZotTC6uNq37pwfheYONUYKzFY9McFE2DbLPuH5KcHuIldwemfoLzl+jWrlGpt vcCRvA1wA59kY6Rp18biyQVnnREX0deMMZyW2vR+i21LigLdmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb9amv/LehKxrI65GzmlnvTHvQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX2J76e5Hx8uhUK5m2FNzz8BNINUT0E0uSTez3avvywDE/P4Ojgb2TQ jtaAU9eAoDwO33DCR3CykuHSqVUmFVqxw1a6nQytI0OUtaWA0wKcF/OQyBr6rYge PeEnQ36MaxE+C2BBRrv2GK9PiMVgAfJhcBAqo9ahoeiMywJV/9w3KEDGwosu1QEZ JxtE08EXlygLImGcffjmfAaocfe9R1GVZ0NkUO++d7cW1SwKgJDb7nn0J34Uo9XG lKPeYR7HlzDIRLbKURTs/mvcFqgiYHPx7byxuLrcnWuIeQ1HijQrdoRn3jKN4Q2s upUCasUBnCZj/QJRobAjvza7Nms8zcg= -----END CERTIFICATE-----Generated at Sun Oct 25 03:14:16 2026 by rpki-client