$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa File: 651c78c9-0fab-33dc-9853-a471d8f178c1.roa (raw, json) Hash identifier: i3FpYhL9LLNmxK1mK5KCXyEC08fvR/TMJ45eTgqgAXU= Subject key identifier: 0B:E9:43:A2:B2:41:65:A2:98:52:26:85:7F:E5:20:2C:CF:29:F1:D7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2957BEAC594F0FB37E7C1200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3356 IP address blocks: 168.87.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:be:ac:59:4f:0f:b3:7e:7c:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=cfb6f5ec-de29-457c-a1b5-ff2dc0aad635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:f9:96:c1:61:17:9d:ce:d0:e6:6d:94:2f: 68:5e:b1:04:9e:c5:bd:85:e9:c3:20:13:0f:ab:b0: 24:99:14:fa:4d:f1:8e:d9:29:e4:12:c9:5d:89:4a: b5:79:0d:f9:fb:a9:1d:d6:b7:ac:8c:3b:04:6f:5a: 52:76:2e:51:5f:5e:bf:7c:c6:2f:f8:1d:7e:3d:2f: 1f:78:0a:5b:28:f1:c4:30:18:09:f3:20:29:75:19: 18:d2:ad:83:29:9b:66:ff:32:9b:f4:ad:7e:41:eb: c7:ac:28:2a:e2:f3:8f:bb:ff:f5:cb:4f:0f:32:5c: 3b:0b:16:72:57:32:ea:a9:57:8d:e1:fd:a6:dc:bd: 21:45:0d:f3:db:1d:9b:62:de:67:83:95:89:44:1f: 79:8e:2e:bf:99:1b:92:53:90:1b:00:c8:40:2e:49: fa:44:3e:50:fc:44:3c:d5:3c:80:18:65:c5:02:fc: d8:ac:9d:ee:22:bd:fc:8d:8c:a7:50:49:0f:b6:f6: 78:c8:5f:93:dd:ca:22:ec:7b:8b:e6:54:aa:fd:63: 94:50:f2:e1:3d:5b:24:98:4c:29:14:c8:79:d7:32: 83:22:f3:a1:b0:3d:f4:67:22:1f:1a:1c:91:6e:46: f2:12:de:8e:59:26:98:ae:6a:e1:e9:87:21:0e:5d: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E9:43:A2:B2:41:65:A2:98:52:26:85:7F:E5:20:2C:CF:29:F1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/651c78c9-0fab-33dc-9853-a471d8f178c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:31:f6:ee:b1:8a:1c:f3:56:5b:0d:5b:35:41:e9:12:43:d8: 32:ab:27:3e:65:60:86:ba:44:5a:fc:af:8e:19:93:f7:d8:8e: 16:fb:7e:5d:3e:7f:0f:1a:ce:6e:cd:1f:72:61:79:bb:28:70: aa:25:c0:e1:f6:fe:9d:1c:72:ac:21:05:00:8b:69:3c:9b:6a: 42:9c:0c:4e:76:e9:11:98:6a:1d:7c:80:04:c8:f8:e9:2f:54: 97:d7:51:4a:95:1e:5a:da:ad:bf:02:00:d3:cf:7a:75:2a:43: 44:ad:c2:4a:db:49:bc:a2:81:8a:0c:30:9e:1a:d3:e1:81:a9: 02:d0:3f:1e:88:49:a9:b6:f3:92:bc:67:b0:6c:63:76:81:15: fd:32:72:b9:1b:7a:78:e2:57:e2:be:6d:a4:77:7f:eb:5c:9f: 60:89:53:f5:48:16:f4:d9:9a:a3:85:08:94:09:54:25:62:c2: a7:ca:eb:07:d3:cb:3d:6c:5c:50:96:a4:d8:15:0a:aa:a7:b3: 47:0b:24:6a:59:5f:1f:eb:14:f3:49:38:9b:0a:59:49:3c:29: 33:7c:d4:ce:08:4a:bf:5e:e4:0f:12:57:e8:b9:ad:47:cd:b7: 5e:7d:44:44:4f:71:95:b9:b6:d1:43:97:65:b9:ed:96:b9:2a: f2:e7:19:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV76sWU8Ps358EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk Y2ZiNmY1ZWMtZGUyOS00NTdjLWExYjUtZmYyZGMwYWFkNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeH5lsFhF53O0OZtlC9oXrEEnsW9henDIBMP q7AkmRT6TfGO2SnkEsldiUq1eQ35+6kd1resjDsEb1pSdi5RX16/fMYv+B1+PS8f eApbKPHEMBgJ8yApdRkY0q2DKZtm/zKb9K1+QevHrCgq4vOPu//1y08PMlw7CxZy VzLqqVeN4f2m3L0hRQ3z2x2bYt5ng5WJRB95ji6/mRuSU5AbAMhALkn6RD5Q/EQ8 1TyAGGXFAvzYrJ3uIr38jYynUEkPtvZ4yF+T3coi7HuL5lSq/WOUUPLhPVskmEwp FMh51zKDIvOhsD30ZyIfGhyRbkbyEt6OWSaYrmrh6YchDl2+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvpQ6KyQWWimFImhX/lICzPKfHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjUxYzc4YzktMGZhYi0z M2RjLTk4NTMtYTQ3MWQ4ZjE3OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4x9u6xihzzVlsNWzVB6RJD2DKrJz5lYIa6RFr8r44Zk/fYjhb7fl0+ fw8azm7NH3JhebsocKolwOH2/p0ccqwhBQCLaTybakKcDE526RGYah18gATI+Okv VJfXUUqVHlrarb8CANPPenUqQ0StwkrbSbyigYoMMJ4a0+GBqQLQPx6ISam285K8 Z7BsY3aBFf0ycrkbenjiV+K+baR3f+tcn2CJU/VIFvTZmqOFCJQJVCViwqfK6wfT yz1sXFCWpNgVCqqns0cLJGpZXx/rFPNJOJsKWUk8KTN81M4ISr9e5A8SV+i5rUfN t159RERPcZW5ttFDl2W57Za5KvLnGYA= -----END CERTIFICATE-----Generated at Tue Sep 22 17:05:07 2026 by rpki-client