$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa File: 689b5c65-97a6-3849-9191-76fc91a3818d.roa (raw, json) Hash identifier: TFXJMB4Y5RAP0Xc6aS+FpPEqjMth9DMmcMMsBPatFJA= Subject key identifier: 4B:2E:65:D2:CD:55:95:32:DB:4A:4D:88:9B:C6:71:BD:1F:CE:72:2D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976146EFF59E6D787514380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3360 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:14:6e:ff:59:e6:d7:87:51:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fbaf650-71f4-49b5-8266-1c68b9327d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:5c:c8:c7:9a:ae:c9:48:df:89:e4:be:a8: d2:35:c7:29:09:21:c5:e9:d0:28:93:2b:c9:dc:3b: 24:e2:cf:24:74:d1:1d:20:ef:9c:c8:cc:21:69:5b: 0b:2d:0f:6b:3a:d3:6d:f4:34:54:32:5a:77:75:8c: 84:5f:3b:85:92:59:fc:7a:46:a5:b3:62:82:3b:f0: 21:1a:28:9a:29:9b:89:40:36:61:9f:07:ad:63:cd: d6:f0:05:f1:28:63:56:48:bb:c8:15:5e:7d:eb:05: ca:7b:aa:72:cf:1a:78:1b:3c:7b:7f:93:44:93:fa: e9:52:1d:fd:da:40:2f:c5:6b:02:16:bc:92:f8:f1: a2:89:e3:34:ab:63:c5:e0:f0:85:27:a1:f7:58:4a: 32:48:e5:93:f3:d8:90:53:c2:7f:6e:a6:10:7a:39: 3e:4e:6d:86:47:f0:4e:2a:da:f7:11:3a:0e:89:0a: 36:25:b4:56:bb:91:27:58:66:07:7d:18:c3:58:bf: aa:61:4e:bd:8c:4c:39:98:72:c8:fd:f6:cb:54:33: f7:b2:14:11:90:c1:2b:d7:f3:1d:1b:62:49:74:07: bd:ff:6d:bf:07:77:51:37:76:6d:bb:e5:de:37:bc: 50:6f:56:71:11:e3:4a:ad:70:78:e2:13:1f:4a:7f: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2E:65:D2:CD:55:95:32:DB:4A:4D:88:9B:C6:71:BD:1F:CE:72:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/689b5c65-97a6-3849-9191-76fc91a3818d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d2:e4:fd:97:e1:fd:ad:50:38:45:a0:93:d0:bc:7b:9a:3a: 04:20:c2:90:cf:3c:02:cb:d4:52:0e:fa:1b:c8:66:c8:51:58: 4c:a2:51:13:7c:f6:4e:02:57:27:ca:ab:f4:86:8f:03:77:f5: 41:ae:31:4b:76:5e:9e:1a:d5:1b:7f:ab:fd:b9:68:e1:b1:30: dd:6a:c5:95:10:ef:3a:bb:2c:b2:ec:64:0d:58:25:57:8a:68: fc:5f:a7:51:0b:88:cb:26:f3:95:9c:35:16:ad:31:e7:35:0e: b6:7d:24:c2:2f:f2:ee:cb:21:e4:09:0b:a5:75:2e:e6:33:ff: a4:09:ac:94:f2:dc:95:2b:de:57:4f:f7:f2:dc:e0:53:fe:54: 47:6e:a5:e7:80:bc:13:3a:27:d5:07:16:03:ce:8e:89:87:5c: 41:c4:1c:ce:71:9f:4f:e1:cb:70:76:af:0d:f5:b2:e3:cf:e2: 26:79:e2:f8:9a:c4:62:c3:2f:fe:e5:a2:ae:3c:be:6a:cc:2f: d6:39:3d:5c:2f:76:bc:55:f5:fb:61:45:b5:ba:d3:ec:13:0c: 10:86:6c:b9:49:ca:11:f9:a9:9d:aa:88:0b:57:80:69:6c:da: 41:36:71:39:64:f9:16:c0:95:0b:03:5a:38:73:e9:f1:23:0a: 69:c1:8c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhRu/1nm14dRQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZiYWY2NTAtNzFmNC00OWI1LTgyNjYtMWM2OGI5MzI3ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVhcyMearslI34nkvqjSNccpCSHF6dAokyvJ 3Dsk4s8kdNEdIO+cyMwhaVsLLQ9rOtNt9DRUMlp3dYyEXzuFkln8ekals2KCO/Ah GiiaKZuJQDZhnwetY83W8AXxKGNWSLvIFV596wXKe6pyzxp4Gzx7f5NEk/rpUh39 2kAvxWsCFryS+PGiieM0q2PF4PCFJ6H3WEoySOWT89iQU8J/bqYQejk+Tm2GR/BO Ktr3EToOiQo2JbRWu5EnWGYHfRjDWL+qYU69jEw5mHLI/fbLVDP3shQRkMEr1/Md G2JJdAe9/22/B3dRN3Ztu+XeN7xQb1ZxEeNKrXB44hMfSn/qPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsuZdLNVZUy20pNiJvGcb0fznItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjg5YjVjNjUtOTdhNi0z ODQ5LTkxOTEtNzZmYzkxYTM4MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDS5P2X4f2tUDhFoJPQvHuaOgQgwpDPPALL1FIO+hvIZshRWEyiURN8 9k4CVyfKq/SGjwN39UGuMUt2Xp4a1Rt/q/25aOGxMN1qxZUQ7zq7LLLsZA1YJVeK aPxfp1ELiMsm85WcNRatMec1DrZ9JMIv8u7LIeQJC6V1LuYz/6QJrJTy3JUr3ldP 9/Lc4FP+VEdupeeAvBM6J9UHFgPOjomHXEHEHM5xn0/hy3B2rw31suPP4iZ54via xGLDL/7loq48vmrML9Y5PVwvdrxV9fthRbW60+wTDBCGbLlJyhH5qZ2qiAtXgGls 2kE2cTlk+RbAlQsDWjhz6fEjCmnBjJI= -----END CERTIFICATE-----Generated at Thu Oct 8 19:24:51 2026 by rpki-client