$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/738dc8ae-7786-32cf-8a0c-870b5f93179a.roa File: 738dc8ae-7786-32cf-8a0c-870b5f93179a.roa (raw, json) Hash identifier: yJ9Gn+Vpu7CS9mbGjNrWpe0/sJXf6tsqP27B7glgcMc= Subject key identifier: C7:06:10:2F:D3:40:21:3A:2C:C5:14:D9:47:E0:02:C5:EC:0E:BA:C0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6880D9CD34C63E68B7BD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/738dc8ae-7786-32cf-8a0c-870b5f93179a.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 202 IP address blocks: 168.87.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:80:d9:cd:34:c6:3e:68:b7:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=1f81a89e-0433-4d3e-8a4f-64bd0a7652e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:04:40:bd:00:80:d5:50:71:0c:fe:fe:d7: ce:d8:04:b8:8c:ec:61:84:49:9e:a7:da:26:52:b5: df:17:99:45:b6:91:be:e4:41:ce:8d:9d:e1:04:a4: f1:6b:46:2f:63:55:81:ec:13:a2:d0:9c:52:9b:4f: 3a:ce:3e:cd:30:9c:1c:09:fa:2b:0b:32:0a:03:45: dd:95:a3:cd:ce:04:cf:91:b8:ec:60:b3:76:07:cf: eb:b1:b3:bf:fa:4e:65:cf:64:f5:c2:02:34:84:d9: 5c:89:ca:7e:d4:e5:5b:86:80:50:6b:2c:3d:24:12: 94:f2:10:29:45:40:27:d3:c8:c5:f9:0a:5a:bd:1e: d0:67:6f:a6:36:f2:54:86:94:d5:59:d4:c7:e0:e2: 3c:4e:b7:7a:1d:9d:2f:22:24:30:df:50:a6:0d:80: a6:70:15:d1:4e:b9:27:0a:14:2a:65:0f:36:02:36: b7:51:29:0f:d0:96:1f:3e:a0:85:c9:6e:e6:3d:ed: 1d:ab:c3:e3:85:c1:47:cc:24:88:13:41:81:39:c8: ff:9e:8c:82:e9:8d:71:af:85:8c:b5:1a:f0:51:2b: 9f:8d:fb:95:42:57:19:b0:33:93:6b:e8:64:94:ab: 5c:c0:13:40:26:39:a9:b3:61:98:83:b1:64:0b:ad: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:06:10:2F:D3:40:21:3A:2C:C5:14:D9:47:E0:02:C5:EC:0E:BA:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/738dc8ae-7786-32cf-8a0c-870b5f93179a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:aa:13:14:ff:a0:5a:20:1e:af:cd:df:e0:d8:05:bf:99: c8:d5:6e:07:af:ec:7c:59:98:c0:a3:95:06:1f:53:74:e1:6e: 5d:5f:98:28:6c:4c:60:b4:0a:32:c9:89:82:8d:e2:a5:a8:8e: b5:31:e1:0f:af:d9:a3:98:0a:6d:f3:02:35:e8:70:c6:a4:73: 18:fb:01:f7:a0:cc:9f:c1:5b:27:40:85:4d:9a:ad:d3:4a:78: 26:6f:63:a9:c0:a5:d2:69:35:9d:7f:b7:51:47:76:37:92:60: 45:0a:44:e3:13:d0:22:97:26:b7:d0:b7:6e:f6:7d:80:20:b2: 80:2d:c4:12:fe:58:ed:78:ec:ad:54:81:6a:22:49:c2:c4:50: c0:b4:b1:95:c6:10:b2:49:70:27:31:b0:d4:37:03:df:6f:99: 3b:0c:a5:65:53:30:26:ce:c0:21:b4:24:b2:13:2f:0d:3d:ee: 58:d0:d0:76:dc:5c:c1:2a:6b:30:d3:6b:6b:15:30:49:eb:68: 54:e0:b8:9c:ed:73:70:1e:78:f1:0f:4d:ff:48:01:67:db:7e: 3b:94:54:a8:d0:8d:f3:7b:92:bd:df:83:fe:7d:9d:d5:5c:2f: 29:41:1c:d6:78:a9:ca:6c:4d:73:8d:83:68:b4:8f:23:e5:57: 41:aa:46:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIDZzTTGPmi3vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MWY4MWE4OWUtMDQzMy00ZDNlLThhNGYtNjRiZDBhNzY1MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCIEQL0AgNVQcQz+/tfO2AS4jOxhhEmep9om UrXfF5lFtpG+5EHOjZ3hBKTxa0YvY1WB7BOi0JxSm086zj7NMJwcCforCzIKA0Xd laPNzgTPkbjsYLN2B8/rsbO/+k5lz2T1wgI0hNlcicp+1OVbhoBQayw9JBKU8hAp RUAn08jF+QpavR7QZ2+mNvJUhpTVWdTH4OI8Trd6HZ0vIiQw31CmDYCmcBXRTrkn ChQqZQ82Aja3USkP0JYfPqCFyW7mPe0dq8PjhcFHzCSIE0GBOcj/noyC6Y1xr4WM tRrwUSufjfuVQlcZsDOTa+hklKtcwBNAJjmps2GYg7FkC60ZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcGEC/TQCE6LMUU2UfgAsXsDrrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzM4ZGM4YWUtNzc4Ni0z MmNmLThhMGMtODcwYjVmOTMxNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV2qhMU/6BaIB6vzd/g2AW/mcjVbgev7HxZmMCjlQYfU3Thbl1fmChs TGC0CjLJiYKN4qWojrUx4Q+v2aOYCm3zAjXocMakcxj7AfegzJ/BWydAhU2ardNK eCZvY6nApdJpNZ1/t1FHdjeSYEUKROMT0CKXJrfQt272fYAgsoAtxBL+WO147K1U gWoiScLEUMC0sZXGELJJcCcxsNQ3A99vmTsMpWVTMCbOwCG0JLITLw097ljQ0Hbc XMEqazDTa2sVMEnraFTguJztc3AeePEPTf9IAWfbfjuUVKjQjfN7kr3fg/59ndVc LylBHNZ4qcpsTXONg2i0jyPlV0GqRtw= -----END CERTIFICATE-----Generated at Sat Oct 24 13:02:16 2026 by rpki-client