$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa File: 8b41c2fa-e50f-3a94-9a50-475a88935f33.roa (raw, json) Hash identifier: uOhpkBBUBfg6nMsa+9cf1jeJZVjOZcC8QimyCTs6jjk= Subject key identifier: DA:68:5F:44:8D:64:0F:0B:90:36:0A:2D:4A:D1:21:C7:A9:6F:99:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6873BC0ABE9F8653078E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:73:bc:0a:be:9f:86:53:07:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=e4a69ce6-b52a-4880-8cb6-009a662204b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:53:91:fc:6e:dc:9c:09:83:aa:e2:aa:60: 94:9e:b4:2c:6f:53:ce:3b:8d:ab:40:ba:1a:4c:ee: 30:2f:7c:72:5c:3f:84:19:b0:3f:01:e4:c2:ea:4a: 08:29:92:53:ed:7b:48:be:3b:b1:e9:8d:99:8d:43: 7a:f5:af:17:a8:58:2d:00:79:a3:8b:07:08:8d:b0: 39:04:bc:15:1f:d8:da:1f:52:5b:a2:20:e4:d6:46: d8:9d:a5:ca:71:b6:4e:22:30:ed:31:7a:70:70:90: d2:c6:1f:86:2c:15:22:4b:2e:ba:20:dc:6b:24:66: 4f:ef:36:a3:3b:4a:c9:f9:0c:48:ef:6e:58:d1:7e: c1:13:d5:6f:68:92:8d:7c:da:58:d1:91:5e:4c:79: 5e:e0:47:40:4b:c9:9d:b4:fa:7d:08:9d:71:43:ed: 0d:a1:eb:bd:73:0b:f0:92:0b:ef:3e:a6:87:54:2f: 13:7e:15:24:64:02:e7:68:3b:89:5e:49:07:fb:5b: 63:02:66:ee:43:a9:ee:5e:b3:de:63:32:0d:62:61: d3:a1:64:9a:60:02:ab:64:aa:0c:b9:ae:c8:95:59: 8e:54:d4:b4:44:eb:26:7b:b9:5d:3b:1e:10:a4:fb: ba:92:a2:26:c3:09:fa:38:9e:b3:d4:b1:84:10:22: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:5F:44:8D:64:0F:0B:90:36:0A:2D:4A:D1:21:C7:A9:6F:99:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b41c2fa-e50f-3a94-9a50-475a88935f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:a7:13:e5:cc:4b:d9:80:7d:55:45:e8:eb:ab:d7:96:79: 0d:88:4b:6d:9c:5f:7c:f0:4d:5a:ea:6a:98:4d:ec:3e:66:85: b2:db:75:56:0d:4b:d3:00:fa:a8:fa:9f:ae:4c:17:14:67:f2: e5:09:3f:8d:cd:56:80:3f:24:54:b8:90:62:25:24:ab:12:60: b1:69:be:cb:ca:09:e3:ba:6c:fe:89:c7:2c:0d:4c:e3:d2:07: c3:da:1e:10:5e:e0:77:4c:08:cf:fe:54:92:f1:b2:37:83:19: 4d:b0:d0:56:67:04:59:9d:d6:a7:33:5b:cf:76:50:99:59:27: 3a:6f:15:c2:63:6a:d0:57:ef:2d:3a:1e:1f:1b:d5:bf:4c:da: 99:45:ff:7f:e8:c8:3b:52:aa:25:f4:74:b2:04:ad:29:a7:e7: ee:7a:da:24:57:88:3f:12:e5:d0:b3:23:20:2c:29:f1:6a:5b: 01:af:88:5f:2f:c3:9b:31:1e:50:e0:c5:c8:1b:ad:09:46:52: a8:87:85:04:7f:44:bf:24:97:09:06:51:5d:27:a2:0a:f1:c3: 5e:47:cb:5d:40:9f:c8:43:b0:28:2f:f2:f0:9a:3f:eb:f3:b2: fc:8c:88:0f:64:e5:7f:27:02:94:32:74:f8:4f:e2:3d:f5:ce: bf:49:10:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHO8Cr6fhlMHjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTRhNjljZTYtYjUyYS00ODgwLThjYjYtMDA5YTY2MjIwNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2xTkfxu3JwJg6riqmCUnrQsb1POO42rQLoa TO4wL3xyXD+EGbA/AeTC6koIKZJT7XtIvjux6Y2ZjUN69a8XqFgtAHmjiwcIjbA5 BLwVH9jaH1JboiDk1kbYnaXKcbZOIjDtMXpwcJDSxh+GLBUiSy66INxrJGZP7zaj O0rJ+QxI725Y0X7BE9VvaJKNfNpY0ZFeTHle4EdAS8mdtPp9CJ1xQ+0Noeu9cwvw kgvvPqaHVC8TfhUkZALnaDuJXkkH+1tjAmbuQ6nuXrPeYzINYmHToWSaYAKrZKoM ua7IlVmOVNS0ROsme7ldOx4QpPu6kqImwwn6OJ6z1LGEECICvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpoX0SNZA8LkDYKLUrRIcepb5kwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGI0MWMyZmEtZTUwZi0z YTk0LTlhNTAtNDc1YTg4OTM1ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKpxPlzEvZgH1VRejrq9eWeQ2IS22cX3zwTVrqaphN7D5mhbLbdVYN S9MA+qj6n65MFxRn8uUJP43NVoA/JFS4kGIlJKsSYLFpvsvKCeO6bP6JxywNTOPS B8PaHhBe4HdMCM/+VJLxsjeDGU2w0FZnBFmd1qczW892UJlZJzpvFcJjatBX7y06 Hh8b1b9M2plF/3/oyDtSqiX0dLIErSmn5+562iRXiD8S5dCzIyAsKfFqWwGviF8v w5sxHlDgxcgbrQlGUqiHhQR/RL8klwkGUV0nogrxw15Hy11An8hDsCgv8vCaP+vz svyMiA9k5X8nApQydPhP4j31zr9JELw= -----END CERTIFICATE-----Generated at Sat Oct 24 14:58:48 2026 by rpki-client