$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b23a434-03b9-32e9-9572-4f4cdb91baa1.roa File: 9b23a434-03b9-32e9-9572-4f4cdb91baa1.roa (raw, json) Hash identifier: msq/5wWXtr6PCwz4A9KxyFnl6JSf/BWn7K9CIdZVBVY= Subject key identifier: 32:B9:75:0C:F1:06:74:4D:7F:0E:54:47:60:E2:56:2A:66:10:55:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EE3BEE68469E27A3326DE0490 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b23a434-03b9-32e9-9572-4f4cdb91baa1.roa Signing time: Wed 19 Aug 2026 14:41:39 +0000 ROA not before: Wed 19 Aug 2026 14:41:39 +0000 ROA not after: Tue 17 Nov 2026 15:41:39 +0000 asID: 3360 IP address blocks: 168.87.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:be:e6:84:69:e2:7a:33:26:de:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 19 14:41:39 2026 GMT Not After : Nov 17 15:41:39 2026 GMT Subject: CN=0c2dee5a-e294-4dcd-9e9a-b2d2cb34eabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:01:c8:94:9c:94:54:d5:4b:09:e9:47:1d: 5f:34:a2:a8:50:70:1c:45:9a:16:6c:78:a3:68:2d: 7b:45:d6:14:fe:c3:bf:97:95:e0:53:42:57:7a:a5: 02:60:e3:79:5e:5c:50:cc:b9:a4:03:d2:51:f4:e7: 00:e6:08:1b:f7:61:b0:2a:f3:7e:e6:1c:76:34:7b: 3b:d7:52:14:4e:48:91:c8:20:75:a5:c1:48:32:57: c7:10:b2:2a:e8:ab:4b:48:33:aa:1f:f2:af:d6:72: 0d:62:ff:a4:0f:58:03:d2:36:ba:44:59:24:b4:bc: 64:15:1e:b6:a5:9e:1e:99:42:15:97:f7:8e:2a:db: da:64:2b:51:31:bd:cc:66:7e:59:8a:71:2f:5c:a6: f3:53:07:8c:69:3b:44:84:d9:fc:97:6a:2c:98:94: eb:a0:24:f9:75:29:c0:b8:c5:a7:10:6a:a8:1b:3d: ce:6a:5b:ca:9a:cc:d5:03:19:d1:91:ad:8c:ba:69: 55:96:a9:1a:12:75:6f:f9:19:55:33:85:56:cc:55: 9c:84:35:d7:72:e7:9c:9c:a1:3e:13:66:cd:0d:6c: 90:30:5a:64:9b:97:ac:8f:42:bc:4b:42:f1:5e:0c: 81:ca:21:e3:e8:97:1d:2d:46:e5:28:ff:e3:47:ca: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B9:75:0C:F1:06:74:4D:7F:0E:54:47:60:E2:56:2A:66:10:55:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b23a434-03b9-32e9-9572-4f4cdb91baa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e2:81:c9:82:80:34:e3:04:bc:98:c0:92:7a:8d:4c:0e:84: c9:68:7d:98:af:c8:84:96:59:7d:00:47:49:30:4e:1d:61:ea: 1a:bc:43:4d:80:4f:b9:35:96:19:c6:86:c3:ff:ef:89:5b:5b: 06:41:a1:ce:f7:e5:84:0c:b0:3a:ff:ef:fb:72:17:7b:44:cd: 60:50:23:27:a2:54:9b:c4:6e:58:76:90:1d:ac:b3:53:6b:18: bf:07:bd:30:bc:ba:65:78:92:0c:2f:a4:06:35:14:5c:fc:80: aa:db:c6:fc:61:1a:2a:ba:c8:0c:d5:a6:b9:37:4d:8c:cb:8e: b4:d0:b0:92:9f:2a:d8:cb:46:38:0c:dd:e2:c1:00:5e:21:f8: 36:88:b7:5b:93:c9:54:af:7d:2c:73:f0:ff:54:03:af:60:be: e2:fb:e4:fc:73:5e:bb:f9:0c:e7:86:df:23:54:30:68:42:77: b5:b0:23:19:0b:03:23:c9:5d:67:f7:53:3d:e1:6b:95:d8:a5: 48:5c:1e:8b:20:63:10:b9:06:58:fa:61:54:d4:75:da:af:8f: 3c:35:fb:5a:25:1a:a6:60:89:2c:20:44:42:f5:46:84:82:b0: ff:8a:55:91:d6:cf:b1:f8:f4:6b:6d:ea:7a:9d:e7:f5:42:02: 8d:18:a3:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jvuaEaeJ6MybeBJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgxOTE0NDEzOVoXDTI2MTExNzE1NDEzOVowLzEtMCsGA1UEAxMk MGMyZGVlNWEtZTI5NC00ZGNkLTllOWEtYjJkMmNiMzRlYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr8ByJSclFTVSwnpRx1fNKKoUHAcRZoWbHij aC17RdYU/sO/l5XgU0JXeqUCYON5XlxQzLmkA9JR9OcA5ggb92GwKvN+5hx2NHs7 11IUTkiRyCB1pcFIMlfHELIq6KtLSDOqH/Kv1nINYv+kD1gD0ja6RFkktLxkFR62 pZ4emUIVl/eOKtvaZCtRMb3MZn5ZinEvXKbzUweMaTtEhNn8l2osmJTroCT5dSnA uMWnEGqoGz3OalvKmszVAxnRka2MumlVlqkaEnVv+RlVM4VWzFWchDXXcuecnKE+ E2bNDWyQMFpkm5esj0K8S0LxXgyByiHj6JcdLUblKP/jR8pN0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK5dQzxBnRNfw5UR2DiVipmEFUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWIyM2E0MzQtMDNiOS0z MmU5LTk1NzItNGY0Y2RiOTFiYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDigcmCgDTjBLyYwJJ6jUwOhMlofZivyISWWX0AR0kwTh1h6hq8Q02A T7k1lhnGhsP/74lbWwZBoc735YQMsDr/7/tyF3tEzWBQIyeiVJvEblh2kB2ss1Nr GL8HvTC8umV4kgwvpAY1FFz8gKrbxvxhGiq6yAzVprk3TYzLjrTQsJKfKtjLRjgM 3eLBAF4h+DaIt1uTyVSvfSxz8P9UA69gvuL75PxzXrv5DOeG3yNUMGhCd7WwIxkL AyPJXWf3Uz3ha5XYpUhcHosgYxC5Blj6YVTUddqvjzw1+1olGqZgiSwgREL1RoSC sP+KVZHWz7H49Gtt6nqd5/VCAo0Yo7A= -----END CERTIFICATE-----Generated at Mon Aug 24 13:22:17 2026 by rpki-client