$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa File: 9b298238-0699-38a3-b6f8-c3d43911f009.roa (raw, json) Hash identifier: 6b8sq0/6TGTEcInOfLvox9BtOgsWpjJ36fjulhN0+ps= Subject key identifier: C2:A1:95:6D:92:43:D7:A7:A7:FF:CA:F9:35:D5:E5:EF:CA:D8:30:68 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EE0C1E7B7E4997CBA8835B648 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 168.87.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:e7:b7:e4:99:7c:ba:88:35:b6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=bd705da7-73af-460b-9cfb-eb50f7a528ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d8:8c:d0:db:10:ea:a0:f0:ee:f0:2e:1e:18: 8e:7e:3c:cf:5f:9c:fd:6a:c9:87:93:14:a5:51:92: 8d:5c:75:17:a4:32:33:f7:6e:54:5c:45:ae:ce:33: ed:13:b9:ef:0e:27:73:92:91:91:58:3f:87:b4:3c: 08:c9:e6:03:a7:df:9c:df:5f:68:3f:4c:27:1a:ff: 28:85:e4:c4:db:a8:3e:82:f5:4a:2c:b0:b1:b8:5e: 78:1d:54:7e:3e:18:d8:e8:17:4f:e5:3a:b8:ed:51: 13:23:1e:de:c4:81:a6:3c:93:06:7e:a0:7e:12:67: 30:34:91:94:1f:10:02:3e:8d:81:dd:35:c8:6b:9a: a6:1b:2a:ab:6f:fc:74:84:70:dd:31:27:f7:cd:ef: c8:76:c5:d7:1b:d7:11:cb:c1:f1:1a:b0:da:71:b2: 1a:b8:96:5f:d4:62:53:69:f2:b6:0f:77:64:9e:3d: 7d:63:36:b9:81:2f:fd:ee:f5:59:24:bb:89:d1:e6: b3:b9:a2:3f:fb:f7:96:42:a1:e3:42:46:af:d8:00: 68:37:d0:10:7d:ef:c4:c6:60:65:71:b0:6b:30:37: 25:77:86:78:18:4a:f3:7d:25:14:c1:57:41:88:51: d9:a1:2d:f4:fa:4d:a5:1e:dc:16:73:b1:6c:cd:29: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:95:6D:92:43:D7:A7:A7:FF:CA:F9:35:D5:E5:EF:CA:D8:30:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b298238-0699-38a3-b6f8-c3d43911f009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:58:2f:b5:54:9f:f2:26:b5:33:6f:46:49:77:3e:5b:88:1a: c1:79:4e:aa:1b:4c:32:5a:fa:17:14:52:70:12:c8:ed:8d:bc: 88:05:da:d5:4d:5c:f1:ce:7f:b3:aa:84:68:9f:97:97:ca:f3: cb:f6:66:f2:cd:53:6d:41:c4:84:2f:41:a7:c9:03:6f:19:1c: 87:13:97:87:25:cc:c6:e4:3b:99:b9:d4:19:fe:63:c0:6f:55: e1:b7:91:3b:6c:b4:94:23:b8:f8:af:81:d7:e2:52:e9:de:fe: 71:69:16:36:db:98:16:09:8d:d6:5c:ba:da:f1:5a:01:ce:d8: c5:f6:b5:78:8d:23:ca:90:23:8b:b2:c8:4d:e2:3f:72:e4:fb: 3a:4a:fd:12:04:54:89:49:85:6d:a8:f9:3b:74:16:21:eb:b2: 58:51:82:fc:e5:f5:28:03:98:b4:57:aa:e4:ae:fe:7f:61:6d: 2a:48:33:c4:7d:63:7c:03:b1:ac:70:91:d3:5b:9c:6a:83:85: f8:5a:64:c5:0c:29:58:65:6a:6e:fa:70:70:86:2b:f9:68:08: bf:c8:31:e8:dd:13:85:3a:b1:63:8e:c5:20:1a:07:3d:cf:e5: ef:92:28:1d:c0:17:82:67:bf:d3:a5:4b:72:ee:9f:a1:4b:1b: 88:53:cc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwee35Jl8uog1tkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YmQ3MDVkYTctNzNhZi00NjBiLTljZmItZWI1MGY3YTUyOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9iM0NsQ6qDw7vAuHhiOfjzPX5z9asmHkxSl UZKNXHUXpDIz925UXEWuzjPtE7nvDidzkpGRWD+HtDwIyeYDp9+c319oP0wnGv8o heTE26g+gvVKLLCxuF54HVR+PhjY6BdP5Tq47VETIx7exIGmPJMGfqB+EmcwNJGU HxACPo2B3TXIa5qmGyqrb/x0hHDdMSf3ze/IdsXXG9cRy8HxGrDacbIauJZf1GJT afK2D3dknj19Yza5gS/97vVZJLuJ0eazuaI/+/eWQqHjQkav2ABoN9AQfe/ExmBl cbBrMDcld4Z4GErzfSUUwVdBiFHZoS30+k2lHtwWc7FszSmVWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKhlW2SQ9enp//K+TXV5e/K2DBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWIyOTgyMzgtMDY5OS0z OGEzLWI2ZjgtYzNkNDM5MTFmMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFYL7VUn/ImtTNvRkl3PluIGsF5TqobTDJa+hcUUnASyO2NvIgF2tVN XPHOf7OqhGifl5fK88v2ZvLNU21BxIQvQafJA28ZHIcTl4clzMbkO5m51Bn+Y8Bv VeG3kTtstJQjuPivgdfiUune/nFpFjbbmBYJjdZcutrxWgHO2MX2tXiNI8qQI4uy yE3iP3Lk+zpK/RIEVIlJhW2o+Tt0FiHrslhRgvzl9SgDmLRXquSu/n9hbSpIM8R9 Y3wDsaxwkdNbnGqDhfhaZMUMKVhlam76cHCGK/loCL/IMejdE4U6sWOOxSAaBz3P 5e+SKB3AF4Jnv9OlS3Lun6FLG4hTzOA= -----END CERTIFICATE-----Generated at Mon Oct 5 13:16:47 2026 by rpki-client