$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa File: a03d06b7-9d14-3c2a-860e-530f31cec66c.roa (raw, json) Hash identifier: 2KFMYPSSvAttmF6D30H7hJVVdAbHRkP6hgvyDPZwyVQ= Subject key identifier: E3:A8:DA:15:43:04:4F:D6:4B:06:09:DC:EF:F7:C5:3E:44:93:89:E1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F0672A27906B7883680808F40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 168.87.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a2:79:06:b7:88:36:80:80:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=fcbd0d5d-767a-453a-87cd-29e0af2d7cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:a3:5a:fd:3b:7b:fa:51:e1:f3:5d:fd:75: 28:a9:6d:f7:80:93:5d:c6:4a:f4:a4:58:af:e3:48: 94:1a:14:db:ee:d0:5c:30:64:f2:d9:39:a2:15:25: 07:15:55:51:7d:d8:f3:c2:68:0d:eb:36:be:73:36: d8:ac:28:f5:6b:ac:3c:e7:ad:11:f0:40:24:7b:b7: 00:69:2f:db:d1:d3:c4:63:9b:0f:44:af:f1:23:00: fe:9e:d0:13:64:44:16:28:1a:07:32:dc:35:a3:7d: 91:57:be:ba:68:0a:ba:00:7f:cc:dd:cd:c8:15:3f: 89:6c:e9:54:42:57:f7:d5:86:50:2e:f9:70:ba:05: 19:c5:a3:a3:8d:3e:f5:8f:9e:21:d1:90:ed:50:71: d2:c5:4a:50:2d:95:47:68:17:71:9c:9b:ee:af:47: 1a:8d:7f:dc:1c:7e:4b:f5:9f:b1:98:d2:18:4b:82: d8:2d:bd:9f:8f:86:04:8c:ff:28:48:d8:b5:11:58: d3:8b:cb:b5:a0:82:7e:ce:c7:8b:6f:c7:0e:b4:ca: 92:29:4e:9b:cf:ff:78:6a:ca:4b:58:74:4e:0f:8c: 98:43:60:94:5f:67:f7:4d:c0:7a:84:6f:16:36:51: 39:21:6d:de:98:4e:12:e7:d1:2c:67:25:f5:33:aa: b4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A8:DA:15:43:04:4F:D6:4B:06:09:DC:EF:F7:C5:3E:44:93:89:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a03d06b7-9d14-3c2a-860e-530f31cec66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bf:ef:3d:a4:bd:63:02:7d:e5:f7:3b:8d:8d:3d:6d:e1:f9: 7a:e4:b3:0f:66:43:b6:6a:b0:b2:07:58:bc:d0:62:ae:84:6d: af:9b:8a:8f:eb:49:b1:9d:96:8c:a0:0b:fb:1b:6f:36:03:78: ec:e2:d4:fa:8d:ca:7e:aa:7e:7e:af:62:42:ba:fa:71:3b:6d: 7b:b1:36:45:42:b5:5b:b3:43:00:dd:4d:00:7b:e8:b8:2b:ef: 2f:89:1b:5c:43:1a:1a:fa:5d:6b:1b:ec:e6:df:ff:19:2c:a3: a7:88:c1:e8:92:42:f2:75:5a:da:68:1b:f2:90:c6:3b:d1:51: 91:f4:26:a4:6f:65:a3:a3:77:fa:36:eb:02:50:ff:1b:a4:06: ee:49:ca:dd:d8:ac:ca:9b:b0:fe:f8:fe:9d:8c:7f:17:2f:e1: 86:ae:f1:b8:b6:03:82:36:96:3e:01:b5:67:1f:fa:c5:ef:9a: 46:a5:01:bb:91:41:30:4d:3a:5d:a0:7f:f7:e4:63:47:19:51: 49:43:3e:e8:4a:a3:11:ec:6c:d9:3f:86:b2:ca:18:06:b3:c0: ae:d9:4d:b6:f1:28:ee:bf:23:be:f6:f5:60:70:c1:6b:2d:cb: 39:8d:30:93:00:0e:ad:c4:c7:27:67:e5:e8:fb:55:c3:e5:bf: 4c:0f:12:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqJ5BreINoCAj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNiZDBkNWQtNzY3YS00NTNhLTg3Y2QtMjllMGFmMmQ3Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVGjWv07e/pR4fNd/XUoqW33gJNdxkr0pFiv 40iUGhTb7tBcMGTy2TmiFSUHFVVRfdjzwmgN6za+czbYrCj1a6w8560R8EAke7cA aS/b0dPEY5sPRK/xIwD+ntATZEQWKBoHMtw1o32RV766aAq6AH/M3c3IFT+JbOlU Qlf31YZQLvlwugUZxaOjjT71j54h0ZDtUHHSxUpQLZVHaBdxnJvur0cajX/cHH5L 9Z+xmNIYS4LYLb2fj4YEjP8oSNi1EVjTi8u1oIJ+zseLb8cOtMqSKU6bz/94aspL WHROD4yYQ2CUX2f3TcB6hG8WNlE5IW3emE4S59EsZyX1M6q0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOo2hVDBE/WSwYJ3O/3xT5Ek4nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTAzZDA2YjctOWQxNC0z YzJhLTg2MGUtNTMwZjMxY2VjNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW/7z2kvWMCfeX3O42NPW3h+Xrksw9mQ7ZqsLIHWLzQYq6Eba+bio/r SbGdloygC/sbbzYDeOzi1PqNyn6qfn6vYkK6+nE7bXuxNkVCtVuzQwDdTQB76Lgr 7y+JG1xDGhr6XWsb7Obf/xkso6eIweiSQvJ1WtpoG/KQxjvRUZH0JqRvZaOjd/o2 6wJQ/xukBu5Jyt3YrMqbsP74/p2Mfxcv4Yau8bi2A4I2lj4BtWcf+sXvmkalAbuR QTBNOl2gf/fkY0cZUUlDPuhKoxHsbNk/hrLKGAazwK7ZTbbxKO6/I7729WBwwWst yzmNMJMADq3Exydn5ej7VcPlv0wPEg4= -----END CERTIFICATE-----Generated at Wed Sep 9 00:51:33 2026 by rpki-client