$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33572f5-1be8-397c-b3c7-7cc6fcc208f4.roa File: a33572f5-1be8-397c-b3c7-7cc6fcc208f4.roa (raw, json) Hash identifier: 8xIV4It3QKA7mLS055r933zhueZnpYE1OxG5C2HM1Ig= Subject key identifier: 98:FF:16:58:76:18:9D:FD:6F:76:CB:B0:94:21:1B:11:46:3E:45:6A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EE3BF99A88F5DD63597CF0DC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33572f5-1be8-397c-b3c7-7cc6fcc208f4.roa Signing time: Wed 19 Aug 2026 14:43:04 +0000 ROA not before: Wed 19 Aug 2026 14:43:04 +0000 ROA not after: Tue 17 Nov 2026 15:43:04 +0000 asID: 203 IP address blocks: 168.87.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:bf:99:a8:8f:5d:d6:35:97:cf:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 19 14:43:04 2026 GMT Not After : Nov 17 15:43:04 2026 GMT Subject: CN=4b8b61a5-20bf-4b79-a030-f315fdd6cebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:cb:09:87:94:13:ec:1c:f8:fb:12:f8:db: ce:79:dd:8f:25:80:b7:bf:61:de:86:be:af:5d:4c: b9:df:73:87:a3:58:4d:37:ea:a3:67:dc:73:44:e8: a9:fc:ab:d5:3d:99:d5:9c:27:1a:0d:30:33:30:00: c1:91:e0:54:c3:07:76:ca:b3:99:d8:6d:cb:26:c6: 5a:0c:a1:1d:fe:be:bc:a8:57:c1:9c:8b:bc:2f:86: 99:88:f8:57:86:9c:ec:56:c7:b7:b7:e6:55:af:f8: cf:af:21:44:38:67:ea:a8:c3:11:d6:67:9f:e6:eb: 95:85:1d:d2:c5:37:8e:3f:ea:6a:75:05:b3:46:b1: 6f:90:fc:07:22:59:ba:8e:0d:84:de:ef:7d:e0:14: 18:a5:35:b0:fb:2c:bb:83:f0:00:6a:f5:0a:9c:37: 06:ca:8c:73:15:30:03:31:e9:85:97:b2:86:a7:5e: ac:8d:44:8e:13:41:2d:88:95:65:c2:0b:70:37:1b: 95:57:91:63:8c:48:3f:42:ba:1f:a7:55:21:cc:87: d6:fd:93:48:d7:d0:96:48:7f:6f:2a:4c:96:9b:3f: ad:00:f4:ea:bc:8f:23:7d:63:5c:b9:ad:f4:e4:bb: 25:fe:cc:ef:a0:56:ec:4c:d6:92:ca:21:13:e6:41: 72:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:16:58:76:18:9D:FD:6F:76:CB:B0:94:21:1B:11:46:3E:45:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a33572f5-1be8-397c-b3c7-7cc6fcc208f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:50:fa:7e:11:3f:bb:7c:84:e0:a7:dd:dc:77:26:7e:c0:8c: 94:7c:64:f3:bd:94:bc:3d:ac:94:b8:26:f6:be:b2:1d:25:fd: 1d:47:1e:ec:69:b1:d9:1e:7e:60:e3:16:f4:0b:f8:fb:e4:74: ae:87:40:87:dd:ff:bc:5f:eb:99:0e:44:bb:d9:e9:fd:03:24: d2:0a:28:53:23:f0:bf:1c:e1:ab:6e:3b:fb:fe:7e:54:ec:d9: a4:67:d3:a5:fa:6e:63:bb:c0:4f:dd:0b:bf:65:42:d7:8d:fa: 54:81:0e:68:8c:71:5b:3f:35:0e:2a:84:16:22:c6:d3:e0:1e: b4:c1:a7:a8:15:6d:9f:11:84:80:04:f6:ea:1d:91:33:b6:dd: e4:33:58:cb:81:a7:8f:57:3f:f2:2c:4a:6b:a2:8c:11:33:11: 34:be:89:53:1a:e6:13:e3:80:de:b9:4a:57:e9:cf:93:25:d6: 48:fa:b8:a2:72:3c:79:cc:7b:c9:99:1f:e2:f0:8c:2a:3f:06: ac:1c:b0:e4:c6:35:b3:71:87:2d:6c:7f:10:0a:b0:c1:05:6e: da:7c:42:d6:0b:9e:87:5c:28:15:2c:b0:9f:cb:ef:c9:54:4c: 9c:31:28:d6:4a:c8:a7:ec:21:40:36:f9:40:ed:12:5b:33:b1: 1a:9a:09:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jv5moj13WNZfPDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgxOTE0NDMwNFoXDTI2MTExNzE1NDMwNFowLzEtMCsGA1UEAxMk NGI4YjYxYTUtMjBiZi00Yjc5LWEwMzAtZjMxNWZkZDZjZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMPLCYeUE+wc+PsS+NvOed2PJYC3v2Hehr6v XUy533OHo1hNN+qjZ9xzROip/KvVPZnVnCcaDTAzMADBkeBUwwd2yrOZ2G3LJsZa DKEd/r68qFfBnIu8L4aZiPhXhpzsVse3t+ZVr/jPryFEOGfqqMMR1mef5uuVhR3S xTeOP+pqdQWzRrFvkPwHIlm6jg2E3u994BQYpTWw+yy7g/AAavUKnDcGyoxzFTAD MemFl7KGp16sjUSOE0EtiJVlwgtwNxuVV5FjjEg/Qrofp1UhzIfW/ZNI19CWSH9v KkyWmz+tAPTqvI8jfWNcua305Lsl/szvoFbsTNaSyiET5kFyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj/Flh2GJ39b3bLsJQhGxFGPkVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTMzNTcyZjUtMWJlOC0z OTdjLWIzYzctN2NjNmZjYzIwOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtQ+n4RP7t8hOCn3dx3Jn7AjJR8ZPO9lLw9rJS4Jva+sh0l/R1HHuxp sdkefmDjFvQL+PvkdK6HQIfd/7xf65kORLvZ6f0DJNIKKFMj8L8c4atuO/v+flTs 2aRn06X6bmO7wE/dC79lQteN+lSBDmiMcVs/NQ4qhBYixtPgHrTBp6gVbZ8RhIAE 9uodkTO23eQzWMuBp49XP/IsSmuijBEzETS+iVMa5hPjgN65Slfpz5Ml1kj6uKJy PHnMe8mZH+LwjCo/BqwcsOTGNbNxhy1sfxAKsMEFbtp8QtYLnodcKBUssJ/L78lU TJwxKNZKyKfsIUA2+UDtElszsRqaCYk= -----END CERTIFICATE-----Generated at Mon Aug 24 13:22:20 2026 by rpki-client