$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa File: a4ef094a-4e51-382c-adef-2ef2da93ad78.roa (raw, json) Hash identifier: VwS2mXPlIHX44y4HkKNh5JqUgNqciBTOwU/1lnP5nwg= Subject key identifier: 6A:4E:F1:69:90:AF:E7:EC:86:E0:DD:DA:92:D8:2F:48:19:5D:CF:6C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7176E8015F744FBA1829100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 168.87.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6e:80:15:f7:44:fb:a1:82:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=5720be02-3004-43d5-bbb1-54ffa1a1cdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:2b:82:34:a4:db:df:00:1b:88:77:b7:ac: 07:21:e9:46:92:49:79:3b:a2:3c:8e:81:f2:be:ec: e6:97:3d:60:f3:ce:8c:c4:e2:10:18:41:b6:70:cd: d6:55:c4:dc:cc:b4:54:e0:ec:7c:e5:5c:d1:2b:92: 8b:f5:aa:05:86:a5:f4:8a:a3:c9:a0:70:7d:09:b4: f8:7b:b8:90:f3:26:d4:a2:24:3a:60:9f:6b:6a:72: ed:8c:92:90:d7:e0:3d:68:c4:d2:85:32:36:a3:2e: 91:9a:86:78:7f:2b:ea:98:e8:78:f5:4b:7f:70:57: 1d:a0:9b:84:c9:38:21:15:8d:8f:86:c9:33:90:a6: 01:09:d3:1b:7f:f8:f2:32:da:05:48:22:9c:ae:f3: be:8b:47:ac:96:d8:ba:23:1c:2e:2b:dc:9f:bd:c0: 51:46:c7:4f:65:74:19:0b:75:cb:a0:e2:c5:28:b3: 5a:8a:f5:8a:62:6e:e1:bd:24:7e:4f:5f:b0:b4:1f: a8:77:7e:c3:20:5d:d1:16:d4:08:42:d7:14:18:a7: 5a:33:11:04:4a:b8:6b:54:13:25:ff:12:07:b5:3c: 0a:48:3f:95:98:07:c7:aa:4d:18:aa:5a:5c:5a:c9: 01:f8:91:9a:a7:4f:a4:b5:e8:d2:0f:e1:fa:a7:ca: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4E:F1:69:90:AF:E7:EC:86:E0:DD:DA:92:D8:2F:48:19:5D:CF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a4ef094a-4e51-382c-adef-2ef2da93ad78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4b:16:ca:0f:55:5b:73:69:11:20:dd:38:45:35:7c:29:bd: e0:3e:54:64:6b:00:0e:ec:3c:3a:10:d3:bc:48:10:c7:17:4d: 51:d3:a6:bd:04:90:6f:c4:8b:ad:1c:8c:25:31:66:d7:16:81: 90:60:99:fe:0b:5c:80:3b:49:7d:58:32:74:8a:23:6a:4a:45: 46:39:a1:98:5d:df:11:ed:77:0c:6d:92:a0:20:00:19:14:bf: 5c:54:80:a3:c6:19:5a:cd:84:70:5e:4c:2d:71:f7:e8:77:18: ac:9e:e2:5f:50:25:2c:62:89:3e:15:11:67:86:83:e9:09:d1: b2:0e:f2:ff:a7:2b:9b:08:79:d7:27:bb:a8:af:18:32:df:7f: aa:ae:2e:17:84:3c:70:ab:41:56:55:d2:6e:7d:b9:a9:85:a7: 4d:19:ac:43:1b:98:4f:08:b1:f0:8d:d7:75:5d:69:15:b3:cd: 7d:29:d4:92:fc:b1:a3:c1:ac:ed:85:ce:43:8c:bc:97:2c:05: 8d:bb:21:d5:dc:17:4d:4e:2c:60:e8:d8:df:3b:f6:c5:cb:3f: 46:f1:a3:66:ea:01:9e:85:ff:24:a2:8b:a2:04:5a:81:9d:65: 1e:f5:dd:98:5b:8b:0d:7b:cf:3e:40:62:ad:b4:15:46:57:81: 3c:8a:8a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F26AFfdE+6GCkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTcyMGJlMDItMzAwNC00M2Q1LWJiYjEtNTRmZmExYTFjZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6QrgjSk298AG4h3t6wHIelGkkl5O6I8joHy vuzmlz1g886MxOIQGEG2cM3WVcTczLRU4Ox85VzRK5KL9aoFhqX0iqPJoHB9CbT4 e7iQ8ybUoiQ6YJ9ranLtjJKQ1+A9aMTShTI2oy6RmoZ4fyvqmOh49Ut/cFcdoJuE yTghFY2PhskzkKYBCdMbf/jyMtoFSCKcrvO+i0eslti6IxwuK9yfvcBRRsdPZXQZ C3XLoOLFKLNaivWKYm7hvSR+T1+wtB+od37DIF3RFtQIQtcUGKdaMxEESrhrVBMl /xIHtTwKSD+VmAfHqk0YqlpcWskB+JGap0+ktejSD+H6p8rjdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpO8WmQr+fshuDd2pLYL0gZXc9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTRlZjA5NGEtNGU1MS0z ODJjLWFkZWYtMmVmMmRhOTNhZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENLFsoPVVtzaREg3ThFNXwpveA+VGRrAA7sPDoQ07xIEMcXTVHTpr0E kG/Ei60cjCUxZtcWgZBgmf4LXIA7SX1YMnSKI2pKRUY5oZhd3xHtdwxtkqAgABkU v1xUgKPGGVrNhHBeTC1x9+h3GKye4l9QJSxiiT4VEWeGg+kJ0bIO8v+nK5sIedcn u6ivGDLff6quLheEPHCrQVZV0m59uamFp00ZrEMbmE8IsfCN13VdaRWzzX0p1JL8 saPBrO2FzkOMvJcsBY27IdXcF01OLGDo2N879sXLP0bxo2bqAZ6F/ySii6IEWoGd ZR713Zhbiw17zz5AYq20FUZXgTyKivg= -----END CERTIFICATE-----Generated at Tue Sep 22 21:55:25 2026 by rpki-client