$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab6c5d2d-a6a6-37f0-8e3e-6bfb3bc4e416.roa File: ab6c5d2d-a6a6-37f0-8e3e-6bfb3bc4e416.roa (raw, json) Hash identifier: 8rU0SOX/UW6DStyfpRrBo++pSVXT/iLkuMD0Wpuy9EE= Subject key identifier: 20:58:02:17:72:77:37:61:CB:D9:10:01:68:72:EE:3E:60:99:9A:8C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D98BAAD3EFF04E20A24E09F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab6c5d2d-a6a6-37f0-8e3e-6bfb3bc4e416.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:ad:3e:ff:04:e2:0a:24:e0:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=6432afd5-0580-40f0-b9ec-4d40d6c1f387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:ca:7f:47:f0:ce:eb:2b:d8:74:84:04:47: 8a:b0:e7:31:ad:e2:e8:67:e5:11:be:ff:be:3e:66: 71:89:91:b8:01:c2:6c:c2:28:f0:48:f9:f0:d4:30: 22:1e:c9:09:87:ac:09:e4:cd:a3:43:4c:24:67:f3: 6e:3b:79:27:f2:13:95:34:e7:26:c7:06:27:bd:59: f8:e3:32:38:44:23:0d:0d:f8:bf:9d:c7:ef:12:ba: f1:85:38:77:89:f4:10:11:dd:dd:93:4c:95:c5:fa: 21:e2:94:d0:9b:bb:cf:ef:63:21:52:23:c9:12:e8: 65:a3:47:8d:88:ec:25:1f:e3:81:3f:1c:60:6b:64: ec:0e:c9:6d:25:3c:b9:1f:69:72:52:53:de:22:2e: 5e:5a:f1:e8:5f:d1:2a:4a:67:7e:df:44:e7:3c:2b: 7e:b9:b1:5e:83:f5:a3:cc:9f:0b:29:92:ad:3a:a1: ac:42:8d:c2:07:2e:95:66:d7:5b:5c:1e:2a:71:60: e3:1c:58:14:98:86:15:d2:98:c3:48:2a:1b:8a:15: 55:86:f9:30:e1:8f:12:8b:be:05:cd:f6:83:cc:92: 2b:f3:8c:02:03:ed:d4:ca:53:7b:b7:b5:8f:54:28: e7:29:c4:2b:28:02:70:8e:09:fc:2d:de:85:24:70: 13:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:58:02:17:72:77:37:61:CB:D9:10:01:68:72:EE:3E:60:99:9A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab6c5d2d-a6a6-37f0-8e3e-6bfb3bc4e416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:98:1c:83:34:82:29:7e:f8:f1:98:b6:5a:8d:96:b5:75:3a: 82:00:1f:76:19:7b:8b:b3:a0:24:8d:f4:d1:98:eb:63:13:00: 8b:4a:e7:b6:0f:9a:9a:e2:b7:f5:39:83:a8:ac:d2:01:45:4e: e8:51:8a:86:ba:2c:dc:6f:60:29:5b:25:e0:d4:b7:97:2b:3c: 5d:ea:71:ba:ff:b9:e3:04:4f:a6:50:27:e7:0c:80:ba:a5:f3: 0b:ef:b7:04:3f:20:5e:c3:2d:88:81:a1:d0:80:ac:e6:f3:33: 2c:07:7c:21:60:e4:9f:1a:6c:83:3b:9e:e9:4e:9d:54:e9:64: f2:42:a7:f5:49:67:31:33:be:15:88:95:8b:c9:84:ef:2c:63: dc:91:75:55:5e:27:3c:7a:ff:4c:3d:67:85:fe:0d:6b:46:8f: c3:dd:1f:a3:48:14:06:95:08:87:13:4c:2d:3b:d1:ca:5e:56: b6:7f:35:2f:ca:ee:3a:cb:f3:7b:4d:96:bf:69:4a:e5:4f:5d: 20:e5:99:b3:dd:6e:7a:51:9f:ab:04:34:80:62:3d:a9:59:df: ac:a0:c4:d8:6c:5d:72:bc:22:dc:76:3b:2a:b5:0a:07:90:73: bd:84:60:97:05:72:e4:4f:dd:b8:0d:6b:17:47:82:9c:b6:1e: 58:40:d6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yuq0+/wTiCiTgn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NjQzMmFmZDUtMDU4MC00MGYwLWI5ZWMtNGQ0MGQ2YzFmMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhvKf0fwzusr2HSEBEeKsOcxreLoZ+URvv++ PmZxiZG4AcJswijwSPnw1DAiHskJh6wJ5M2jQ0wkZ/NuO3kn8hOVNOcmxwYnvVn4 4zI4RCMNDfi/ncfvErrxhTh3ifQQEd3dk0yVxfoh4pTQm7vP72MhUiPJEuhlo0eN iOwlH+OBPxxga2TsDsltJTy5H2lyUlPeIi5eWvHoX9EqSmd+30TnPCt+ubFeg/Wj zJ8LKZKtOqGsQo3CBy6VZtdbXB4qcWDjHFgUmIYV0pjDSCobihVVhvkw4Y8Si74F zfaDzJIr84wCA+3UylN7t7WPVCjnKcQrKAJwjgn8Ld6FJHATuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBYAhdydzdhy9kQAWhy7j5gmZqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWI2YzVkMmQtYTZhNi0z N2YwLThlM2UtNmJmYjNiYzRlNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASYHIM0gil++PGYtlqNlrV1OoIAH3YZe4uzoCSN9NGY62MTAItK57YP mprit/U5g6is0gFFTuhRioa6LNxvYClbJeDUt5crPF3qcbr/ueMET6ZQJ+cMgLql 8wvvtwQ/IF7DLYiBodCArObzMywHfCFg5J8abIM7nulOnVTpZPJCp/VJZzEzvhWI lYvJhO8sY9yRdVVeJzx6/0w9Z4X+DWtGj8PdH6NIFAaVCIcTTC070cpeVrZ/NS/K 7jrL83tNlr9pSuVPXSDlmbPdbnpRn6sENIBiPalZ36ygxNhsXXK8Itx2Oyq1CgeQ c72EYJcFcuRP3bgNaxdHgpy2HlhA1mk= -----END CERTIFICATE-----Generated at Fri Apr 24 14:23:18 2026 by rpki-client