$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa File: c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa (raw, json) Hash identifier: os1A6YxcRczKRSxjCEEJ5U09BkddVayjQS5yD8A0wLg= Subject key identifier: 32:A8:B7:F9:7E:47:E9:CB:EF:A2:B4:0F:CA:9E:61:35:C0:12:0D:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA11AB1F4C097C96A857DD160 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 16509 IP address blocks: 168.87.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b1:f4:c0:97:c9:6a:85:7d:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=735d6cc1-8e71-415a-b122-e77852966683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:9a:30:94:6c:79:4d:07:02:1d:a2:d4:c1: b2:82:f2:a6:80:45:d2:5c:2b:44:43:0c:6c:64:63: 9c:8e:fe:d6:bf:9d:af:90:62:8b:b9:74:07:03:a0: 11:7c:e4:97:d0:e5:a3:7e:b8:b4:ab:69:83:be:61: c3:84:2d:bf:5e:dd:54:3b:e3:65:00:a8:9a:74:63: 2a:5c:e0:30:16:4c:f2:a5:dc:ed:78:c1:69:2d:b6: 1c:bb:98:65:25:a4:51:55:5e:4c:ed:2a:24:cb:0d: 73:b1:d7:94:5f:aa:ae:c3:6f:b0:dd:44:ea:04:97: 1f:30:cf:9b:4e:f3:44:77:f4:6f:06:6f:4d:4b:87: cd:1a:3f:a8:1f:94:16:28:d6:6e:6f:ea:6c:d4:c2: cb:15:71:70:ea:9c:1a:a9:97:ad:05:9f:27:98:fa: 29:35:cf:6b:f8:d2:d6:11:46:f8:21:14:59:f1:72: 12:ec:24:94:67:60:21:f1:da:24:b9:10:7b:95:bb: 11:b8:70:07:26:00:12:85:be:49:9b:34:33:e2:a9: 9b:8e:98:5f:64:49:2a:ff:e4:a6:0a:80:e3:fc:06: 6b:7c:a9:42:c0:da:a5:46:57:16:42:3e:65:f7:2c: df:e1:66:9c:bb:f1:e8:66:22:7f:53:1c:a3:d4:a2: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:B7:F9:7E:47:E9:CB:EF:A2:B4:0F:CA:9E:61:35:C0:12:0D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5dd5a69-cb79-32e6-964b-8f66dd4d2b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b7:36:5f:cd:39:38:22:96:d0:09:aa:cb:95:b9:c8:f1:2b: a3:69:f5:ae:69:8f:52:ce:fb:11:68:96:f4:af:b8:05:bf:dd: 88:9d:09:06:8d:d3:0d:a9:02:b9:3e:91:e1:06:e6:4f:a7:2d: 94:1a:23:8b:48:30:8c:da:7a:f0:23:40:d8:9a:0f:70:b3:e1: d6:a6:ae:3b:a2:91:66:13:4f:ac:af:a5:78:62:af:74:e1:ef: 8c:73:d7:ad:6e:64:bb:75:ad:fd:aa:da:32:5c:fe:30:9d:f6: ab:92:af:60:5e:61:58:12:01:59:5f:d2:f9:0a:ec:c9:48:64: cb:ff:a3:8a:92:81:6e:5b:95:b3:17:0c:a0:3d:77:ae:b6:8c: 9a:ad:a9:d3:cf:ba:6c:37:64:5a:ee:8f:ce:fc:ca:5b:09:99: 59:89:09:7e:f7:95:b4:89:cd:a2:db:c6:74:6e:94:6f:34:24: 62:39:bc:6c:39:19:cf:5d:a5:cf:4c:68:1a:23:9b:51:65:6d: 8a:8d:52:b9:5f:5e:57:e3:f8:cf:46:d9:9c:65:92:c1:a5:f6: b7:41:65:19:2d:3a:a2:80:15:f0:e9:e5:c6:51:77:56:1f:5f: 89:ec:64:f2:02:d3:18:17:5f:dc:5d:02:ed:df:1a:d3:2c:6d: a3:11:a6:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrH0wJfJaoV90WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk NzM1ZDZjYzEtOGU3MS00MTVhLWIxMjItZTc3ODUyOTY2NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif2aMJRseU0HAh2i1MGygvKmgEXSXCtEQwxs ZGOcjv7Wv52vkGKLuXQHA6ARfOSX0OWjfri0q2mDvmHDhC2/Xt1UO+NlAKiadGMq XOAwFkzypdzteMFpLbYcu5hlJaRRVV5M7Sokyw1zsdeUX6quw2+w3UTqBJcfMM+b TvNEd/RvBm9NS4fNGj+oH5QWKNZub+ps1MLLFXFw6pwaqZetBZ8nmPopNc9r+NLW EUb4IRRZ8XIS7CSUZ2Ah8dokuRB7lbsRuHAHJgAShb5JmzQz4qmbjphfZEkq/+Sm CoDj/AZrfKlCwNqlRlcWQj5l9yzf4Wacu/HoZiJ/Uxyj1KKn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKot/l+R+nL76K0D8qeYTXAEg0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzVkZDVhNjktY2I3OS0z MmU2LTk2NGItOGY2NmRkNGQyYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFe1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu3Nl/NOTgiltAJqsuVucjxK6Np9a5pj1LO+xFolvSvuAW/3YidCQaN 0w2pArk+keEG5k+nLZQaI4tIMIzaevAjQNiaD3Cz4damrjuikWYTT6yvpXhir3Th 74xz161uZLt1rf2q2jJc/jCd9quSr2BeYVgSAVlf0vkK7MlIZMv/o4qSgW5blbMX DKA9d662jJqtqdPPumw3ZFruj878ylsJmVmJCX73lbSJzaLbxnRulG80JGI5vGw5 Gc9dpc9MaBojm1FlbYqNUrlfXlfj+M9G2ZxlksGl9rdBZRktOqKAFfDp5cZRd1Yf X4nsZPIC0xgXX9xdAu3fGtMsbaMRpnA= -----END CERTIFICATE-----Generated at Sun May 3 17:09:49 2026 by rpki-client