$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa File: d489a435-f9e6-39ac-a136-0c755944b063.roa (raw, json) Hash identifier: 6L9QVK9eGzKJwA+smRZOrR61c4T+QFlwKxnfQnakYVw= Subject key identifier: 3C:21:F0:EB:63:56:88:3C:27:B3:F2:EB:ED:05:25:34:72:DF:D5:65 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E2AD461782A9AC9BE7C3C17C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 3360 IP address blocks: 168.87.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:61:78:2a:9a:c9:be:7c:3c:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=5869c559-ce72-40f0-aa47-969f2d0a2114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:52:17:e2:e1:77:9c:76:0f:a2:bd:95:85: cc:c5:41:b4:97:bc:bb:06:fe:0b:99:eb:0a:ee:e8: ba:47:28:4e:90:83:e6:51:8e:6b:35:57:db:61:dd: 71:1a:ae:b1:01:a4:ae:41:6f:fc:79:ce:7d:e9:b5: f7:bc:0a:98:29:ba:cd:a1:b5:76:fb:0f:0a:4e:ad: 69:a8:dc:8c:da:aa:72:5d:f2:03:ac:c0:7c:6f:70: 7b:7f:9e:f8:be:94:1f:ad:5c:f5:cd:82:7b:20:63: 3c:fe:a5:82:8f:76:10:91:68:70:3a:d1:0a:d8:82: 07:be:c8:82:2e:70:6a:e9:fe:db:45:db:a7:d9:b7: 90:23:3f:c6:1c:ea:2e:53:90:a9:18:76:34:81:b1: 4b:e8:06:ad:6c:b9:29:30:cf:a3:37:cf:47:b1:1c: ec:4d:c8:16:42:f9:55:f1:b3:e2:ec:b0:16:a6:91: 52:84:bf:bf:db:4f:37:81:da:53:d7:97:44:a4:3c: 49:41:84:7d:86:f6:24:f2:a2:ff:c4:b6:60:aa:8b: 9f:2e:d1:5d:ee:20:f4:1e:b3:ce:f5:2f:2d:4c:11: 5a:df:ca:8d:0b:2b:1b:bb:c8:dd:af:39:d5:bb:fe: 87:22:a6:4b:e0:c8:21:3b:ef:90:67:a4:93:a2:b4: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:21:F0:EB:63:56:88:3C:27:B3:F2:EB:ED:05:25:34:72:DF:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d489a435-f9e6-39ac-a136-0c755944b063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e1:25:ef:ab:04:9b:f9:10:ef:5c:a5:b9:8c:96:ee:cd:50: 9b:ff:78:71:5c:3a:1e:4d:3b:a4:d3:de:b5:53:c2:3b:12:b1: ee:c4:8e:71:ff:c5:4d:ea:87:fb:55:05:d3:ff:51:82:81:17: d9:df:df:3f:13:b8:1b:6e:8c:ed:cf:6a:ef:bf:65:81:6c:37: 01:81:e8:6d:3f:98:60:be:fa:8a:43:f0:ad:f9:25:f9:04:a1: ae:5e:e9:9d:b7:4e:3a:9e:af:2a:e5:d0:e4:83:1d:7e:a0:6e: 6b:19:5c:35:93:b8:ec:1c:eb:1b:df:57:20:df:9c:db:38:c9: 41:30:92:15:41:e8:be:cc:83:74:a7:5e:7c:12:5b:f9:77:ac: 3e:f0:31:86:bf:a2:19:ac:dc:21:51:20:da:65:fd:6f:0c:4e: b0:07:de:9f:9d:3e:45:58:05:0c:35:3a:90:92:ae:0e:75:a3: bb:6f:20:d0:4e:87:9f:02:80:97:cb:43:a8:7e:82:52:05:49: 09:0a:54:ad:b3:8c:75:9b:4b:fe:4c:08:b9:4a:82:7a:4d:c4: 7f:65:93:e5:c1:db:df:95:21:c3:0c:58:91:86:88:9d:09:81: 3f:c5:d7:64:0b:2d:75:39:c7:e8:5e:e3:ad:a9:11:c4:f2:fc: a7:6c:08:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1GF4KprJvnw8F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk NTg2OWM1NTktY2U3Mi00MGYwLWFhNDctOTY5ZjJkMGEyMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ZSF+Lhd5x2D6K9lYXMxUG0l7y7Bv4LmesK 7ui6RyhOkIPmUY5rNVfbYd1xGq6xAaSuQW/8ec596bX3vAqYKbrNobV2+w8KTq1p qNyM2qpyXfIDrMB8b3B7f574vpQfrVz1zYJ7IGM8/qWCj3YQkWhwOtEK2IIHvsiC LnBq6f7bRdun2beQIz/GHOouU5CpGHY0gbFL6AatbLkpMM+jN89HsRzsTcgWQvlV 8bPi7LAWppFShL+/2083gdpT15dEpDxJQYR9hvYk8qL/xLZgqoufLtFd7iD0HrPO 9S8tTBFa38qNCysbu8jdrznVu/6HIqZL4MghO++QZ6STorREuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwh8OtjVog8J7Py6+0FJTRy39VlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ4OWE0MzUtZjllNi0z OWFjLWExMzYtMGM3NTU5NDRiMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHhJe+rBJv5EO9cpbmMlu7NUJv/eHFcOh5NO6TT3rVTwjsSse7EjnH/ xU3qh/tVBdP/UYKBF9nf3z8TuBtujO3Pau+/ZYFsNwGB6G0/mGC++opD8K35JfkE oa5e6Z23Tjqeryrl0OSDHX6gbmsZXDWTuOwc6xvfVyDfnNs4yUEwkhVB6L7Mg3Sn XnwSW/l3rD7wMYa/ohms3CFRINpl/W8MTrAH3p+dPkVYBQw1OpCSrg51o7tvINBO h58CgJfLQ6h+glIFSQkKVK2zjHWbS/5MCLlKgnpNxH9lk+XB29+VIcMMWJGGiJ0J gT/F12QLLXU5x+he462pEcTy/KdsCNo= -----END CERTIFICATE-----Generated at Tue Jun 30 07:06:50 2026 by rpki-client