$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa File: db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa (raw, json) Hash identifier: z/mUZHZs8iBNR8pNvlYjW+CmQsP18keIEy5mYQccx1E= Subject key identifier: B7:0A:31:E5:0B:FB:D1:24:63:E9:11:97:30:8C:AE:EC:90:47:A9:D4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F51D2B249B0A5B70B3A5D8400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 168.87.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:49:b0:a5:b7:0b:3a:5d:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=626ce959-eabc-431f-9d76-b3e4a0511c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:d2:e1:74:2c:38:ae:a0:9d:e0:1c:eb:4e: 4a:2f:f9:f9:95:f5:aa:db:0b:f1:37:e3:23:f5:cb: cb:17:88:99:4f:f7:de:c9:78:05:e6:59:2e:0f:40: 82:65:e1:c9:8c:7a:34:45:fe:31:cd:92:15:3c:75: e0:4b:3d:a3:54:03:57:b3:34:06:20:c7:b0:9e:de: b9:52:21:6e:e2:ea:2a:13:75:85:0b:99:30:c5:c0: db:05:ec:93:b5:f1:a7:61:91:9b:48:9a:59:8f:c8: d0:41:16:df:02:f9:91:7f:2e:78:9a:99:03:21:6a: dc:89:08:89:38:a5:85:b5:6c:4c:5b:1d:07:6c:64: b1:e2:d9:d3:3e:49:de:fa:76:4e:06:8e:d3:42:e4: 25:a7:c3:3d:2e:25:1c:19:41:b0:75:51:52:f9:e7: 1d:74:b6:9c:9a:bb:9e:cb:cd:96:f0:50:ea:7e:4d: fc:34:24:5b:01:aa:6c:9d:a2:c7:8b:84:3c:a4:b6: 77:81:42:ec:a1:1f:ce:49:ef:c8:a2:34:21:c8:74: 57:f2:45:57:f0:f0:58:23:86:2e:c1:f1:5e:ad:cd: 52:65:0e:29:a8:55:9d:33:ac:98:6d:27:9d:26:2d: c2:75:d2:a3:53:db:5d:2c:c1:91:04:d5:c8:7e:a6: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:31:E5:0B:FB:D1:24:63:E9:11:97:30:8C:AE:EC:90:47:A9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db9a5c89-a8ed-3494-9c0c-50c19474fd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:14:86:5d:55:37:da:1d:ae:e3:46:df:3e:22:6f:cd:15:34: 39:e0:2a:25:20:42:1a:3d:d7:89:aa:60:cd:a1:7c:10:7b:97: 60:de:6b:4e:36:fe:98:d3:31:3a:47:d5:bb:31:e6:8a:90:ae: 8a:4d:38:5f:1a:af:fa:8c:5a:41:da:71:ce:c7:7d:25:08:5e: 6d:fa:20:af:66:01:a1:11:38:29:cd:7a:40:64:98:f9:a9:01: 67:84:85:79:21:56:42:8b:e1:6c:5b:1b:74:ba:54:8e:d0:cf: 53:95:0a:4d:b7:6a:a7:99:fb:56:98:e5:81:58:a9:71:98:e1: e5:f9:7a:93:9b:0c:ff:bd:85:00:ac:f6:dd:37:ba:f8:aa:c7: 08:f6:53:22:7e:12:d2:40:79:80:c4:b0:9f:ef:26:b8:7f:1b: 79:f6:f7:4d:8a:5d:f5:7a:e7:07:ec:c4:61:b2:f3:58:89:34: 0c:ac:8e:dc:26:35:87:db:25:bd:c4:1b:b0:28:2b:28:07:a8: 7a:22:36:5c:a1:08:8d:5b:11:38:51:c3:93:06:5a:bc:c3:bb: 94:e6:ed:6c:5a:6c:ad:ab:9b:82:b0:5b:21:95:56:6c:70:87: f9:6a:b6:a0:72:58:29:18:5a:63:96:99:83:18:56:3d:ff:80: b9:74:0b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rJJsKW3CzpdhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NjI2Y2U5NTktZWFiYy00MzFmLTlkNzYtYjNlNGEwNTExYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO/S4XQsOK6gneAc605KL/n5lfWq2wvxN+Mj 9cvLF4iZT/feyXgF5lkuD0CCZeHJjHo0Rf4xzZIVPHXgSz2jVANXszQGIMewnt65 UiFu4uoqE3WFC5kwxcDbBeyTtfGnYZGbSJpZj8jQQRbfAvmRfy54mpkDIWrciQiJ OKWFtWxMWx0HbGSx4tnTPkne+nZOBo7TQuQlp8M9LiUcGUGwdVFS+ecddLacmrue y82W8FDqfk38NCRbAapsnaLHi4Q8pLZ3gULsoR/OSe/IojQhyHRX8kVX8PBYI4Yu wfFerc1SZQ4pqFWdM6yYbSedJi3CddKjU9tdLMGRBNXIfqZ8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcKMeUL+9EkY+kRlzCMruyQR6nUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI5YTVjODktYThlZC0z NDk0LTljMGMtNTBjMTk0NzRmZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYUhl1VN9odruNG3z4ib80VNDngKiUgQho914mqYM2hfBB7l2Dea042 /pjTMTpH1bsx5oqQropNOF8ar/qMWkHacc7HfSUIXm36IK9mAaEROCnNekBkmPmp AWeEhXkhVkKL4WxbG3S6VI7Qz1OVCk23aqeZ+1aY5YFYqXGY4eX5epObDP+9hQCs 9t03uviqxwj2UyJ+EtJAeYDEsJ/vJrh/G3n2902KXfV65wfsxGGy81iJNAysjtwm NYfbJb3EG7AoKygHqHoiNlyhCI1bEThRw5MGWrzDu5Tm7WxabK2rm4KwWyGVVmxw h/lqtqByWCkYWmOWmYMYVj3/gLl0C9o= -----END CERTIFICATE-----Generated at Mon Sep 28 16:46:27 2026 by rpki-client