$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa File: df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa (raw, json) Hash identifier: 67SSDEY1VtRFHoP+2klgmZ5LGos1OGBavpD0MYfFULU= Subject key identifier: 11:8D:E0:9A:AE:C8:CB:32:DC:0B:96:E3:AF:E6:E6:F7:2B:B7:C9:45 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7176EC82C2BC3073E83C200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 202 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6e:c8:2c:2b:c3:07:3e:83:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=a39df692-c9e3-4ac1-81d6-4a7b9793379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:77:a7:58:2d:1b:f0:67:cc:1f:c5:99:bc: 10:15:53:3d:a7:8c:d2:80:04:9c:eb:66:03:26:5c: 5c:95:4b:6a:ef:1e:0f:45:d3:fa:82:ba:ce:a8:de: ea:32:69:02:60:9c:2b:00:7d:a6:c2:70:60:3b:f0: f3:b3:af:4a:4d:77:a1:77:bc:ca:29:ed:eb:3d:35: 7f:79:aa:ec:6c:6e:a4:9d:79:bb:0e:c4:fc:93:49: 4a:8a:00:8c:35:6c:37:63:48:10:0d:b2:4b:c3:40: f7:21:34:f4:9a:c7:35:2a:dd:4b:4c:e3:08:10:17: 6f:a2:cd:07:f5:cf:5f:a6:15:ab:4e:69:ef:7d:5b: 11:b1:b5:b8:ac:1d:87:63:d0:9d:44:cc:71:c3:6e: d5:d0:5c:95:4f:8e:12:94:b2:b2:13:70:38:eb:37: 28:02:03:83:ec:d7:34:8e:4c:53:00:c6:85:2c:1c: 78:c1:45:cd:55:86:6c:52:83:ac:18:d6:f1:3b:65: be:2a:08:55:ff:85:84:27:ca:2a:71:67:16:8d:76: 0e:f9:c4:cb:25:85:83:d4:23:4d:35:90:5e:5e:b8: e1:60:e1:0d:26:d6:0b:18:75:25:ea:f8:1c:fd:fe: 16:a5:a9:b3:01:d4:97:8c:30:fe:5e:86:0f:74:39: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:E0:9A:AE:C8:CB:32:DC:0B:96:E3:AF:E6:E6:F7:2B:B7:C9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df54e28e-16a2-3158-9e5c-42ba1c10d6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7b:1a:3e:74:6a:ba:f7:87:d2:e9:57:93:1a:ed:bd:c2:8f: 8a:9d:54:91:f1:04:fb:f4:74:fa:ac:12:e3:e6:e0:0a:c0:ea: 42:9b:cd:d3:94:e0:7d:95:c6:90:a8:31:47:76:6c:3b:1d:40: 51:61:69:7f:b5:de:a3:27:d8:49:a2:b0:e9:67:ab:b7:64:a0: fa:a0:0c:29:95:6c:86:59:00:dc:95:44:47:90:19:df:ee:56: 6a:68:20:e0:86:a2:0c:0f:92:17:36:ec:25:d2:25:0d:b0:b1: 91:d6:ad:81:a2:4a:0e:b7:06:95:ef:9a:bd:3a:9b:75:3c:56: 30:68:81:85:42:76:90:c6:a3:77:2c:0f:a6:1b:1d:d1:5c:98: a1:2e:5f:16:42:e5:76:1a:62:ae:dc:39:77:4d:0f:95:d7:aa: 9b:0e:07:9d:0d:da:d5:34:78:84:80:2d:d5:27:78:ac:16:11: ba:5a:29:1b:0f:cd:ef:70:86:8b:c7:8d:47:37:3e:32:c9:45: 52:56:64:87:00:9e:73:d7:a1:b7:97:00:8f:2b:6e:e9:d5:ac: 6a:5f:39:f3:71:0d:eb:c4:91:1b:36:0a:f9:dc:35:c6:ff:e8: c5:1a:07:11:47:fb:b9:3c:2a:1d:2c:af:6d:2a:46:c6:c5:9f: 9f:fc:3a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F27ILCvDBz6DwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YTM5ZGY2OTItYzllMy00YWMxLTgxZDYtNGE3Yjk3OTMzNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59t3p1gtG/BnzB/FmbwQFVM9p4zSgASc62YD JlxclUtq7x4PRdP6grrOqN7qMmkCYJwrAH2mwnBgO/Dzs69KTXehd7zKKe3rPTV/ earsbG6knXm7DsT8k0lKigCMNWw3Y0gQDbJLw0D3ITT0msc1Kt1LTOMIEBdvos0H 9c9fphWrTmnvfVsRsbW4rB2HY9CdRMxxw27V0FyVT44SlLKyE3A46zcoAgOD7Nc0 jkxTAMaFLBx4wUXNVYZsUoOsGNbxO2W+KghV/4WEJ8oqcWcWjXYO+cTLJYWD1CNN NZBeXrjhYOENJtYLGHUl6vgc/f4WpamzAdSXjDD+XoYPdDk1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGN4JquyMsy3AuW46/m5vcrt8lFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGY1NGUyOGUtMTZhMi0z MTU4LTllNWMtNDJiYTFjMTBkNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd7Gj50arr3h9LpV5Ma7b3Cj4qdVJHxBPv0dPqsEuPm4ArA6kKbzdOU 4H2VxpCoMUd2bDsdQFFhaX+13qMn2EmisOlnq7dkoPqgDCmVbIZZANyVREeQGd/u VmpoIOCGogwPkhc27CXSJQ2wsZHWrYGiSg63BpXvmr06m3U8VjBogYVCdpDGo3cs D6YbHdFcmKEuXxZC5XYaYq7cOXdND5XXqpsOB50N2tU0eISALdUneKwWEbpaKRsP ze9whovHjUc3PjLJRVJWZIcAnnPXobeXAI8rbunVrGpfOfNxDevEkRs2CvncNcb/ 6MUaBxFH+7k8Kh0sr20qRsbFn5/8Ojc= -----END CERTIFICATE-----Generated at Thu Oct 8 10:40:59 2026 by rpki-client