$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa File: e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa (raw, json) Hash identifier: IxQEKPv+mCtRMAUJrPzyXGmVDgS6cwOE5iE9R6nCe+s= Subject key identifier: D0:00:30:76:3E:9A:D7:9F:1D:39:32:B5:60:22:58:0F:4A:AC:4B:EE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6873EBBC954A85904D7600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 168.87.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:73:eb:bc:95:4a:85:90:4d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=d82dc15f-14fe-4626-8e4e-4b06bd68754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:82:bb:ab:af:17:6c:c9:f8:5e:ea:5a:fc: 64:52:80:25:00:7f:4e:dc:9e:62:e0:7c:08:b9:ee: a4:51:a3:85:d3:24:32:de:6a:e7:e1:7f:f5:99:9f: 18:56:aa:ac:38:d8:02:a1:2e:ca:19:45:a3:ca:fb: 55:a0:76:19:13:7f:e9:7f:ed:c5:10:e6:6a:eb:01: 2e:2a:1f:8d:53:1e:63:dd:7d:34:ba:e4:c5:b6:db: 92:04:4f:6b:45:0c:9c:11:b8:8a:d5:a0:06:16:f8: eb:55:38:45:3a:fc:ca:64:4c:cc:12:d2:c6:86:4c: bb:fc:9b:78:48:89:e3:7c:0b:f2:5d:36:b0:70:9b: ed:ed:80:22:64:21:c8:a6:fd:32:28:4e:64:72:7b: 73:f0:8b:ee:5e:ea:17:54:2e:9a:c8:91:65:00:aa: d3:f1:19:71:d5:d9:b7:23:d5:8f:76:13:f6:89:6f: 50:44:85:57:33:e9:31:9c:76:54:ce:cc:09:21:b5: c2:98:ad:7f:df:3f:45:11:1d:de:11:c4:df:9f:9b: d9:a1:98:a9:66:42:ea:a5:fc:ee:49:c5:7f:3d:67: 46:b2:70:b9:ab:29:d8:78:dc:00:d1:36:b2:79:09: 9a:ff:4f:49:c6:79:e2:8d:7b:43:cb:79:de:bd:72: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:00:30:76:3E:9A:D7:9F:1D:39:32:B5:60:22:58:0F:4A:AC:4B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e671f43d-35d5-35ee-8fb1-9ed92ef33ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f8:a7:ac:1c:c7:8e:e2:1f:08:8f:a8:34:5a:99:fe:09:67: dc:32:b0:19:d6:b0:d0:8e:1d:8d:61:4a:48:34:33:d5:3c:76: de:93:76:76:82:01:91:50:8c:20:a5:15:9c:33:c2:1b:79:72: 49:49:c6:07:7e:63:5d:b7:0e:b0:68:67:5f:3f:30:64:a4:3b: 3c:0f:1c:d5:fb:8f:33:6d:a2:c7:b4:45:83:59:47:d1:05:ac: 7a:2e:3d:59:aa:b9:e0:19:35:07:5a:6d:67:08:66:f6:24:fa: 02:76:a9:a3:f4:f2:47:25:e6:4f:a3:55:c8:10:99:e1:d1:57: b3:45:e6:fb:d7:45:d8:17:af:69:8b:80:86:47:d5:15:a8:02: 3f:54:c0:37:3b:a0:73:3d:07:a3:f4:d9:a1:21:11:4a:de:e2: f2:ba:3b:85:e8:1f:18:f1:d3:1f:2a:a9:bf:48:9b:23:65:73: 17:0b:1a:f0:40:6b:06:64:ae:ed:6b:d3:7d:7b:29:28:c5:bb: e9:db:1d:f4:f0:5a:d8:9b:9e:d4:c9:62:c6:da:7f:6e:81:f5: 2b:7e:aa:b0:c1:1e:d2:bc:78:14:c4:a5:15:15:95:64:4d:c8: da:bf:c9:6f:16:3f:ca:2c:76:ec:2b:e1:a5:7a:ba:97:2c:28: 2c:a9:14:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHPrvJVKhZBNdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDgyZGMxNWYtMTRmZS00NjI2LThlNGUtNGIwNmJkNjg3NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6Cu6uvF2zJ+F7qWvxkUoAlAH9O3J5i4HwI ue6kUaOF0yQy3mrn4X/1mZ8YVqqsONgCoS7KGUWjyvtVoHYZE3/pf+3FEOZq6wEu Kh+NUx5j3X00uuTFttuSBE9rRQycEbiK1aAGFvjrVThFOvzKZEzMEtLGhky7/Jt4 SInjfAvyXTawcJvt7YAiZCHIpv0yKE5kcntz8IvuXuoXVC6ayJFlAKrT8Rlx1dm3 I9WPdhP2iW9QRIVXM+kxnHZUzswJIbXCmK1/3z9FER3eEcTfn5vZoZipZkLqpfzu ScV/PWdGsnC5qynYeNwA0TayeQma/09JxnnijXtDy3nevXJZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAAMHY+mtefHTkytWAiWA9KrEvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTY3MWY0M2QtMzVkNS0z NWVlLThmYjEtOWVkOTJlZjMzYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr4p6wcx47iHwiPqDRamf4JZ9wysBnWsNCOHY1hSkg0M9U8dt6TdnaC AZFQjCClFZwzwht5cklJxgd+Y123DrBoZ18/MGSkOzwPHNX7jzNtose0RYNZR9EF rHouPVmqueAZNQdabWcIZvYk+gJ2qaP08kcl5k+jVcgQmeHRV7NF5vvXRdgXr2mL gIZH1RWoAj9UwDc7oHM9B6P02aEhEUre4vK6O4XoHxjx0x8qqb9ImyNlcxcLGvBA awZkru1r0317KSjFu+nbHfTwWtibntTJYsbaf26B9St+qrDBHtK8eBTEpRUVlWRN yNq/yW8WP8osduwr4aV6upcsKCypFIs= -----END CERTIFICATE-----Generated at Sun Oct 25 01:01:44 2026 by rpki-client