$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa File: 04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa (raw, json) Hash identifier: +nH7HX9WWXrq/Oe5MaAIoHzFTLp0sQfX9DRHomCTfmQ= Subject key identifier: 2D:C8:6D:5E:03:AE:11:11:35:11:2F:86:CE:E2:1A:D9:06:48:2E:A6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584CB81C8EEC0EC0838A2F6A0E70 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 203 IP address blocks: 168.87.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:8e:ec:0e:c0:83:8a:2f:6a:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=bf5235d5-c011-4cdf-8c1d-07921b0d8d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:53:e7:d1:63:c4:0b:18:d5:43:bb:c6:b8: ec:64:16:cb:f2:bd:48:93:b8:4f:eb:50:5c:c9:6e: 8a:bb:11:77:42:0a:b6:64:55:29:0e:87:11:6e:87: 73:83:d0:9d:5d:db:cd:b8:04:4c:49:2f:92:af:72: ba:4c:c9:64:95:d9:cc:e3:84:93:68:85:25:ca:11: 3b:65:6b:95:1d:c6:e7:34:44:18:53:7c:03:7f:3a: 29:ad:69:5e:81:5c:d0:84:9a:4d:f1:ce:05:ed:58: 86:36:e9:dd:06:4d:83:69:1e:85:ca:3b:44:55:45: 91:f7:cc:d4:d4:9c:80:9a:e5:ab:8b:fe:2a:2b:f8: 6c:34:af:b9:0c:05:ee:0b:66:24:45:bd:f5:4d:9c: b6:1f:4b:dc:d4:9c:c0:3f:94:25:36:1d:c4:02:87: a4:44:e7:ec:21:fb:d3:82:20:78:6c:60:52:9a:bb: 59:ce:f6:29:2b:cb:55:9e:97:79:6f:09:94:59:20: 84:c6:e2:bf:6d:87:e2:12:f1:00:bb:b4:c2:5f:cb: 52:b3:12:4a:4b:7d:2a:0d:ab:13:64:73:40:7c:3f: b2:44:a5:7c:08:63:e2:21:47:6c:b1:54:88:d0:f7: 00:61:1a:8c:ef:b9:a0:fb:4e:af:17:4a:f7:ee:25: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:6D:5E:03:AE:11:11:35:11:2F:86:CE:E2:1A:D9:06:48:2E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/04bc4fe0-859a-3dbf-baa6-a984efa8e651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4f:db:ba:28:43:a2:7d:bc:02:f4:ac:54:a3:e3:d9:ee:82: 3a:dd:90:8f:70:16:e9:20:eb:85:bf:80:ff:db:83:50:f9:16: b0:2b:ba:1c:76:d8:01:3f:9d:b7:5c:2b:b2:b9:cc:af:81:8d: 84:eb:cb:1a:6c:e2:21:95:68:1d:58:89:26:d0:3c:68:5a:65: f6:4a:47:ce:07:ef:c1:50:62:c3:4a:80:06:21:41:5a:2d:5b: f9:05:3e:13:93:98:8a:10:db:c9:ec:8f:42:20:64:a5:75:cf: de:cf:91:62:71:b2:07:59:c3:13:3d:32:dc:09:34:a8:f7:63: 18:15:01:a4:82:f6:1d:2e:45:05:92:3a:ce:62:1d:d3:0d:de: 36:8f:f4:e9:8d:40:e9:26:d7:42:33:b5:54:8b:83:ea:ea:1c: 8f:f0:10:74:af:b5:b9:98:0c:26:59:ef:a2:a0:c6:7a:46:a7: 36:c9:ae:d4:ac:0c:96:10:e0:93:16:0d:38:77:03:a6:37:e4: 30:17:f6:88:9c:cb:14:9f:47:c9:5e:d1:2f:af:7a:7e:ef:9f: 84:88:ad:dc:83:a3:56:14:b1:3d:f1:4f:6f:72:34:cb:09:c0: 28:67:38:4b:6d:91:b4:b1:62:38:70:1d:43:7e:ad:23:2a:10: 75:f6:44:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HI7sDsCDii9qDnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk YmY1MjM1ZDUtYzAxMS00Y2RmLThjMWQtMDc5MjFiMGQ4ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0FT59FjxAsY1UO7xrjsZBbL8r1Ik7hP61Bc yW6KuxF3Qgq2ZFUpDocRbodzg9CdXdvNuARMSS+Sr3K6TMlkldnM44STaIUlyhE7 ZWuVHcbnNEQYU3wDfzoprWlegVzQhJpN8c4F7ViGNundBk2DaR6FyjtEVUWR98zU 1JyAmuWri/4qK/hsNK+5DAXuC2YkRb31TZy2H0vc1JzAP5QlNh3EAoekROfsIfvT giB4bGBSmrtZzvYpK8tVnpd5bwmUWSCExuK/bYfiEvEAu7TCX8tSsxJKS30qDasT ZHNAfD+yRKV8CGPiIUdssVSI0PcAYRqM77mg+06vF0r37iVspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3IbV4DrhERNREvhs7iGtkGSC6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDRiYzRmZTAtODU5YS0z ZGJmLWJhYTYtYTk4NGVmYThlNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhP27ooQ6J9vAL0rFSj49nugjrdkI9wFukg64W/gP/bg1D5FrAruhx2 2AE/nbdcK7K5zK+BjYTryxps4iGVaB1YiSbQPGhaZfZKR84H78FQYsNKgAYhQVot W/kFPhOTmIoQ28nsj0IgZKV1z97PkWJxsgdZwxM9MtwJNKj3YxgVAaSC9h0uRQWS Os5iHdMN3jaP9OmNQOkm10IztVSLg+rqHI/wEHSvtbmYDCZZ76KgxnpGpzbJrtSs DJYQ4JMWDTh3A6Y35DAX9oicyxSfR8le0S+ven7vn4SIrdyDo1YUsT3xT29yNMsJ wChnOEttkbSxYjhwHUN+rSMqEHX2RJQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:24 2026 by rpki-client