$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f2ad7c9-d921-3e48-a8c9-96400f23e4ff.roa File: 1f2ad7c9-d921-3e48-a8c9-96400f23e4ff.roa (raw, json) Hash identifier: bdc2NxxRw73ywPoj7zZ4YNqHif2POf6dj/TMlD2Kbhc= Subject key identifier: D1:D7:8F:6C:28:5A:C4:81:B3:98:17:A4:E6:AA:5E:4B:62:60:EA:B6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DEDE09E4D0C9C2011A06F74A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f2ad7c9-d921-3e48-a8c9-96400f23e4ff.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 3356 IP address blocks: 168.87.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:9e:4d:0c:9c:20:11:a0:6f:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=f8c43c59-fd10-40de-bcf3-9391441edcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:7b:de:5f:fb:fc:f5:ba:22:ee:27:a0:c5: 95:d0:4d:9a:b4:cb:17:64:de:7f:95:89:e9:f1:56: a9:00:db:6e:41:36:de:9e:fe:15:57:c5:67:51:81: 40:84:2c:fe:13:ca:6e:8e:51:b3:c1:43:2b:bd:23: 4e:4c:b9:2b:36:e9:75:31:cd:7b:b7:c7:4f:d7:e2: 34:1f:a9:d3:66:f8:2d:dd:fb:f6:fc:14:95:ea:3d: 28:a5:e8:ad:8b:05:6f:89:c2:a5:6e:e9:7d:4d:fd: a7:77:e6:27:a7:07:a4:9d:af:1d:c7:fb:b1:be:7e: 2f:72:25:9b:86:d4:15:b1:fd:f0:ac:f9:97:ca:e3: c0:6c:ff:b7:da:81:85:59:3d:d3:ec:4f:ad:f3:2f: e5:b9:d0:57:94:e7:88:aa:92:24:4e:43:6f:e3:ed: c1:af:02:d9:5b:c9:c8:57:3a:62:43:e5:17:b6:ad: 6f:58:8b:c8:1f:aa:22:fb:6b:b8:e1:5d:c7:e0:fd: ad:eb:16:00:86:50:3c:93:65:52:5b:ae:b1:d9:e9: 27:ff:d3:cb:e7:a1:07:ad:ec:59:98:ce:ad:5a:37: 4c:06:79:64:1e:39:e6:69:f5:86:be:b3:ab:a4:1d: c1:72:87:ff:12:98:2c:9a:fc:7b:10:04:58:dd:f1: b5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D7:8F:6C:28:5A:C4:81:B3:98:17:A4:E6:AA:5E:4B:62:60:EA:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1f2ad7c9-d921-3e48-a8c9-96400f23e4ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ca:f4:ab:f2:5f:2a:24:0e:f0:f0:fa:3c:d1:87:61:1a:2e: e6:77:a9:1f:23:29:d8:ea:50:3a:a9:85:bd:28:76:6b:4f:ea: 9c:cc:53:6c:ac:28:37:cd:bc:c9:18:ba:28:51:f6:2c:61:53: d1:65:48:e4:86:3a:9f:4d:06:72:c3:63:0f:81:37:38:10:46: 0e:70:12:7f:64:2b:89:b6:da:8f:ce:aa:dd:3e:2b:10:55:b2: 70:53:c0:cd:6c:70:b7:51:bd:6d:ff:9b:27:49:f7:a5:a0:a4: 29:b2:d9:6b:f0:15:33:91:9e:5a:85:23:f8:3e:f7:3f:25:2f: 4c:0e:6d:4f:44:c6:66:63:8c:a8:61:90:51:40:6b:c0:a3:63: 0a:ac:80:83:e2:76:1d:1c:6c:03:85:9e:5e:56:59:4e:cc:8e: 72:22:dc:36:b5:18:b8:6b:fc:00:7b:20:20:3e:c7:ca:e3:b8: 17:19:fb:7a:1e:8e:32:80:da:bf:fc:06:bc:7a:e2:3f:23:84: a5:d4:29:58:39:0f:ef:25:13:64:0f:f7:44:a1:1c:68:5c:27: 1b:55:45:fc:91:c5:94:96:e5:52:65:9d:47:8a:6b:46:e1:71: 95:90:2e:c3:b1:2c:44:58:38:f8:7d:a3:3a:5d:f9:c0:12:18: c4:d4:d4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4J5NDJwgEaBvdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk ZjhjNDNjNTktZmQxMC00MGRlLWJjZjMtOTM5MTQ0MWVkY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit173l/7/PW6Iu4noMWV0E2atMsXZN5/lYnp 8VapANtuQTbenv4VV8VnUYFAhCz+E8pujlGzwUMrvSNOTLkrNul1Mc17t8dP1+I0 H6nTZvgt3fv2/BSV6j0opeitiwVvicKlbul9Tf2nd+Ynpwekna8dx/uxvn4vciWb htQVsf3wrPmXyuPAbP+32oGFWT3T7E+t8y/ludBXlOeIqpIkTkNv4+3BrwLZW8nI VzpiQ+UXtq1vWIvIH6oi+2u44V3H4P2t6xYAhlA8k2VSW66x2ekn/9PL56EHrexZ mM6tWjdMBnlkHjnmafWGvrOrpB3Bcof/Epgsmvx7EARY3fG1nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHXj2woWsSBs5gXpOaqXktiYOq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWYyYWQ3YzktZDkyMS0z ZTQ4LWE4YzktOTY0MDBmMjNlNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqFecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbK9KvyXyokDvDw+jzRh2EaLuZ3qR8jKdjqUDqphb0odmtP6pzMU2ys KDfNvMkYuihR9ixhU9FlSOSGOp9NBnLDYw+BNzgQRg5wEn9kK4m22o/Oqt0+KxBV snBTwM1scLdRvW3/mydJ96WgpCmy2WvwFTORnlqFI/g+9z8lL0wObU9ExmZjjKhh kFFAa8CjYwqsgIPidh0cbAOFnl5WWU7MjnIi3Da1GLhr/AB7ICA+x8rjuBcZ+3oe jjKA2r/8Brx64j8jhKXUKVg5D+8lE2QP90ShHGhcJxtVRfyRxZSW5VJlnUeKa0bh cZWQLsOxLERYOPh9ozpd+cASGMTU1LA= -----END CERTIFICATE-----Generated at Sat Jun 13 21:02:58 2026 by rpki-client