$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa File: 40b5c67a-9ac0-3589-acab-9c3b29acdede.roa (raw, json) Hash identifier: VFk2KnjzL5CrqxTVdq4v/v4w3SKDLUkqtwwkxOCNVu0= Subject key identifier: D6:60:83:96:9B:80:E7:F5:73:8E:F5:2E:D6:C0:CA:11:27:84:E5:A8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DE9B07A34DA14EDAD47336318 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 132121 IP address blocks: 168.87.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:7a:34:da:14:ed:ad:47:33:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=d5676138-bea3-4d1f-8e4d-a59c98119b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:67:35:71:60:b9:b7:da:fc:d7:30:39:68: 74:e3:af:b8:45:db:56:13:61:31:57:e7:1f:ca:1e: c4:3c:e2:71:3a:3e:c6:8f:21:bd:8e:8e:42:3b:3f: 11:bc:92:37:7a:34:e4:a7:21:4d:7a:e2:d1:7f:0b: c0:54:6a:bf:1b:31:66:6d:78:09:04:fb:77:4a:6b: 35:6b:c0:4a:b3:7d:3a:0d:cb:2e:95:1a:99:35:7d: 37:03:cf:23:41:f3:c1:ee:0a:28:67:15:ba:c3:76: b5:51:a2:de:87:1b:95:88:f5:7f:06:b9:41:80:93: 3f:5c:4f:3c:c2:9f:09:1d:ab:59:cf:5d:3d:47:53: 8b:33:eb:c4:7f:26:ad:8f:2f:fc:08:df:ad:ad:6d: 4d:ce:d2:c4:2f:3b:52:06:02:a6:27:59:ee:a6:f8: 9a:2f:9a:f8:71:95:7a:e4:86:c3:3f:59:a1:f3:a7: db:3a:62:4a:ea:37:b2:99:eb:24:45:a0:5f:13:e2: ee:f0:65:c5:e9:5e:44:65:8a:57:57:5e:a9:9a:9c: 38:64:ea:62:c1:aa:87:f6:a8:27:49:0f:14:da:71: 8b:dd:ed:ff:4a:40:00:46:98:79:5e:24:cd:3c:9a: 17:53:dc:9e:ab:c0:e2:4b:44:f7:ac:f7:ac:65:90: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:60:83:96:9B:80:E7:F5:73:8E:F5:2E:D6:C0:CA:11:27:84:E5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/40b5c67a-9ac0-3589-acab-9c3b29acdede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f6:02:8a:18:2a:0b:59:4a:2e:b8:6e:ae:01:2c:f3:f9:d4: 1a:1e:d3:fc:64:ec:6c:ad:7e:82:db:73:4a:bc:59:75:7d:ae: 5f:10:42:59:c1:f5:4e:47:82:6e:45:7b:56:6a:bb:b3:73:f7: cc:94:38:f8:4c:32:02:c0:8e:d8:25:9d:55:34:51:6c:a0:fd: e5:6e:b2:11:01:49:dc:97:c8:53:c2:3f:57:0e:4f:d6:cc:63: 3d:6a:94:ea:e9:73:80:a3:a1:0d:73:83:dd:f1:2a:89:d5:60: 00:0a:47:4e:8a:2c:61:c6:b2:43:3f:f2:45:ad:88:37:5d:86: 3b:e3:ba:91:b7:72:d7:db:e7:25:4e:f1:3c:fc:c6:be:16:d0: 55:b9:ec:2b:94:52:53:c9:1a:21:65:15:b5:d8:25:bb:4d:94: 9e:4d:a4:a5:0a:2e:2e:9d:f7:3b:43:16:5b:ba:35:46:d0:50: 16:45:2d:fd:bf:0e:00:6d:7d:79:7e:f4:96:76:49:a0:94:3d: 1e:6e:68:90:24:e3:31:0e:81:5d:ad:15:f3:52:f0:cc:e4:13: 48:94:0b:65:5f:6c:e3:64:a8:17:46:3f:c9:e4:e1:64:c8:29: 10:d3:b6:0d:df:ee:ab:91:c7:c4:8c:68:f1:77:4c:5e:3d:d3: 42:b1:80:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psHo02hTtrUczYxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDU2NzYxMzgtYmVhMy00ZDFmLThlNGQtYTU5Yzk4MTE5YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhtnNXFgubfa/NcwOWh046+4RdtWE2ExV+cf yh7EPOJxOj7GjyG9jo5COz8RvJI3ejTkpyFNeuLRfwvAVGq/GzFmbXgJBPt3Sms1 a8BKs306DcsulRqZNX03A88jQfPB7gooZxW6w3a1UaLehxuViPV/BrlBgJM/XE88 wp8JHatZz109R1OLM+vEfyatjy/8CN+trW1NztLELztSBgKmJ1nupviaL5r4cZV6 5IbDP1mh86fbOmJK6jeymeskRaBfE+Lu8GXF6V5EZYpXV16pmpw4ZOpiwaqH9qgn SQ8U2nGL3e3/SkAARph5XiTNPJoXU9yeq8DiS0T3rPesZZAplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZgg5abgOf1c471LtbAyhEnhOWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDBiNWM2N2EtOWFjMC0z NTg5LWFjYWItOWMzYjI5YWNkZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP2AooYKgtZSi64bq4BLPP51Boe0/xk7GytfoLbc0q8WXV9rl8QQlnB 9U5Hgm5Fe1Zqu7Nz98yUOPhMMgLAjtglnVU0UWyg/eVushEBSdyXyFPCP1cOT9bM Yz1qlOrpc4CjoQ1zg93xKonVYAAKR06KLGHGskM/8kWtiDddhjvjupG3ctfb5yVO 8Tz8xr4W0FW57CuUUlPJGiFlFbXYJbtNlJ5NpKUKLi6d9ztDFlu6NUbQUBZFLf2/ DgBtfXl+9JZ2SaCUPR5uaJAk4zEOgV2tFfNS8MzkE0iUC2VfbONkqBdGP8nk4WTI KRDTtg3f7quRx8SMaPF3TF4900KxgME= -----END CERTIFICATE-----Generated at Sat Jun 13 22:37:25 2026 by rpki-client