$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/440f6b23-18fd-33df-aab8-8e5cf3135f66.roa File: 440f6b23-18fd-33df-aab8-8e5cf3135f66.roa (raw, json) Hash identifier: qNENGYl8MUUV4cD43hLEu2tIL7kuNFKi1zLqkYHr+Mk= Subject key identifier: 4D:97:F7:B8:E1:99:48:48:05:70:61:73:29:9B:B5:BB:3B:DE:06:0D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D5E1A464BBB6ACD7BA882EC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/440f6b23-18fd-33df-aab8-8e5cf3135f66.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 168.87.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:46:4b:bb:6a:cd:7b:a8:82:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=29c86222-b58f-479c-9a23-446e693e9fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:81:22:4d:b4:b5:91:89:17:af:0f:73:88: 87:84:89:24:71:85:a7:7e:12:61:56:50:5c:b1:c4: ce:37:c6:2d:da:0e:c4:25:62:02:d9:bf:c6:18:34: f0:2d:88:84:e0:79:da:8a:61:5a:53:34:8c:6a:ac: 6a:8c:fb:88:b5:dc:de:da:5c:d1:c7:56:11:b4:71: 2a:5e:6e:36:98:bb:83:04:b7:57:1c:89:97:ac:61: 4a:f7:be:70:6c:bd:18:43:14:15:9c:43:0f:08:dd: e2:77:5f:41:c3:b2:95:54:9c:90:b1:58:46:fd:af: d0:92:a5:ba:86:c3:2a:b4:e9:20:6e:bc:6a:11:10: 35:d6:48:01:7d:da:ae:56:e9:cd:6c:9c:68:17:b7: 6d:4d:a3:56:09:bf:69:d3:a5:0b:10:c5:f6:55:6d: c4:2c:1d:e8:f1:1d:c4:bf:f7:b9:5e:6c:1b:31:35: 56:c3:f7:80:43:c2:d2:be:2a:dc:ef:9c:30:78:9c: aa:23:eb:04:c5:1c:69:e0:2a:a9:8a:17:42:a0:9f: 91:15:a7:ef:bc:68:8a:1a:fa:d1:c6:ad:ed:88:21: 85:25:31:ed:54:e9:48:58:8f:8b:e3:80:48:48:1c: ae:8a:a0:c3:89:53:4a:a4:af:b7:54:19:54:7b:1c: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:F7:B8:E1:99:48:48:05:70:61:73:29:9B:B5:BB:3B:DE:06:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/440f6b23-18fd-33df-aab8-8e5cf3135f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8a:e5:6e:9b:18:84:47:3e:d0:00:2c:56:f3:7e:51:3c:d5: b8:80:7f:34:0b:11:54:52:b4:6b:5c:23:ac:19:5a:a8:db:a2: 2d:32:d3:f3:94:17:d8:51:34:ec:35:f5:8c:4e:ea:d7:59:70: 4c:9f:32:73:11:0b:95:f2:23:e5:1a:53:be:b1:d1:46:e1:ad: 5a:c2:cd:b9:df:13:32:a7:83:3f:0c:85:36:11:59:57:17:f4: 5b:ff:f1:3e:1e:5b:c1:00:37:bf:d1:d1:55:87:49:c4:58:cb: 53:fb:e7:a8:ab:91:e4:5c:cb:54:70:46:57:be:59:67:df:4c: 6e:c5:9a:7b:63:d1:f5:51:2c:26:d8:02:4f:f9:08:fd:d7:a4: 51:11:41:30:76:82:28:88:97:40:ea:a4:1f:30:d3:19:20:c2: 71:e9:44:ab:23:d5:54:a0:b4:df:ef:42:32:86:7d:43:d3:c7: 33:a5:f7:b2:e1:d0:da:4c:82:bf:f8:d3:8d:a5:e3:4f:5b:fd: e8:e6:fc:cc:53:ae:55:d9:aa:51:68:a5:54:44:52:97:b8:79: 92:9c:2f:92:b5:1d:b4:33:71:63:c7:f0:93:95:96:86:09:da: a5:0d:e0:14:22:c2:1d:41:06:77:6b:c1:2d:31:04:fd:8d:50: 10:e4:25:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkZLu2rNe6iC7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MjljODYyMjItYjU4Zi00NzljLTlhMjMtNDQ2ZTY5M2U5ZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfmBIk20tZGJF68Pc4iHhIkkcYWnfhJhVlBc scTON8Yt2g7EJWIC2b/GGDTwLYiE4HnaimFaUzSMaqxqjPuItdze2lzRx1YRtHEq Xm42mLuDBLdXHImXrGFK975wbL0YQxQVnEMPCN3id19Bw7KVVJyQsVhG/a/QkqW6 hsMqtOkgbrxqERA11kgBfdquVunNbJxoF7dtTaNWCb9p06ULEMX2VW3ELB3o8R3E v/e5XmwbMTVWw/eAQ8LSvirc75wweJyqI+sExRxp4CqpihdCoJ+RFafvvGiKGvrR xq3tiCGFJTHtVOlIWI+L44BISByuiqDDiVNKpK+3VBlUexyz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2X97jhmUhIBXBhcymbtbs73gYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDQwZjZiMjMtMThmZC0z M2RmLWFhYjgtOGU1Y2YzMTM1ZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFeqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqK5W6bGIRHPtAALFbzflE81biAfzQLEVRStGtcI6wZWqjboi0y0/OU F9hRNOw19YxO6tdZcEyfMnMRC5XyI+UaU76x0UbhrVrCzbnfEzKngz8MhTYRWVcX 9Fv/8T4eW8EAN7/R0VWHScRYy1P756irkeRcy1RwRle+WWffTG7Fmntj0fVRLCbY Ak/5CP3XpFERQTB2giiIl0DqpB8w0xkgwnHpRKsj1VSgtN/vQjKGfUPTxzOl97Lh 0NpMgr/4042l409b/ejm/MxTrlXZqlFopVREUpe4eZKcL5K1HbQzcWPH8JOVloYJ 2qUN4BQiwh1BBndrwS0xBP2NUBDkJUU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:59:07 2026 by rpki-client