$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa File: 48529b48-e02e-3ba6-87a0-38a733adde1c.roa (raw, json) Hash identifier: mjaTmhogV3iYtaXwL4QIkj1VsH4wDbJLYYL4BMBFrAw= Subject key identifier: CA:89:A9:F7:69:71:BC:39:31:A3:9A:9A:52:42:A8:13:80:E1:11:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FDCB38247A367771C0F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 168.87.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:dc:b3:82:47:a3:67:77:1c:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3d63b7a9-88cf-4751-aed1-0772fa0e4fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:e3:87:51:fb:83:9c:6f:85:67:14:8f:f6: 70:71:ac:ba:e0:89:7e:72:ff:69:5f:5b:c5:7c:4b: 40:c4:62:ec:a0:7f:f2:a5:ad:59:2f:a3:93:c5:86: 02:8a:86:c0:d9:d8:37:c8:d9:be:2c:c7:6c:6a:c0: c8:fb:15:b1:0c:6d:57:72:d5:dc:96:fa:ac:cb:96: 64:b7:b0:af:82:17:b6:8d:1e:fc:4c:15:50:8c:98: 41:dd:d5:c2:54:72:30:bb:cf:c3:71:85:a2:0f:89: 27:9a:39:58:8a:0d:26:31:19:6b:93:57:e1:2c:f0: 23:fd:65:c6:57:2f:3c:23:c2:b8:05:76:15:d9:b9: 14:25:27:96:89:65:0b:79:a4:1f:c1:f1:5d:9f:2a: 30:f4:66:ba:64:3b:c2:3e:93:e3:a7:b4:46:f4:9d: 0a:52:ed:d8:5c:71:a0:73:17:b8:1f:1d:52:5d:a2: e0:1f:71:35:2f:e8:93:2c:71:0d:60:cf:2a:9d:12: 1c:f8:db:ab:9e:94:90:a1:4b:28:3d:85:cf:cf:e2: 17:29:bd:0e:74:fc:d3:2d:8e:05:1e:00:74:ab:74: 26:49:c1:b0:9c:75:84:fc:e4:ca:a6:69:64:82:fd: 15:64:a6:d2:1b:6c:07:20:de:ce:2f:7e:30:25:b8: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:89:A9:F7:69:71:BC:39:31:A3:9A:9A:52:42:A8:13:80:E1:11:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/48529b48-e02e-3ba6-87a0-38a733adde1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c3:f4:18:b1:c8:b7:c5:a6:0c:20:96:68:03:8f:23:f4:0e: 1f:ea:72:a5:8d:ee:41:1f:51:bc:40:74:a3:fe:8e:d1:db:e9: 3a:86:56:72:e4:ac:95:45:71:9b:1c:4d:80:68:67:48:52:ba: bf:3f:41:c9:3a:6c:7f:cb:36:30:29:a0:84:41:52:2d:8f:b6: bc:2c:7f:f6:7d:76:0e:62:dd:25:2a:7d:2f:d3:33:f6:25:75: 98:f4:fc:fe:c6:51:03:c5:f8:fa:53:0d:e1:89:61:96:3a:a4: ae:a0:51:f1:41:a3:a3:1f:ee:45:3b:01:46:43:ed:00:57:55: 49:ca:b9:8d:d7:bc:c8:11:97:5f:82:15:0b:05:4d:16:fe:f2: a4:0b:da:68:76:6b:7e:86:7a:7a:c9:c3:9f:f1:86:1b:73:3d: bd:80:95:96:ba:c5:e9:8c:ab:3b:b1:12:b5:64:4e:bf:40:1b: 1f:f7:4a:75:2a:32:91:ef:9e:da:d0:af:fd:8f:72:5b:32:ca: 0c:bc:cf:c0:df:8c:74:ed:30:5a:a0:23:ad:f3:9b:81:de:6b: 6b:2e:72:61:14:a6:df:fd:2f:46:8d:07:3f:e9:0c:ef:31:00: b4:ca:9a:56:1f:e0:11:66:46:ef:2c:c8:e7:40:b7:71:31:01: 72:59:27:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9yzgkejZ3ccDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2Q2M2I3YTktODhjZi00NzUxLWFlZDEtMDc3MmZhMGU0ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgjjh1H7g5xvhWcUj/Zwcay64Il+cv9pX1vF fEtAxGLsoH/ypa1ZL6OTxYYCiobA2dg3yNm+LMdsasDI+xWxDG1XctXclvqsy5Zk t7Cvghe2jR78TBVQjJhB3dXCVHIwu8/DcYWiD4knmjlYig0mMRlrk1fhLPAj/WXG Vy88I8K4BXYV2bkUJSeWiWULeaQfwfFdnyow9Ga6ZDvCPpPjp7RG9J0KUu3YXHGg cxe4Hx1SXaLgH3E1L+iTLHENYM8qnRIc+NurnpSQoUsoPYXPz+IXKb0OdPzTLY4F HgB0q3QmScGwnHWE/OTKpmlkgv0VZKbSG2wHIN7OL34wJbiWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqJqfdpcbw5MaOamlJCqBOA4RFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1MjliNDgtZTAyZS0z YmE2LTg3YTAtMzhhNzMzYWRkZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/D9BixyLfFpgwglmgDjyP0Dh/qcqWN7kEfUbxAdKP+jtHb6TqGVnLk rJVFcZscTYBoZ0hSur8/Qck6bH/LNjApoIRBUi2Ptrwsf/Z9dg5i3SUqfS/TM/Yl dZj0/P7GUQPF+PpTDeGJYZY6pK6gUfFBo6Mf7kU7AUZD7QBXVUnKuY3XvMgRl1+C FQsFTRb+8qQL2mh2a36GenrJw5/xhhtzPb2AlZa6xemMqzuxErVkTr9AGx/3SnUq MpHvntrQr/2Pclsyygy8z8DfjHTtMFqgI63zm4Hea2sucmEUpt/9L0aNBz/pDO8x ALTKmlYf4BFmRu8syOdAt3ExAXJZJ1M= -----END CERTIFICATE-----Generated at Fri Apr 17 21:30:00 2026 by rpki-client