$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa File: 527a6323-d80e-34e3-847e-763dc7c34e8d.roa (raw, json) Hash identifier: JiL7fVY5VTtG/duB63Kui5df80gIwABnZ4veKdFFxNE= Subject key identifier: C5:22:28:55:CA:53:79:00:A0:2D:DA:0E:43:C7:84:F6:EF:75:3F:8C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA7934C7942C17BFD2D70BD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3356 IP address blocks: 168.87.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:4c:79:42:c1:7b:fd:2d:70:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9b9afc60-feb2-427b-9523-a3f9bc87ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:b5:46:00:c8:78:98:11:6d:f9:25:e6:37: d5:c7:78:77:98:a5:74:68:58:36:a7:db:53:2a:6a: 80:f3:0b:0b:bf:e3:09:32:95:3a:8f:bd:7b:87:c8: eb:d6:00:b2:32:e2:6c:22:1b:f3:1c:28:44:0c:b8: e8:d6:55:9f:66:ac:37:96:38:a2:18:c5:b7:9b:75: 8e:8f:cd:47:26:3f:53:45:a3:10:39:e0:2f:11:ab: 13:d2:bc:95:df:bc:9f:f2:98:48:38:e7:45:d0:73: 9e:97:c7:1a:6b:1a:e9:db:9d:4c:73:1a:73:71:12: b3:46:a2:f4:a1:f0:64:29:28:34:fa:a9:7f:47:c3: 2c:8b:e6:6b:3b:e3:30:0f:60:ac:4f:96:92:f2:77: 22:4d:f1:20:ed:e2:47:3f:7e:d4:2e:20:b5:df:1a: 44:35:5c:3a:7f:12:99:d5:24:f7:b6:72:02:d1:ff: 53:dc:24:ee:5d:28:8a:0e:c3:8d:a0:87:f0:aa:d5: fb:7e:7e:87:9c:ef:0a:31:13:45:57:72:c1:93:1e: da:c4:0c:dd:b0:be:61:6c:a0:dd:08:0c:c0:e2:2c: 84:71:b3:dd:6f:c6:d8:b4:65:78:fc:15:dc:1c:7a: b2:55:18:bd:b9:1d:20:99:c2:7a:60:c3:b9:0d:0a: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:22:28:55:CA:53:79:00:A0:2D:DA:0E:43:C7:84:F6:EF:75:3F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/527a6323-d80e-34e3-847e-763dc7c34e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e3:57:7e:d9:b0:e6:f7:9a:1e:dd:df:6f:19:81:41:d2:1d: 12:94:8f:14:4b:29:41:e4:b7:4e:5e:51:17:0c:6a:12:c4:39: 62:8d:b2:20:b6:a0:6d:16:44:40:fe:52:68:1e:90:26:2b:0b: 8d:9e:57:bd:1c:5b:57:c3:14:83:5a:2d:e9:30:c1:6b:ca:34: 42:bf:c0:35:ee:70:d5:67:0e:61:3d:21:e9:86:89:d4:26:cf: f6:f9:87:75:6c:b1:cb:aa:22:73:f4:80:a5:e4:af:70:57:32: 7b:1e:1e:18:52:e8:76:da:96:47:a7:22:f4:f4:55:a2:75:f3: ea:5c:eb:0b:a9:61:ef:90:a8:9b:b2:ed:5c:e9:1d:d8:97:2b: 78:17:b3:4a:62:f8:bf:1b:30:6c:38:e5:b8:e4:3e:c3:67:fb: 42:ef:c3:83:31:d3:79:ba:36:ce:a7:13:aa:a1:2e:75:b7:18: 88:bc:09:0d:31:1e:e8:96:fb:ea:14:cd:6d:89:dd:10:a1:b0: e2:de:24:2f:a2:30:40:da:67:84:43:f2:31:64:09:d8:c9:0e: 39:3a:34:e0:51:98:8c:bd:ce:c9:4e:5b:11:d0:4f:5c:4c:93: b2:ce:ce:49:f8:2b:cd:53:77:70:50:81:e0:62:97:da:8f:89: 13:33:bc:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk0x5QsF7/S1wvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWI5YWZjNjAtZmViMi00MjdiLTk1MjMtYTNmOWJjODdhYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuu1RgDIeJgRbfkl5jfVx3h3mKV0aFg2p9tT KmqA8wsLv+MJMpU6j717h8jr1gCyMuJsIhvzHChEDLjo1lWfZqw3ljiiGMW3m3WO j81HJj9TRaMQOeAvEasT0ryV37yf8phIOOdF0HOel8caaxrp251McxpzcRKzRqL0 ofBkKSg0+ql/R8Msi+ZrO+MwD2CsT5aS8nciTfEg7eJHP37ULiC13xpENVw6fxKZ 1ST3tnIC0f9T3CTuXSiKDsONoIfwqtX7fn6HnO8KMRNFV3LBkx7axAzdsL5hbKDd CAzA4iyEcbPdb8bYtGV4/BXcHHqyVRi9uR0gmcJ6YMO5DQrXRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUiKFXKU3kAoC3aDkPHhPbvdT+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTI3YTYzMjMtZDgwZS0z NGUzLTg0N2UtNzYzZGM3YzM0ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrjV37ZsOb3mh7d328ZgUHSHRKUjxRLKUHkt05eURcMahLEOWKNsiC2 oG0WRED+UmgekCYrC42eV70cW1fDFINaLekwwWvKNEK/wDXucNVnDmE9IemGidQm z/b5h3VsscuqInP0gKXkr3BXMnseHhhS6HbalkenIvT0VaJ18+pc6wupYe+QqJuy 7VzpHdiXK3gXs0pi+L8bMGw45bjkPsNn+0Lvw4Mx03m6Ns6nE6qhLnW3GIi8CQ0x HuiW++oUzW2J3RChsOLeJC+iMEDaZ4RD8jFkCdjJDjk6NOBRmIy9zslOWxHQT1xM k7LOzkn4K81Td3BQgeBil9qPiRMzvEQ= -----END CERTIFICATE-----Generated at Wed Jul 29 05:16:24 2026 by rpki-client