$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa File: 641ba864-2fd1-3793-9a93-207db100941c.roa (raw, json) Hash identifier: YMLvm4VAnvzZdnFLWRkNlk/q/hYdC1Gn2OZ+ccgBcsw= Subject key identifier: 2C:A0:9C:BF:9F:83:B4:C5:D3:F7:83:6A:54:2B:0A:68:23:94:43:59 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FDC5B1F1357B893B7B500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 168.87.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:dc:5b:1f:13:57:b8:93:b7:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=0a07f8fb-2992-4b09-8806-81777043a3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:74:a3:1b:87:0e:43:a1:d3:62:96:36:c5:d0: 37:6c:ff:81:24:6c:46:b2:82:72:a3:3e:68:1c:97: 9f:4d:5b:ed:5c:70:87:48:60:20:67:1b:c7:22:ab: 5e:81:6b:6e:fe:25:93:d2:5b:b5:70:e0:9d:5b:2e: f8:d2:3d:5b:60:fa:e3:00:ba:34:d0:5a:12:b5:59: 04:92:03:78:f0:dd:47:05:a3:1c:cf:4b:33:a6:90: 2f:38:db:54:ba:71:79:9a:b2:d2:09:c6:39:f9:d2: c1:a6:4a:a1:ef:63:fa:44:25:c8:a3:fd:cb:11:cd: 14:cf:fa:37:05:1f:95:72:97:05:93:8a:4f:32:43: 0d:f4:f0:06:d1:9b:91:e2:ec:dc:8b:7e:e7:09:1b: 51:37:42:22:2d:30:51:ab:ef:89:8f:7f:70:30:f8: 84:59:03:c5:14:c2:ba:50:85:9f:f0:43:12:f6:65: 1c:8b:eb:b3:08:43:78:08:ed:a8:3a:36:52:49:ac: 2d:b7:df:8e:45:94:4c:8f:ab:b5:bc:24:b7:e0:af: 7b:0b:24:ad:f9:e0:b9:6f:04:ad:6d:48:44:ad:53: 0f:aa:ee:15:b5:c2:ce:cc:0f:13:6d:8c:f9:d9:55: 12:c9:d6:a8:0d:fd:db:56:25:50:9a:d8:66:20:01: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:9C:BF:9F:83:B4:C5:D3:F7:83:6A:54:2B:0A:68:23:94:43:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/641ba864-2fd1-3793-9a93-207db100941c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:40:8c:d9:d7:96:2d:ec:e9:24:a1:ac:cd:47:54:a9:c5:f5: 43:54:b8:65:60:e5:b4:cf:02:76:ec:d1:1e:86:88:98:4f:93: a2:f0:7e:51:e9:51:85:64:7f:75:90:90:41:cf:90:b4:82:0a: f4:34:b9:5f:2e:1b:93:7b:bf:4b:45:07:8f:83:11:45:cd:0e: 73:d9:f1:f6:7b:16:eb:35:93:df:ac:5b:96:32:05:12:14:92: aa:cb:73:14:41:88:ac:ac:03:45:33:8e:1d:fe:a0:09:d5:ec: 20:eb:cd:31:03:40:b0:84:83:bd:1a:bb:e5:a5:50:0e:98:0c: 55:72:03:74:98:ce:45:d5:b9:ff:1c:4b:de:46:be:4f:cd:05: 05:8f:8e:02:84:05:b5:3c:82:3a:22:e7:12:cd:ba:ff:31:a8: 85:4d:dd:bf:46:12:6e:b6:7d:cc:77:41:64:e1:89:24:2d:ff: 6d:89:e0:0b:95:ef:fe:86:48:2d:84:07:0c:d6:2b:c4:0c:04: 5a:54:ad:39:23:3a:b8:18:33:80:c0:7b:8e:d0:df:90:a9:d8: 30:d8:34:d3:3a:e1:4c:67:ae:01:bd:54:22:bc:f2:74:74:69: a7:84:b8:e2:ce:d9:79:04:38:84:4b:97:91:57:05:d5:90:83: 08:68:ac:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9xbHxNXuJO3tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MGEwN2Y4ZmItMjk5Mi00YjA5LTg4MDYtODE3NzcwNDNhM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3SjG4cOQ6HTYpY2xdA3bP+BJGxGsoJyoz5o HJefTVvtXHCHSGAgZxvHIqtegWtu/iWT0lu1cOCdWy740j1bYPrjALo00FoStVkE kgN48N1HBaMcz0szppAvONtUunF5mrLSCcY5+dLBpkqh72P6RCXIo/3LEc0Uz/o3 BR+VcpcFk4pPMkMN9PAG0ZuR4uzci37nCRtRN0IiLTBRq++Jj39wMPiEWQPFFMK6 UIWf8EMS9mUci+uzCEN4CO2oOjZSSawtt9+ORZRMj6u1vCS34K97CySt+eC5bwSt bUhErVMPqu4VtcLOzA8TbYz52VUSydaoDf3bViVQmthmIAEQGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCygnL+fg7TF0/eDalQrCmgjlENZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjQxYmE4NjQtMmZkMS0z NzkzLTlhOTMtMjA3ZGIxMDA5NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9AjNnXli3s6SShrM1HVKnF9UNUuGVg5bTPAnbs0R6GiJhPk6LwflHp UYVkf3WQkEHPkLSCCvQ0uV8uG5N7v0tFB4+DEUXNDnPZ8fZ7Fus1k9+sW5YyBRIU kqrLcxRBiKysA0Uzjh3+oAnV7CDrzTEDQLCEg70au+WlUA6YDFVyA3SYzkXVuf8c S95Gvk/NBQWPjgKEBbU8gjoi5xLNuv8xqIVN3b9GEm62fcx3QWThiSQt/22J4AuV 7/6GSC2EBwzWK8QMBFpUrTkjOrgYM4DAe47Q35Cp2DDYNNM64UxnrgG9VCK88nR0 aaeEuOLO2XkEOIRLl5FXBdWQgwhorBQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:47 2026 by rpki-client