$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa File: 843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa (raw, json) Hash identifier: OXpT0t2KREA70wKscCH0V6Cqa7XnhvXjqWSVszTyAbU= Subject key identifier: A7:4B:97:DE:F2:15:DD:D7:7A:9D:3A:08:4D:E2:A5:97:8C:D9:25:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FDE26468AF90DCFA28600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 206.164.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:de:26:46:8a:f9:0d:cf:a2:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=e9f78007-147a-404e-be73-d49282ede13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:01:d4:ed:4e:85:b5:f5:1b:ca:df:37:2d: 6b:e3:d8:ee:00:b1:22:51:39:ca:e1:aa:c7:a6:8d: 6b:44:8a:08:17:95:70:62:99:6f:5d:54:9f:ab:b8: 88:58:da:dd:4b:87:28:f3:b7:fc:bc:52:d5:ea:e1: 11:8f:56:98:39:b2:12:06:be:5e:67:92:aa:3b:f6: ad:a4:f3:05:76:dd:7d:0d:61:24:b9:91:02:5c:89: 52:e8:56:f8:55:1d:bb:97:3b:a7:e9:8d:1a:2d:6d: 1b:34:d3:b5:56:36:6f:b9:84:02:9a:d0:12:07:76: 91:86:59:e6:55:c4:e3:bf:91:3c:70:14:f7:4e:f6: 9b:97:3d:9c:51:b1:8d:11:8a:e7:3d:d2:20:14:51: 5e:48:3c:f9:71:60:9c:b3:b2:2e:39:d4:81:05:90: 66:4a:19:1f:2b:6a:84:a1:82:76:05:d8:be:89:ff: 8d:d8:12:89:33:c8:31:0e:31:b4:4b:4d:af:b5:c0: 76:39:29:f1:48:d8:fb:27:0f:ee:27:e9:74:5f:e7: 7d:43:58:c0:18:25:39:c9:e6:cb:39:21:cf:a6:97: c0:97:22:ac:1a:62:57:57:ca:93:7d:ce:fa:09:b3: 03:0b:9e:e9:29:ba:f9:c4:d9:c6:8b:fc:85:bb:47: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:97:DE:F2:15:DD:D7:7A:9D:3A:08:4D:E2:A5:97:8C:D9:25:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/843b1e5e-e2ac-3a59-9b60-32f66c34a3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 206.164.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:19:5b:bb:50:25:49:16:af:f2:51:81:48:fc:06:d7:32:d2: 78:b4:09:7d:2b:11:63:de:ba:64:ab:e4:5f:d8:b9:2e:a8:7e: 37:52:a1:8c:3c:ee:53:d5:8d:9a:bd:31:ad:20:83:a4:8e:49: 78:62:4c:28:af:01:de:1f:87:06:1a:3b:8e:21:3e:2e:89:8b: 63:64:65:1a:77:d1:2c:6a:53:63:b6:fa:cd:a1:b4:9e:2b:71: 34:8f:b9:c3:dc:75:e5:cb:1d:06:9e:7c:00:aa:57:61:28:c8: ea:ea:4a:39:ba:75:87:80:c1:1f:3b:af:85:47:a5:2f:0a:9a: cd:8f:aa:3f:13:61:46:7c:73:5b:12:82:a0:0f:c7:e6:33:ab: 24:be:67:5e:b5:a8:1b:bb:d3:fe:88:25:7e:9c:11:20:a2:03: d4:e2:f5:4b:58:62:b0:be:92:63:41:1a:3d:c4:a6:3a:f0:64: 91:7d:e4:47:84:9d:a1:e9:02:05:34:5d:34:a0:8e:73:64:68: b6:c7:fe:50:74:11:80:61:8c:24:f6:fc:14:48:65:45:f1:30: de:3a:a6:3f:1c:1d:bc:e9:75:bc:11:76:58:36:77:85:e3:44: 40:9e:1c:d5:34:bd:62:75:b6:5f:96:27:87:03:7a:b9:11:95: 35:69:d0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b94mRor5Dc+ihgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTlmNzgwMDctMTQ3YS00MDRlLWJlNzMtZDQ5MjgyZWRlMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh4B1O1OhbX1G8rfNy1r49juALEiUTnK4arH po1rRIoIF5VwYplvXVSfq7iIWNrdS4co87f8vFLV6uERj1aYObISBr5eZ5KqO/at pPMFdt19DWEkuZECXIlS6Fb4VR27lzun6Y0aLW0bNNO1VjZvuYQCmtASB3aRhlnm VcTjv5E8cBT3Tvablz2cUbGNEYrnPdIgFFFeSDz5cWCcs7IuOdSBBZBmShkfK2qE oYJ2Bdi+if+N2BKJM8gxDjG0S02vtcB2OSnxSNj7Jw/uJ+l0X+d9Q1jAGCU5yebL OSHPppfAlyKsGmJXV8qTfc76CbMDC57pKbr5xNnGi/yFu0cRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdLl97yFd3Xep06CE3ipZeM2SWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODQzYjFlNWUtZTJhYy0z YTU5LTliNjAtMzJmNjZjMzRhM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8ZW7tQJUkWr/JRgUj8Btcy0ni0CX0rEWPeumSr5F/YuS6ofjdSoYw8 7lPVjZq9Ma0gg6SOSXhiTCivAd4fhwYaO44hPi6Ji2NkZRp30SxqU2O2+s2htJ4r cTSPucPcdeXLHQaefACqV2EoyOrqSjm6dYeAwR87r4VHpS8Kms2Pqj8TYUZ8c1sS gqAPx+YzqyS+Z161qBu70/6IJX6cESCiA9Ti9UtYYrC+kmNBGj3EpjrwZJF95EeE naHpAgU0XTSgjnNkaLbH/lB0EYBhjCT2/BRIZUXxMN46pj8cHbzpdbwRdlg2d4Xj RECeHNU0vWJ1tl+WJ4cDerkRlTVp0Ao= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:47 2026 by rpki-client