$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa File: 89b6ce69-65e4-30bb-94da-990da7620180.roa (raw, json) Hash identifier: FionCTmdZr7PBSZk+DempDuTfNHmD+LrSHUC9nCOFtA= Subject key identifier: 11:CC:0F:79:BC:7E:8A:28:32:E6:43:21:A4:46:2B:B8:4F:4B:E6:F8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F4976147A63223066BB190480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 168.87.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:14:7a:63:22:30:66:bb:19:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38653a6a-7b1f-4968-b878-ae2e62453a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:2a:99:b9:d2:e0:3f:76:32:6e:6c:32:f2: 5b:82:d8:b0:59:e9:aa:38:1e:63:00:0f:30:6c:86: e2:58:ae:92:3b:47:ab:9b:ab:9f:95:3f:df:8d:57: 82:d6:49:3c:f6:95:39:25:c3:a3:8d:8b:ec:a7:6b: 09:9a:8b:c0:c1:36:52:6b:a5:79:bb:1e:40:9a:de: 75:67:90:a4:58:ff:95:b0:40:d8:18:64:ef:6e:b6: 4a:e8:db:e1:f9:d6:4f:8f:0a:55:34:2d:75:e1:25: 96:b0:ad:e8:2e:bc:53:13:9d:58:ee:97:ac:2b:d5: c2:3a:9f:c0:cf:ea:fe:6b:c6:b4:6b:cf:67:6a:09: 0c:60:50:0e:7f:6c:9a:0c:3f:ef:2e:fc:98:dd:64: a5:85:10:16:c1:a3:8a:d6:12:53:c8:41:a0:17:00: 11:c8:92:3e:9d:92:86:2e:6c:b4:30:45:02:f7:b0: c1:8b:21:70:f3:d1:43:88:89:c9:67:9c:27:f0:d3: a4:c1:ac:13:23:3f:be:d6:01:5e:15:7a:e1:08:5c: 02:3e:0c:61:21:7e:2a:2f:b1:86:46:d6:54:22:54: d9:d6:da:da:31:1e:91:2e:c4:53:8e:3d:cd:41:3c: 58:c2:7a:09:95:6b:f1:1a:58:5a:69:74:c3:6d:35: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:0F:79:BC:7E:8A:28:32:E6:43:21:A4:46:2B:B8:4F:4B:E6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/89b6ce69-65e4-30bb-94da-990da7620180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c7:ca:37:e7:50:5e:fc:02:2e:85:b7:22:61:83:06:50:f6: 18:1a:67:70:49:73:7b:db:a7:0b:30:e0:64:62:b1:36:d2:e8: ad:70:d8:0b:b3:c9:e7:9d:a7:4e:53:a5:ad:cd:9e:d6:b7:3f: 55:af:78:fd:4c:69:7b:9f:0c:93:44:4c:1f:4c:a7:c2:8b:4e: de:6b:38:fd:63:20:9b:a2:46:f5:0c:21:26:1b:6d:fb:85:b7: 58:f3:cc:dd:5a:7a:9c:c0:ce:56:32:b3:9e:40:11:d1:ae:8f: f7:b0:96:e7:60:5a:08:e0:f7:cb:36:85:ed:fb:0f:2a:4e:cc: f3:3e:ab:be:f6:d2:62:37:eb:07:09:19:a9:79:88:ba:5a:e1: 1b:fe:d0:99:b6:0c:ce:bc:d9:2b:f4:48:d2:35:4d:7d:21:f6: 57:47:5a:84:3a:87:b6:dc:08:82:71:6e:44:29:b5:51:7e:99: 2f:2e:d6:3e:f3:b6:59:ac:37:ae:1e:fa:b3:2d:a4:3d:97:5f: ab:38:c0:64:9b:c5:9d:dc:05:c6:9d:23:33:30:96:72:0d:4c: e2:2d:f1:1e:40:2b:5c:db:55:7b:e2:56:7a:ae:db:65:68:da: 2d:d4:25:75:15:24:e9:0c:dc:00:50:c5:fb:0f:a2:8e:ad:15: 27:c8:27:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdhR6YyIwZrsZBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzg2NTNhNmEtN2IxZi00OTY4LWI4NzgtYWUyZTYyNDUzYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMoqmbnS4D92Mm5sMvJbgtiwWemqOB5jAA8w bIbiWK6SO0erm6uflT/fjVeC1kk89pU5JcOjjYvsp2sJmovAwTZSa6V5ux5Amt51 Z5CkWP+VsEDYGGTvbrZK6Nvh+dZPjwpVNC114SWWsK3oLrxTE51Y7pesK9XCOp/A z+r+a8a0a89nagkMYFAOf2yaDD/vLvyY3WSlhRAWwaOK1hJTyEGgFwARyJI+nZKG Lmy0MEUC97DBiyFw89FDiInJZ5wn8NOkwawTIz++1gFeFXrhCFwCPgxhIX4qL7GG RtZUIlTZ1traMR6RLsRTjj3NQTxYwnoJlWvxGlhaaXTDbTXSVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHMD3m8foooMuZDIaRGK7hPS+b4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODliNmNlNjktNjVlNC0z MGJiLTk0ZGEtOTkwZGE3NjIwMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHHyjfnUF78Ai6FtyJhgwZQ9hgaZ3BJc3vbpwsw4GRisTbS6K1w2Auz yeedp05Tpa3Nnta3P1WveP1MaXufDJNETB9Mp8KLTt5rOP1jIJuiRvUMISYbbfuF t1jzzN1aepzAzlYys55AEdGuj/ewludgWgjg98s2he37DypOzPM+q7720mI36wcJ Gal5iLpa4Rv+0Jm2DM682Sv0SNI1TX0h9ldHWoQ6h7bcCIJxbkQptVF+mS8u1j7z tlmsN64e+rMtpD2XX6s4wGSbxZ3cBcadIzMwlnINTOIt8R5AK1zbVXviVnqu22Vo 2i3UJXUVJOkM3ABQxfsPoo6tFSfIJ/A= -----END CERTIFICATE-----Generated at Sun Oct 4 18:32:41 2026 by rpki-client