$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa File: 8b3890fd-1aa0-3cae-827e-1384e95466a3.roa (raw, json) Hash identifier: cWpC6cSuDZju1gMHD3n3RT9Fwv981b1ka6sGJziUSDI= Subject key identifier: 5E:1F:00:EE:3D:D6:7C:05:61:95:B7:0B:72:E5:01:34:6A:12:9B:24 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584CC7774A33FFD8BCC1634CB680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 203 IP address blocks: 168.87.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:4a:33:ff:d8:bc:c1:63:4c:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=e32998f8-3c0f-4370-89f4-e80828f30c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:14:ba:f9:50:8e:f8:f8:f9:f3:bc:98:86: f9:95:dd:98:a9:94:e1:f0:b5:29:d9:25:c5:3a:5b: 2c:fb:cd:c0:94:44:1a:02:2e:17:fb:9b:37:4a:2e: 77:1a:07:98:aa:d5:b1:8f:30:02:b9:b2:2c:7d:7c: 85:c4:3c:a2:da:37:26:49:a4:8c:2b:d4:c4:80:00: 46:50:94:e4:d1:cf:90:46:93:5d:fd:30:59:16:0e: 3e:7a:80:27:31:85:40:83:53:6c:22:f1:01:61:d6: ac:1b:ca:a7:1a:8c:32:44:dd:06:22:af:7b:a0:a8: d7:ec:e4:a8:49:dc:5d:93:35:fa:49:e5:1f:e3:92: 99:38:bb:03:0a:52:e9:f1:2f:7a:ed:34:ff:be:f3: 0e:6c:5b:c6:41:54:83:3c:28:20:28:a0:95:e1:3b: 52:e3:b2:89:b0:5f:4f:c1:c0:8a:fb:cd:a8:a7:d2: e4:75:56:28:6f:88:dd:a0:8c:18:2f:4a:a1:19:03: 31:3d:3f:66:98:03:9b:86:99:67:7b:3b:58:71:c9: 5e:61:fb:37:fd:61:fd:c9:90:f6:06:b6:c9:fe:e7: 16:ec:6e:74:88:cb:50:8b:6f:71:78:c2:0a:f9:77: cd:29:6b:62:d6:53:c8:37:89:32:20:29:22:89:81: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:00:EE:3D:D6:7C:05:61:95:B7:0B:72:E5:01:34:6A:12:9B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8b3890fd-1aa0-3cae-827e-1384e95466a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c2:b5:74:3d:a7:54:67:51:ae:b2:66:73:c3:7f:cf:55:b7: f4:a8:02:a8:b7:e6:8b:dc:07:12:1a:0b:11:da:24:20:53:60: ad:05:b3:ff:6b:32:d9:48:bf:f9:5a:70:a7:b1:32:b2:5b:03: a0:fc:17:03:1f:1f:4c:14:52:aa:fd:50:37:a4:78:c0:2d:d8: 52:ba:08:7f:c0:3e:f1:81:da:42:dc:ae:33:3c:82:5c:47:7a: 85:ab:c5:59:75:68:2d:af:af:03:62:50:4c:7f:29:70:b0:67: 5d:68:67:7a:84:8b:a3:18:7e:64:5e:99:3c:60:db:3d:65:d2: ff:61:d2:6f:30:55:1d:52:98:6e:6d:f9:a7:bb:24:ec:d6:81: e1:a2:6e:f0:4c:a4:fd:27:80:97:59:9c:2f:74:54:e6:79:48: 4b:99:4f:f5:1a:30:8f:8b:14:3a:ce:48:36:32:bb:37:c3:4b: b6:e8:ec:8b:b0:0f:89:7e:88:32:cc:bc:3d:00:50:b1:32:39: db:6f:39:47:f7:75:06:61:95:41:b0:32:b6:24:64:6b:9c:61: 5d:6f:d7:65:c8:f2:ca:12:e1:b7:07:b5:2b:c9:c6:bf:49:b9: fc:7c:2a:56:c9:3b:c1:15:6b:16:3b:27:92:bf:e9:26:8c:77: 81:97:2f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0oz/9i8wWNMtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk ZTMyOTk4ZjgtM2MwZi00MzcwLTg5ZjQtZTgwODI4ZjMwYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNgUuvlQjvj4+fO8mIb5ld2YqZTh8LUp2SXF Olss+83AlEQaAi4X+5s3Si53GgeYqtWxjzACubIsfXyFxDyi2jcmSaSMK9TEgABG UJTk0c+QRpNd/TBZFg4+eoAnMYVAg1NsIvEBYdasG8qnGowyRN0GIq97oKjX7OSo SdxdkzX6SeUf45KZOLsDClLp8S967TT/vvMObFvGQVSDPCggKKCV4TtS47KJsF9P wcCK+82op9LkdVYob4jdoIwYL0qhGQMxPT9mmAObhplneztYccleYfs3/WH9yZD2 BrbJ/ucW7G50iMtQi29xeMIK+XfNKWti1lPIN4kyICkiiYFpCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4fAO491nwFYZW3C3LlATRqEpskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGIzODkwZmQtMWFhMC0z Y2FlLTgyN2UtMTM4NGU5NTQ2NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHCtXQ9p1RnUa6yZnPDf89Vt/SoAqi35ovcBxIaCxHaJCBTYK0Fs/9r MtlIv/lacKexMrJbA6D8FwMfH0wUUqr9UDekeMAt2FK6CH/APvGB2kLcrjM8glxH eoWrxVl1aC2vrwNiUEx/KXCwZ11oZ3qEi6MYfmRemTxg2z1l0v9h0m8wVR1SmG5t +ae7JOzWgeGibvBMpP0ngJdZnC90VOZ5SEuZT/UaMI+LFDrOSDYyuzfDS7bo7Iuw D4l+iDLMvD0AULEyOdtvOUf3dQZhlUGwMrYkZGucYV1v12XI8soS4bcHtSvJxr9J ufx8KlbJO8EVaxY7J5K/6SaMd4GXL40= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:13 2026 by rpki-client