$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa File: a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa (raw, json) Hash identifier: fn/iZzwJy8rL68IQfb0Avs9eSm7r2KJvx79znUBYYKg= Subject key identifier: 86:FE:74:E7:49:B6:53:58:EE:21:81:D5:DF:E3:8F:0A:13:07:32:D9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D0912698630C024BA1743FC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 202 IP address blocks: 168.87.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:69:86:30:c0:24:ba:17:43:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=9652914b-e029-469a-84fb-dd3b63da9a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:51:65:77:98:7b:86:82:b2:09:19:71:3a:61: 2c:ed:0c:1b:76:e5:e6:0b:a1:53:91:fa:25:18:f3: 9d:9a:34:d0:bf:ee:65:05:ab:81:91:03:37:0f:dc: b9:e4:22:be:df:05:1a:85:49:e8:a3:9c:58:56:ed: 6e:7b:48:b0:fa:b6:6b:71:12:01:a0:06:c3:04:ff: 61:8f:6f:25:54:c0:f3:11:3b:d9:50:c6:82:67:c1: 5e:a4:e1:ef:2b:7f:18:f6:44:8e:00:93:76:99:d8: d2:2a:b1:ae:05:d9:44:f9:d4:65:65:3c:6a:c2:c2: b3:d0:b5:58:a8:f8:91:7d:19:c6:88:8e:c2:a5:58: 9b:fa:57:c4:58:14:11:27:f1:6b:d1:8e:b7:26:35: c5:09:85:12:3b:b8:56:07:9f:1b:49:c0:c5:af:af: fe:f8:a3:be:3b:b3:61:39:03:66:6e:8a:cb:d9:90: ee:ef:4b:7c:cb:40:31:75:b7:83:2f:7b:df:de:4c: ff:98:24:90:69:82:f8:12:df:ee:a5:be:9e:2d:cb: ee:3f:a6:01:f1:9b:81:31:6a:8f:c6:46:77:9e:c5: e8:71:d2:18:72:33:52:7f:3d:0f:e5:e0:8a:43:aa: 5e:34:37:15:e2:38:99:7b:c2:54:42:ce:68:0f:20: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:74:E7:49:B6:53:58:EE:21:81:D5:DF:E3:8F:0A:13:07:32:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d0d491-fe6e-38a5-87b7-0a94cc1a0825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:25:5d:5a:e4:0c:8a:b0:f5:54:c1:c8:52:af:be:88:48:54: 47:6e:4e:8e:3a:e6:c8:15:86:61:69:1f:db:1a:58:85:c3:ff: 51:95:84:8c:88:6e:2a:c1:76:ca:59:9c:04:52:ec:03:ff:4e: 08:ba:8e:13:c4:32:f4:fc:6d:62:70:c4:9b:72:4c:af:07:f2: c2:37:99:10:a4:d6:e0:f8:c3:87:03:b9:34:fe:e1:0e:d8:81: 24:b9:a7:8c:d0:fb:e7:f7:ab:e4:d3:5b:22:70:d6:57:93:e3: 92:10:de:ac:80:de:3f:ab:55:7e:9d:3f:6e:d7:d2:2b:df:e8: 6e:0b:da:fe:43:76:4b:a9:33:66:7c:99:ec:32:c9:f2:a7:28: fa:03:05:b7:85:10:f9:96:98:c7:27:08:99:4c:78:81:34:d2: e8:a7:1c:9d:b8:76:66:75:ad:4f:75:ba:3a:ed:9b:70:08:16: b3:a3:e4:b1:e5:94:09:46:e1:17:f3:bf:c9:32:cc:bf:46:76: ad:6f:1e:db:41:bb:24:b5:1d:ed:5f:85:ee:f3:d0:c7:51:56: c1:b3:90:2e:5b:c3:8b:db:02:06:58:66:61:68:16:8c:47:39: c4:aa:90:1f:a3:e6:41:14:a2:01:ea:fd:a9:79:60:ae:51:e0: 87:4d:01:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmmGMMAkuhdD/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OTY1MjkxNGItZTAyOS00NjlhLTg0ZmItZGQzYjYzZGE5YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglFld5h7hoKyCRlxOmEs7QwbduXmC6FTkfol GPOdmjTQv+5lBauBkQM3D9y55CK+3wUahUnoo5xYVu1ue0iw+rZrcRIBoAbDBP9h j28lVMDzETvZUMaCZ8FepOHvK38Y9kSOAJN2mdjSKrGuBdlE+dRlZTxqwsKz0LVY qPiRfRnGiI7CpVib+lfEWBQRJ/Fr0Y63JjXFCYUSO7hWB58bScDFr6/++KO+O7Nh OQNmborL2ZDu70t8y0AxdbeDL3vf3kz/mCSQaYL4Et/upb6eLcvuP6YB8ZuBMWqP xkZ3nsXocdIYcjNSfz0P5eCKQ6peNDcV4jiZe8JUQs5oDyB4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb+dOdJtlNY7iGB1d/jjwoTBzLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTFkMGQ0OTEtZmU2ZS0z OGE1LTg3YjctMGE5NGNjMWEwODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqFdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQlXVrkDIqw9VTByFKvvohIVEduTo465sgVhmFpH9saWIXD/1GVhIyI birBdspZnARS7AP/Tgi6jhPEMvT8bWJwxJtyTK8H8sI3mRCk1uD4w4cDuTT+4Q7Y gSS5p4zQ++f3q+TTWyJw1leT45IQ3qyA3j+rVX6dP27X0ivf6G4L2v5DdkupM2Z8 mewyyfKnKPoDBbeFEPmWmMcnCJlMeIE00uinHJ24dmZ1rU91ujrtm3AIFrOj5LHl lAlG4Rfzv8kyzL9Gdq1vHttBuyS1He1fhe7z0MdRVsGzkC5bw4vbAgZYZmFoFoxH OcSqkB+j5kEUogHq/al5YK5R4IdNAWU= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:24 2026 by rpki-client