$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa File: a39f4356-800b-3461-847c-e65f3c5a32a6.roa (raw, json) Hash identifier: gCjoOf3QNaraXrw9lI4YuQ9mf6Vb9dX4E/+NLXs+xv0= Subject key identifier: BE:93:87:0F:40:9E:4F:46:4D:30:05:33:29:4D:23:2D:78:03:F3:C0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DD8F06B42FB0404B3EFB6B880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 3356 IP address blocks: 168.87.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:6b:42:fb:04:04:b3:ef:b6:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=1922ec21-94c2-409b-a752-968fee513240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:cd:03:1d:dd:3a:28:fa:5e:2f:d5:f2:2c: 47:89:70:a2:f8:23:d9:f9:78:30:d7:db:f4:21:15: 14:73:56:e8:75:a3:3c:37:cc:f6:b4:0f:6d:f1:ca: a7:0b:d1:2a:28:d0:a4:bc:f0:1b:3a:a1:28:f9:0c: 3f:1a:55:57:0d:69:bb:40:2c:d8:c2:96:2b:b0:66: 48:23:bd:fc:a3:71:bd:7e:43:e4:ad:00:fe:b4:34: 7c:c7:7e:d5:7b:9c:5c:62:09:c3:3c:03:89:f0:0b: cb:a7:ac:6e:83:6d:2c:b2:82:8d:8f:9f:d9:19:09: 10:16:04:95:56:d4:ee:10:4f:cc:5b:51:40:cc:14: 59:9c:1b:50:e6:dd:cf:9c:7c:54:f0:23:84:dc:04: 28:92:d7:49:a1:76:90:3b:2f:94:fa:ee:5b:a2:9d: 06:4b:c4:76:6f:2f:0c:2f:f9:b8:7d:28:cc:2e:c2: 33:e6:68:64:de:ee:03:5c:63:44:63:59:70:f1:2b: 84:d5:69:ef:38:2b:eb:50:4a:0a:77:20:b3:38:04: 1e:32:0a:b3:6e:7c:bd:20:5e:9d:42:0e:9e:bb:d8: ad:18:ec:64:5b:a9:3d:30:30:7c:fa:70:a6:4a:a1: 3c:37:e3:58:d4:7b:f4:7d:d6:41:e6:2a:3b:10:57: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:93:87:0F:40:9E:4F:46:4D:30:05:33:29:4D:23:2D:78:03:F3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a39f4356-800b-3461-847c-e65f3c5a32a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5a:37:31:3e:42:af:fd:83:bc:c9:f7:97:1a:15:48:ba:ca: ac:ad:a5:a5:8d:3d:6a:aa:8a:78:e1:e0:c3:17:b2:c0:12:7f: 0a:68:65:6f:95:64:22:ce:a4:0d:a9:8f:d6:3e:d5:27:1d:0d: 7d:81:fb:4f:39:b1:15:86:3b:69:99:98:73:56:19:25:52:3f: 82:b5:45:3a:3a:9e:f1:d3:05:01:8e:4c:54:e0:56:cb:cd:59: 28:6f:38:bf:95:e1:f2:4a:ca:ba:63:c4:8f:46:af:d6:57:ba: e4:ca:6c:1a:80:d1:c5:85:9c:ad:8f:12:6b:98:2e:c0:f5:fd: c7:6b:1a:94:c1:67:e8:1e:d2:6f:d8:e8:7d:10:f8:31:33:df: 0c:80:c7:e4:35:45:d6:90:0b:6d:55:13:18:63:26:75:f0:0f: 06:91:b2:26:74:05:44:3b:57:26:29:b6:b5:6a:2b:1d:ed:4c: dd:49:1c:0e:9c:bb:8f:09:0c:df:5e:78:bb:de:f0:8b:02:16: 83:bb:30:d6:27:dd:80:f0:8c:db:ef:ca:a3:bc:23:a3:e7:70: da:a8:19:d7:be:93:d6:34:e2:dc:bf:1f:ca:df:40:19:7c:68: 61:8f:75:48:11:5e:0e:77:3d:5f:25:81:5b:76:27:34:f5:3b: e0:6b:cd:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8GtC+wQEs++2uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk MTkyMmVjMjEtOTRjMi00MDliLWE3NTItOTY4ZmVlNTEzMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN7NAx3dOij6Xi/V8ixHiXCi+CPZ+Xgw19v0 IRUUc1bodaM8N8z2tA9t8cqnC9EqKNCkvPAbOqEo+Qw/GlVXDWm7QCzYwpYrsGZI I738o3G9fkPkrQD+tDR8x37Ve5xcYgnDPAOJ8AvLp6xug20ssoKNj5/ZGQkQFgSV VtTuEE/MW1FAzBRZnBtQ5t3PnHxU8COE3AQoktdJoXaQOy+U+u5bop0GS8R2by8M L/m4fSjMLsIz5mhk3u4DXGNEY1lw8SuE1WnvOCvrUEoKdyCzOAQeMgqzbny9IF6d Qg6eu9itGOxkW6k9MDB8+nCmSqE8N+NY1Hv0fdZB5io7EFf/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Thw9Ank9GTTAFMylNIy14A/PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTM5ZjQzNTYtODAwYi0z NDYxLTg0N2MtZTY1ZjNjNWEzMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1aNzE+Qq/9g7zJ95caFUi6yqytpaWNPWqqinjh4MMXssASfwpoZW+V ZCLOpA2pj9Y+1ScdDX2B+085sRWGO2mZmHNWGSVSP4K1RTo6nvHTBQGOTFTgVsvN WShvOL+V4fJKyrpjxI9Gr9ZXuuTKbBqA0cWFnK2PEmuYLsD1/cdrGpTBZ+ge0m/Y 6H0Q+DEz3wyAx+Q1RdaQC21VExhjJnXwDwaRsiZ0BUQ7VyYptrVqKx3tTN1JHA6c u48JDN9eeLve8IsCFoO7MNYn3YDwjNvvyqO8I6PncNqoGde+k9Y04ty/H8rfQBl8 aGGPdUgRXg53PV8lgVt2JzT1O+BrzbM= -----END CERTIFICATE-----Generated at Sat Jun 13 20:53:18 2026 by rpki-client