$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa File: a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa (raw, json) Hash identifier: b2Nzo17lOmfzXLdf7+2Y6plmj8s4efgkJYVPTzQHmG8= Subject key identifier: 99:DB:4D:CA:AA:B3:A4:BC:BF:34:91:7E:C9:7D:75:E9:13:2D:DB:A1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7176E4FD61DED2A0FDDD280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3360 IP address blocks: 168.87.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6e:4f:d6:1d:ed:2a:0f:dd:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=92ccf648-f755-470e-b871-391687254930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:10:49:7f:05:4d:53:cc:67:13:21:cc:96:e9: ca:71:33:52:1b:ec:9e:d6:5b:43:63:ff:65:e1:89: 2a:a2:62:ff:11:eb:27:16:9f:32:4e:3c:6b:2b:18: 5e:bf:e0:56:b7:5c:69:9d:7a:59:f5:69:3b:6e:a3: 24:d0:33:fd:39:d0:a6:08:62:43:c3:11:3a:12:c4: 93:87:83:6c:64:fa:20:f0:c9:08:01:a8:e3:9f:5c: 65:68:1f:92:b1:f3:4b:24:01:f7:24:31:f8:1b:db: a0:f6:d9:e1:a9:12:86:e9:63:0a:06:fd:78:17:6e: c9:cc:56:f0:2e:b1:2f:ac:0c:a5:5d:c2:e9:91:54: a5:8b:bd:37:2f:f8:ba:9c:44:d3:19:ee:1f:9a:db: 48:f9:8d:bb:4a:bc:cf:8d:54:0e:0f:39:af:a8:f8: c7:25:d5:4c:af:8a:fc:b4:ea:f5:14:57:1e:db:5e: e8:1d:ee:fa:eb:c2:fd:86:c0:b2:6c:9f:ac:99:87: 39:09:17:33:70:3d:7c:c2:a3:64:66:0a:73:11:ee: b6:84:72:fd:66:e0:b8:3a:39:d5:28:c0:15:bb:96: 2b:da:7d:e2:6d:96:19:d8:3b:74:92:d2:50:ca:f8: 9d:f2:75:cc:aa:d9:85:91:84:c2:77:b6:9e:df:73: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:4D:CA:AA:B3:A4:BC:BF:34:91:7E:C9:7D:75:E9:13:2D:DB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a43e60bb-d64a-3fc5-b66f-c87d4a1e4176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7c:a6:29:80:e6:43:3d:2c:c0:19:69:2b:3e:ef:d8:71:a3: 14:9f:f4:1b:98:e4:03:c2:c6:6b:99:83:a5:45:28:15:02:20: 0d:a0:07:d0:47:07:b7:45:aa:87:af:f5:2c:68:11:7b:2a:30: 97:e5:dc:3e:b0:3c:f9:90:3a:c5:a0:84:85:07:e3:5b:3a:38: d8:a6:32:ce:24:0f:55:50:09:fb:ad:0e:9a:e3:fe:01:1c:be: 9c:00:b8:37:11:27:1c:7a:69:89:58:2b:27:43:93:21:ec:99: 9d:f1:53:98:78:e5:95:db:c0:72:30:ad:f8:f1:4f:3a:a8:79: b2:b6:20:f8:13:99:a3:d8:9c:d4:4a:e2:bd:74:07:43:15:e6: bc:d2:c4:81:fc:35:ef:b9:2c:ee:6f:1e:56:8e:9d:2a:b5:5b: 37:a3:7f:96:73:53:9c:6b:92:b2:e8:a1:2c:5a:f7:ed:2c:6d: 00:6e:38:3b:51:c3:c1:4c:62:aa:58:7d:73:38:e3:cf:6d:2e: 53:3e:b9:e0:49:49:2f:f1:a7:a4:af:1a:8f:c4:a4:6e:10:ef: 1e:8d:f5:9a:69:70:dd:36:c7:33:86:5a:13:28:7a:d6:ac:a5: f1:29:e2:cb:38:0e:02:9e:01:19:3d:25:fb:82:3d:3b:e5:0b: 91:ad:a0:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F25P1h3tKg/d0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk OTJjY2Y2NDgtZjc1NS00NzBlLWI4NzEtMzkxNjg3MjU0OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RBJfwVNU8xnEyHMlunKcTNSG+ye1ltDY/9l 4YkqomL/EesnFp8yTjxrKxhev+BWt1xpnXpZ9Wk7bqMk0DP9OdCmCGJDwxE6EsST h4NsZPog8MkIAajjn1xlaB+SsfNLJAH3JDH4G9ug9tnhqRKG6WMKBv14F27JzFbw LrEvrAylXcLpkVSli703L/i6nETTGe4fmttI+Y27SrzPjVQODzmvqPjHJdVMr4r8 tOr1FFce217oHe7668L9hsCybJ+smYc5CRczcD18wqNkZgpzEe62hHL9ZuC4OjnV KMAVu5Yr2n3ibZYZ2Dt0ktJQyvid8nXMqtmFkYTCd7ae33M2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnbTcqqs6S8vzSRfsl9dekTLduhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTQzZTYwYmItZDY0YS0z ZmM1LWI2NmYtYzg3ZDRhMWU0MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF8pimA5kM9LMAZaSs+79hxoxSf9BuY5APCxmuZg6VFKBUCIA2gB9BH B7dFqoev9SxoEXsqMJfl3D6wPPmQOsWghIUH41s6ONimMs4kD1VQCfutDprj/gEc vpwAuDcRJxx6aYlYKydDkyHsmZ3xU5h45ZXbwHIwrfjxTzqoebK2IPgTmaPYnNRK 4r10B0MV5rzSxIH8Ne+5LO5vHlaOnSq1Wzejf5ZzU5xrkrLooSxa9+0sbQBuODtR w8FMYqpYfXM4489tLlM+ueBJSS/xp6SvGo/EpG4Q7x6N9ZppcN02xzOGWhMoetas pfEp4ss4DgKeARk9JfuCPTvlC5GtoFk= -----END CERTIFICATE-----Generated at Tue Sep 22 18:25:34 2026 by rpki-client