$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dfaac8f6-cfac-3dd5-ad94-7aa08a040d19.roa File: dfaac8f6-cfac-3dd5-ad94-7aa08a040d19.roa (raw, json) Hash identifier: ZbiJXqgm5nFzi4ALpnQRO37DPk7mpWsBkJ+JSWhQFkU= Subject key identifier: CA:98:33:59:BD:05:C2:0A:74:D9:64:C9:93:6D:1D:0A:CB:30:9E:A8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EA797CA8B164E3F3060A9E600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dfaac8f6-cfac-3dd5-ad94-7aa08a040d19.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 168.87.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:ca:8b:16:4e:3f:30:60:a9:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a9894b01-e756-48aa-ba90-6f373db2d921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:f8:b8:46:b4:85:70:e7:f1:da:6e:86:5a: 64:c5:02:2c:55:55:69:bb:b3:b8:65:8b:7a:86:8f: 15:a8:82:5b:9c:67:f4:da:f8:ad:f7:46:db:2a:de: 01:97:7d:1e:db:2a:90:fd:36:f2:d5:20:4c:2d:84: 78:9c:66:71:f9:42:ea:34:1c:c4:d1:48:84:15:9e: 8e:15:e0:2c:6b:ac:d1:e2:a9:f6:36:c5:94:9f:13: 91:f4:a4:dd:91:e1:a2:d8:ed:a2:40:16:fc:7d:94: b4:cd:91:cb:e3:46:13:ec:d4:7f:b5:70:ff:12:ec: a7:23:33:01:32:d3:43:74:2b:e9:9a:bd:7e:c8:92: 33:47:c9:37:ca:73:26:5c:9e:02:b4:e0:54:71:76: f6:47:1e:28:a6:a0:33:2b:a8:49:aa:66:08:a1:4f: a2:d0:db:53:04:75:f4:28:b4:82:60:64:5b:be:bc: d6:72:70:5b:e2:84:e7:77:69:3f:da:77:ed:07:b7: fd:fc:4b:4d:ef:18:a7:47:35:e0:26:49:0a:04:97: c3:b8:7e:16:ca:c9:94:be:65:ac:c5:1b:00:39:0e: 6f:26:09:a4:a8:f6:20:e4:db:fe:4c:6d:99:a8:3a: 7e:8e:25:65:e9:e7:f3:95:ea:44:c3:54:cb:d1:b9: 98:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:33:59:BD:05:C2:0A:74:D9:64:C9:93:6D:1D:0A:CB:30:9E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dfaac8f6-cfac-3dd5-ad94-7aa08a040d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 168.87.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f9:ec:35:6e:98:61:5c:7f:05:7d:7c:5b:f5:f7:5f:4d:06: 32:8d:68:61:7a:0a:fc:74:bf:15:87:ac:6c:cb:62:6e:f9:77: 90:53:a0:58:ae:2a:8d:2a:af:11:1d:9d:ea:fb:95:2d:e9:48: fd:af:42:23:21:63:af:fa:9e:04:95:5e:f3:c3:29:ef:95:b7: a6:6d:2f:bf:da:00:58:d4:00:de:e9:bd:8f:b4:d0:ab:2e:27: e3:f7:e6:f8:b8:cf:d9:3e:05:5c:d8:c3:65:75:e5:14:d6:c2: c9:fb:d8:0f:bd:88:00:19:f0:89:09:ee:13:dd:10:b2:34:c3: d2:dd:f9:d3:60:f7:28:93:8f:e4:09:2f:e5:e4:05:23:b8:db: c1:0d:9b:05:d4:dc:cd:0c:28:7c:e3:d2:95:96:d7:9c:55:2f: 8b:66:4a:21:0b:d0:fd:a2:03:b0:52:5c:9b:f1:d4:cd:ba:8b: ca:51:16:66:5d:1b:6d:2e:f2:6d:a4:29:1a:c1:ac:74:2a:5b: 47:d1:d0:24:0e:db:d8:b7:b3:77:ae:4a:4d:de:8a:10:1b:e1: a9:94:39:20:e7:3d:1e:e5:33:97:90:80:39:6d:ea:f6:59:57: f3:14:3c:f8:5b:28:64:01:12:cc:0c:0b:d2:1f:a6:d7:b6:e4: 42:a3:28:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl8qLFk4/MGCp5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTk4OTRiMDEtZTc1Ni00OGFhLWJhOTAtNmYzNzNkYjJkOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmv4uEa0hXDn8dpuhlpkxQIsVVVpu7O4ZYt6 ho8VqIJbnGf02vit90bbKt4Bl30e2yqQ/Tby1SBMLYR4nGZx+ULqNBzE0UiEFZ6O FeAsa6zR4qn2NsWUnxOR9KTdkeGi2O2iQBb8fZS0zZHL40YT7NR/tXD/EuynIzMB MtNDdCvpmr1+yJIzR8k3ynMmXJ4CtOBUcXb2Rx4opqAzK6hJqmYIoU+i0NtTBHX0 KLSCYGRbvrzWcnBb4oTnd2k/2nftB7f9/EtN7xinRzXgJkkKBJfDuH4WysmUvmWs xRsAOQ5vJgmkqPYg5Nv+TG2ZqDp+jiVl6efzlepEw1TL0bmYbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqYM1m9BcIKdNlkyZNtHQrLMJ6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGZhYWM4ZjYtY2ZhYy0z ZGQ1LWFkOTQtN2FhMDhhMDQwZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv57DVumGFcfwV9fFv1919NBjKNaGF6Cvx0vxWHrGzLYm75d5BToFiu Ko0qrxEdner7lS3pSP2vQiMhY6/6ngSVXvPDKe+Vt6ZtL7/aAFjUAN7pvY+00Ksu J+P35vi4z9k+BVzYw2V15RTWwsn72A+9iAAZ8IkJ7hPdELI0w9Ld+dNg9yiTj+QJ L+XkBSO428ENmwXU3M0MKHzj0pWW15xVL4tmSiEL0P2iA7BSXJvx1M26i8pRFmZd G20u8m2kKRrBrHQqW0fR0CQO29i3s3euSk3eihAb4amUOSDnPR7lM5eQgDlt6vZZ V/MUPPhbKGQBEswMC9Ifpte25EKjKEI= -----END CERTIFICATE-----Generated at Wed Jul 29 05:12:29 2026 by rpki-client