$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: BUiAorRMT8D3bBK90xxBwLtJpWt52/YTYQsEMjQRQHU= Subject key identifier: 2A:E3:49:88:FF:4E:EA:58:F8:BF:23:AF:4F:91:39:C9:38:9A:92:27 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A290C7CA62EF2772994C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:29:0c:7c:a6:2e:f2:77:29:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=080cac90-1ab0-48e9-9c2b-3b59c0583629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:fb:38:36:cf:97:10:4c:64:7a:b4:7f:9a: 95:2d:39:66:46:8f:df:8e:3c:b7:33:92:56:be:9e: 93:1e:76:a1:af:84:ed:2a:7a:e6:ab:4e:75:aa:5e: 63:98:a2:bf:dd:a1:54:c9:52:0e:46:e2:70:11:a5: 6e:e3:61:bc:10:9a:f8:36:61:a8:d4:00:70:2a:4c: 2b:a2:61:cb:79:05:8a:ca:71:1e:18:2d:56:3a:24: 42:48:99:b4:05:b2:0a:21:d0:80:b3:05:43:63:db: ad:97:44:c4:19:48:a8:05:a0:e1:20:2a:01:70:92: b9:17:9f:59:cd:c6:ec:b1:83:f0:21:19:83:bf:7b: 37:c5:85:83:3b:7e:ac:94:b7:6d:5c:ca:f4:dd:f0: d6:5b:b0:c9:91:b9:85:7b:86:b0:49:ee:5d:f5:62: 43:04:7d:d8:48:e4:11:77:f6:63:31:47:1b:82:11: cc:19:91:67:54:63:a2:b5:cb:ee:c2:ec:16:30:60: bc:af:27:b6:b8:71:36:da:30:14:d8:15:a8:68:7e: 2f:21:7d:3e:16:0c:a7:47:6e:f4:15:a4:37:d8:2d: eb:b2:ff:f2:fd:78:de:c7:cb:a0:21:fe:0e:b0:10: 27:4e:a1:8e:b3:07:fd:c9:81:19:dc:ba:c0:57:06: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E3:49:88:FF:4E:EA:58:F8:BF:23:AF:4F:91:39:C9:38:9A:92:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:79:a3:40:e1:0d:71:f2:c6:be:27:6a:5c:13:2d:4e:ce:9a: 78:5f:1f:2f:04:7b:11:1a:ff:8f:7b:38:99:fe:3f:87:ca:96: 2a:34:f1:a4:f5:ef:e7:fc:56:53:61:64:22:ab:6f:15:17:13: 68:91:42:15:11:10:75:e3:95:dc:16:07:c0:ee:92:c2:f7:5f: 5a:e8:38:94:fe:d3:a7:0d:9d:b2:a8:ba:c2:da:5f:d2:e1:b7: 56:ef:8e:e7:21:2c:4a:5c:e2:28:02:96:eb:2a:16:11:42:4d: 66:a0:59:03:6a:33:1a:30:30:71:b1:c2:bb:a9:d6:d9:90:04: 17:bb:9c:83:a7:d1:0b:d2:40:67:23:2c:ed:9e:55:98:94:da: 11:34:6c:aa:b4:21:5f:ef:a7:54:be:b1:82:8e:00:09:de:bc: bd:ea:1c:2f:07:69:f3:ca:1b:60:df:85:53:17:9e:87:f6:42: a2:2c:e6:da:59:ae:bb:ae:b1:9f:a3:96:5d:d5:8d:0b:55:1b: 63:d1:9b:25:bb:94:56:cc:3d:b6:c5:45:7e:7a:21:ed:c1:0c: da:c0:0c:39:83:94:bc:08:ba:79:26:4a:08:fc:7f:f2:9f:f6: f5:3d:06:19:85:bb:69:ab:2f:3b:57:a4:36:fd:43:e8:43:d1: 20:a7:88:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mikMfKYu8ncplMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MDgwY2FjOTAtMWFiMC00OGU5LTljMmItM2I1OWMwNTgzNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7T7ODbPlxBMZHq0f5qVLTlmRo/fjjy3M5JW vp6THnahr4TtKnrmq051ql5jmKK/3aFUyVIORuJwEaVu42G8EJr4NmGo1ABwKkwr omHLeQWKynEeGC1WOiRCSJm0BbIKIdCAswVDY9utl0TEGUioBaDhICoBcJK5F59Z zcbssYPwIRmDv3s3xYWDO36slLdtXMr03fDWW7DJkbmFe4awSe5d9WJDBH3YSOQR d/ZjMUcbghHMGZFnVGOitcvuwuwWMGC8rye2uHE22jAU2BWoaH4vIX0+FgynR270 FaQ32C3rsv/y/Xjex8ugIf4OsBAnTqGOswf9yYEZ3LrAVwY0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrjSYj/TupY+L8jr0+ROck4mpInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB5o0DhDXHyxr4nalwTLU7OmnhfHy8EexEa/497OJn+P4fKlio08aT1 7+f8VlNhZCKrbxUXE2iRQhUREHXjldwWB8DuksL3X1roOJT+06cNnbKousLaX9Lh t1bvjuchLEpc4igClusqFhFCTWagWQNqMxowMHGxwrup1tmQBBe7nIOn0QvSQGcj LO2eVZiU2hE0bKq0IV/vp1S+sYKOAAnevL3qHC8HafPKG2DfhVMXnof2QqIs5tpZ rruusZ+jll3VjQtVG2PRmyW7lFbMPbbFRX56Ie3BDNrADDmDlLwIunkmSgj8f/Kf 9vU9BhmFu2mrLztXpDb9Q+hD0SCniNo= -----END CERTIFICATE-----Generated at Tue Jul 21 21:08:51 2026 by rpki-client