$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa File: 2d8ee973-4f04-3f39-80ec-35239969bcee.roa (raw, json) Hash identifier: EhJQaEoLpxVRO78+VASbKoWtm2BT/telFWBMzIRz8RE= Subject key identifier: 70:94:6E:67:D0:00:70:FC:38:50:EB:CB:35:8C:CB:7F:5B:B3:B7:EB Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584EAE819A9DABF9794533FEBC00 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 11892 IP address blocks: 168.146.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9a:9d:ab:f9:79:45:33:fe:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=4f2a8d0a-b083-4e8d-9a56-617801b6c230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:3d:c2:c2:2d:a4:0b:2a:37:0b:5f:b6:61: 50:2d:6b:06:84:0d:c6:d5:12:7c:da:0c:86:cd:9e: 2f:c9:6c:ac:a3:f3:fe:e4:0e:1f:54:46:52:dd:56: 0c:5e:b4:b1:3b:79:e4:c1:7c:33:61:6e:a7:bf:06: 59:d0:95:0a:45:2d:d7:49:0c:3c:28:f3:00:dd:cb: 0a:2f:db:99:75:8f:df:43:8d:ed:fb:77:f3:19:2c: 58:3a:ed:64:96:98:f7:c1:e0:13:97:2a:62:ac:b9: 10:35:24:59:bc:d8:44:d0:6e:03:71:cd:18:8a:8d: 1d:27:3d:f0:7e:f4:d0:4b:c8:4f:00:f0:a2:b0:d0: ff:a3:12:11:74:e8:d5:d5:90:56:e8:7e:09:ce:2a: b6:fa:b6:60:1b:5d:9d:4c:22:51:ca:7a:fb:fc:f1: d7:93:c1:ec:23:78:19:79:b9:4d:27:8f:e4:26:65: bb:3d:20:a9:91:bf:37:56:2e:2c:d5:6d:61:d9:f5: 4c:3d:ec:cf:d4:4b:20:eb:51:8c:aa:eb:d0:21:ff: 6b:f2:3c:5b:99:fc:72:fb:7b:b3:fb:63:8e:00:40: d5:03:51:3e:5a:fb:95:0c:88:2c:e6:48:cc:18:5e: 20:ca:79:f9:f3:11:46:03:71:73:88:75:aa:98:7a: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:6E:67:D0:00:70:FC:38:50:EB:CB:35:8C:CB:7F:5B:B3:B7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2e:c6:a6:e6:c9:fd:1f:65:5b:db:0f:01:52:cb:8a:d8:2e: 2e:5b:cb:1a:5b:9d:7b:99:61:9a:d5:2c:b3:b4:7d:9b:cc:5b: f4:4e:10:7a:dc:65:eb:be:07:8b:03:e2:b5:c8:9b:ee:fd:ae: db:55:49:27:6b:e1:7b:14:c6:9d:33:5b:05:eb:da:74:08:82: 16:94:43:89:ca:62:39:b3:d0:e0:d8:17:d4:1b:a1:91:3b:ab: c6:33:19:60:7a:18:66:c2:ec:04:b7:81:fb:b6:80:34:eb:72: 67:24:86:1d:0d:77:69:cf:96:b1:e3:42:7e:9f:d8:7c:ef:59: 71:d6:60:01:7f:f1:01:78:10:ed:9c:b3:ba:a9:14:fa:b7:5b: 77:01:67:cb:8d:20:14:c3:28:40:41:00:54:e0:16:e7:1b:e4: c8:0f:33:69:e6:a6:5c:52:26:a7:f5:0d:70:3c:5a:43:64:61: 38:cd:72:b6:dc:b6:cc:b3:2a:b6:2f:8c:c6:69:67:62:93:8d: 6f:92:8d:31:7c:fb:ac:f1:a1:3a:79:61:c8:33:0c:15:07:88: 5a:69:5a:5e:1a:01:c9:71:54:9f:42:7f:0b:2b:a2:5b:aa:40: 61:8c:b7:04:ac:01:3d:29:a1:9f:0f:a0:b7:c5:af:95:05:91: b0:d7:db:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZqdq/l5RTP+vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NGYyYThkMGEtYjA4My00ZThkLTlhNTYtNjE3ODAxYjZjMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLQ9wsItpAsqNwtftmFQLWsGhA3G1RJ82gyG zZ4vyWyso/P+5A4fVEZS3VYMXrSxO3nkwXwzYW6nvwZZ0JUKRS3XSQw8KPMA3csK L9uZdY/fQ43t+3fzGSxYOu1klpj3weATlypirLkQNSRZvNhE0G4Dcc0Yio0dJz3w fvTQS8hPAPCisND/oxIRdOjV1ZBW6H4Jziq2+rZgG12dTCJRynr7/PHXk8HsI3gZ eblNJ4/kJmW7PSCpkb83Vi4s1W1h2fVMPezP1Esg61GMquvQIf9r8jxbmfxy+3uz +2OOAEDVA1E+WvuVDIgs5kjMGF4gynn58xFGA3FziHWqmHrGGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCUbmfQAHD8OFDryzWMy39bs7frMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMmQ4ZWU5NzMtNGYwNC0z ZjM5LTgwZWMtMzUyMzk5NjliY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqJJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEguxqbmyf0fZVvbDwFSy4rYLi5byxpbnXuZYZrVLLO0fZvMW/ROEHrc Zeu+B4sD4rXIm+79rttVSSdr4XsUxp0zWwXr2nQIghaUQ4nKYjmz0ODYF9QboZE7 q8YzGWB6GGbC7AS3gfu2gDTrcmckhh0Nd2nPlrHjQn6f2HzvWXHWYAF/8QF4EO2c s7qpFPq3W3cBZ8uNIBTDKEBBAFTgFucb5MgPM2nmplxSJqf1DXA8WkNkYTjNcrbc tsyzKrYvjMZpZ2KTjW+SjTF8+6zxoTp5YcgzDBUHiFppWl4aAclxVJ9Cfwsroluq QGGMtwSsAT0poZ8PoLfFr5UFkbDX2+A= -----END CERTIFICATE-----Generated at Fri Aug 21 22:52:08 2026 by rpki-client