$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa File: cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json) Hash identifier: hcmJwmwSIFwZ9ztRZ5k6SZY8vL/ydB7f0qeS5aPcVek= Subject key identifier: A9:C0:C2:5D:D6:2D:53:52:AC:AE:54:76:67:35:4C:6A:17:57:A1:D9 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584F0D6CE9338DAA0F365EE2EB80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 1239 IP address blocks: 68.24.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e9:33:8d:aa:0f:36:5e:e2:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=782ab6fc-0456-4445-a591-8b76c7d9585f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:9a:19:bc:ba:56:12:d7:f3:25:3a:55:20: fb:56:bf:79:bf:6e:97:32:fb:67:a1:49:fa:c7:ac: 53:30:43:37:41:e4:2b:5e:0f:eb:64:1d:cc:a3:1d: 16:dd:40:38:d5:ab:b0:b4:e2:76:a8:b1:80:47:ca: 34:f5:cf:d0:d2:6e:4d:0f:3c:d8:33:96:5f:9f:5a: b4:3e:bc:71:b6:fd:d4:e4:35:6f:f6:16:70:fc:80: 2b:a5:c2:f2:5a:d6:e2:d7:5a:ef:e6:ac:19:d1:3b: 16:61:e8:bd:5e:a0:94:ff:bc:68:0e:a6:27:eb:ce: 39:52:94:fb:97:10:80:78:c0:06:06:f9:06:ce:c2: cf:2d:c4:35:b2:28:37:2b:e0:a1:5d:5d:7e:d4:94: fe:29:34:98:23:fa:ef:8c:64:16:26:72:7c:c1:71: c9:31:89:15:66:37:d5:e1:04:5f:54:3d:7e:2e:1e: d3:d7:ac:05:1d:22:ee:fd:3b:83:99:ec:34:a9:a5: 60:7f:7c:33:28:6e:18:a0:67:81:31:ff:7d:cb:9a: eb:fe:f5:6c:a3:7f:d3:dd:a9:d1:21:0f:fb:64:b5: 24:12:36:32:08:ce:5a:1b:a1:20:22:e9:78:fc:24: 8c:78:b9:fc:82:06:28:68:08:21:ad:24:23:8f:61: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:C2:5D:D6:2D:53:52:AC:AE:54:76:67:35:4C:6A:17:57:A1:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 68.24.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cb:2b:5e:e2:3c:3b:55:bf:1d:5c:3d:ef:00:8e:6b:2e:6a: 3f:d6:62:87:70:5c:a0:30:ae:b0:85:3c:e2:ed:a0:13:65:48: b2:a0:01:b9:e7:71:bd:1a:29:5c:9e:58:cb:c9:78:35:54:2a: e5:35:7f:4b:b2:0c:a8:ba:71:fc:40:ef:8f:cd:2c:3e:49:bd: bd:c0:73:27:cf:04:84:34:56:f6:8a:d8:7b:a0:3b:79:a6:08: 07:48:03:41:54:08:10:75:72:94:bb:51:0e:4b:05:01:e7:e2: e4:58:24:e3:2b:4d:dd:d1:60:c1:f3:87:3e:a7:07:0b:15:61: 5e:13:1d:90:51:5b:80:d1:f3:36:c8:42:d6:e2:e0:be:57:e4: 27:ba:85:ec:6e:27:97:9c:0c:29:4b:e9:e0:c7:06:f6:54:1d: 08:55:d0:4c:ca:31:20:0c:8e:b8:f6:cf:f1:9a:d1:6a:f5:89: b2:18:f8:24:b9:75:86:be:ec:3f:ae:74:20:d7:35:e1:a5:47: 11:34:08:d7:85:49:df:70:5b:4f:eb:6b:82:e5:54:a3:64:f8: f2:65:4f:67:1a:d2:9e:a3:0a:95:e4:b1:7e:1d:aa:e7:0f:fc: 61:d9:2f:65:5f:6e:4d:d8:94:1a:05:e9:45:88:d7:2f:f7:80: 86:5c:68:1a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8NbOkzjaoPNl7i64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NzgyYWI2ZmMtMDQ1Ni00NDQ1LWE1OTEtOGI3NmM3ZDk1ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IGaGby6VhLX8yU6VSD7Vr95v26XMvtnoUn6 x6xTMEM3QeQrXg/rZB3Mox0W3UA41auwtOJ2qLGAR8o09c/Q0m5NDzzYM5Zfn1q0 Prxxtv3U5DVv9hZw/IArpcLyWtbi11rv5qwZ0TsWYei9XqCU/7xoDqYn6845UpT7 lxCAeMAGBvkGzsLPLcQ1sig3K+ChXV1+1JT+KTSYI/rvjGQWJnJ8wXHJMYkVZjfV 4QRfVD1+Lh7T16wFHSLu/TuDmew0qaVgf3wzKG4YoGeBMf99y5rr/vVso3/T3anR IQ/7ZLUkEjYyCM5aG6EgIul4/CSMeLn8ggYoaAghrSQjj2FLhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKnAwl3WLVNSrK5Udmc1TGoXV6HZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2IzZWM0YzAtNjZjMy0z NjI1LWFlM2EtMzZhMWFjMzU2Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATMsrXuI8O1W/HVw97wCOay5qP9Zih3BcoDCusIU84u2gE2VIsqABuedx vRopXJ5Yy8l4NVQq5TV/S7IMqLpx/EDvj80sPkm9vcBzJ88EhDRW9orYe6A7eaYI B0gDQVQIEHVylLtRDksFAefi5Fgk4ytN3dFgwfOHPqcHCxVhXhMdkFFbgNHzNshC 1uLgvlfkJ7qF7G4nl5wMKUvp4McG9lQdCFXQTMoxIAyOuPbP8ZrRavWJshj4JLl1 hr7sP650INc14aVHETQI14VJ33BbT+trguVUo2T48mVPZxrSnqMKleSxfh2q5w/8 YdkvZV9uTdiUGgXpRYjXL/eAhlxoGg== -----END CERTIFICATE-----Generated at Sun Sep 27 09:28:27 2026 by rpki-client