$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/17feea99-0ec1-3c7d-ad0f-1fb7daa18f29.roa File: 17feea99-0ec1-3c7d-ad0f-1fb7daa18f29.roa (raw, json) Hash identifier: jrcedwHW/wWRWeqtl+JNKiJEqKpfRzNydXEvqntkB/I= Subject key identifier: 62:37:83:8E:1F:C3:35:FB:4D:7E:E3:04:F2:F2:67:B3:A5:D5:17:84 Certificate issuer: /CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Certificate serial: 010D0C9F4328584F50F93EA4A100ACF75CE8AE80 Authority key identifier: 0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/17feea99-0ec1-3c7d-ad0f-1fb7daa18f29.roa Signing time: Sun 27 Sep 2026 17:42:19 +0000 ROA not before: Sun 27 Sep 2026 17:42:19 +0000 ROA not after: Sat 26 Dec 2026 18:42:19 +0000 asID: 393474 IP address blocks: 68.67.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:f9:3e:a4:a1:00:ac:f7:5c:e8:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Validity Not Before: Sep 27 17:42:19 2026 GMT Not After : Dec 26 18:42:19 2026 GMT Subject: CN=de2fff4b-4dda-418b-baae-8ffe23ce7424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:82:7b:2d:d2:5d:50:3e:d2:26:20:9b:42: 9e:06:fa:49:d4:70:18:4e:88:cd:ed:89:7a:2e:1e: 6d:62:26:dc:06:76:ce:47:0a:3a:12:97:07:d8:56: ee:00:72:95:9a:35:75:a2:c8:20:2a:0e:c8:14:3a: 76:e5:7b:3f:a3:02:d9:e9:92:1b:fe:cb:58:08:8a: 92:4d:27:f2:39:62:9f:58:64:0a:75:04:dc:ad:cb: f0:83:e9:65:3e:e3:17:bb:ec:fb:52:68:ec:39:67: ef:fc:6b:01:57:9d:74:bc:5e:97:d0:51:e6:05:d1: cb:a8:65:1c:65:0d:8f:aa:60:83:11:62:9f:81:0b: 89:96:c6:17:ef:e5:98:6e:0e:dc:16:07:7c:09:39: 62:80:4b:45:6f:9b:01:db:0f:9d:7a:f4:99:df:94: 0d:a2:3d:b1:7a:cd:db:74:d6:e0:4a:a7:35:2e:ee: 6f:1b:c9:06:aa:62:33:06:89:8d:6b:33:41:66:03: fb:47:19:76:2e:50:2d:2a:0c:33:23:e7:99:bd:fc: a9:5b:75:d3:0d:9c:b1:b5:67:39:08:ab:64:27:93: cf:24:cb:c4:f0:6f:32:a8:a2:9b:4f:b8:f4:97:07: 4f:19:15:c7:6e:96:f9:81:35:9f:03:f5:fb:96:d1: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:83:8E:1F:C3:35:FB:4D:7E:E3:04:F2:F2:67:B3:A5:D5:17:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/17feea99-0ec1-3c7d-ad0f-1fb7daa18f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl X509v3 Authority Key Identifier: keyid:0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer sbgp-ipAddrBlock: critical IPv4: 68.67.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:61:3c:f3:eb:70:05:6a:21:35:81:0c:a1:54:ae:9b:49:26: e0:f9:53:86:30:48:37:4b:79:92:82:c5:97:91:97:e7:af:8b: 12:c2:53:0c:3a:7e:0f:5b:78:d4:b6:94:84:79:8f:d0:d9:1d: a8:08:29:ed:3c:1e:00:ad:f8:ef:81:ef:4c:50:25:b5:4a:a2: b0:fd:c2:53:ee:13:da:00:2b:ac:80:38:ec:fe:70:a7:a5:63: 6b:a0:a7:fc:ed:ac:c0:b8:98:27:f7:10:65:f6:87:de:be:92: d3:19:24:20:89:e0:f6:c7:f2:74:f7:cf:d1:bd:37:0d:42:7a: c5:59:96:e5:91:6d:c6:dc:9d:30:f8:64:0f:a7:64:9f:5f:d3: 41:cc:f3:89:78:15:cb:bf:c6:24:52:35:8e:79:48:e2:90:20: 00:ff:6e:a9:26:c7:fa:54:26:80:c9:e8:b8:61:63:7b:34:85: d0:a6:e2:9e:52:e6:e8:59:ef:7c:2e:ef:f8:fe:16:4c:b9:b9: fa:2d:2b:8d:34:1f:4e:4e:bc:79:44:f2:ff:7b:c3:d9:85:30: 84:d0:ab:5a:61:63:9e:72:7d:68:ec:b4:d7:bb:95:5c:b0:53: b8:9c:bf:c7:29:86:ca:67:74:bc:fa:55:b8:75:e6:cf:b1:21: 3e:c0:d1:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Q+T6koQCs91zoroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3YTYzYzAtMTc4MS00Y2Q5LTliMWUtNDc3YTU1N2Fl NWRiMB4XDTI2MDkyNzE3NDIxOVoXDTI2MTIyNjE4NDIxOVowLzEtMCsGA1UEAxMk ZGUyZmZmNGItNGRkYS00MThiLWJhYWUtOGZmZTIzY2U3NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vyCey3SXVA+0iYgm0KeBvpJ1HAYTojN7Yl6 Lh5tYibcBnbORwo6EpcH2FbuAHKVmjV1osggKg7IFDp25Xs/owLZ6ZIb/stYCIqS TSfyOWKfWGQKdQTcrcvwg+llPuMXu+z7UmjsOWfv/GsBV510vF6X0FHmBdHLqGUc ZQ2PqmCDEWKfgQuJlsYX7+WYbg7cFgd8CTligEtFb5sB2w+devSZ35QNoj2xes3b dNbgSqc1Lu5vG8kGqmIzBomNazNBZgP7Rxl2LlAtKgwzI+eZvfypW3XTDZyxtWc5 CKtkJ5PPJMvE8G8yqKKbT7j0lwdPGRXHbpb5gTWfA/X7ltGvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI3g44fwzX7TX7jBPLyZ7Ol1ReEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDdh NjNjMC0xNzgxLTRjZDktOWIxZS00NzdhNTU3YWU1ZGIvMTdmZWVhOTktMGVjMS0z YzdkLWFkMGYtMWZiN2RhYTE4ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q3YTYzYzAtMTc4MS00Y2Q5LTli MWUtNDc3YTU1N2FlNWRiLzNkN2E2M2MwLTE3ODEtNGNkOS05YjFlLTQ3N2E1NTdh ZTVkYi5jcmwwHwYDVR0jBBgwFoAUDUmx697byZ1B5GHtiNcpSpczNUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDdhNjNjMC0xNzgxLTRjZDktOWIxZS00Nzdh NTU3YWU1ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxhPPPrcAVqITWBDKFUrptJJuD5U4YwSDdLeZKCxZeRl+evixLCUww6 fg9beNS2lIR5j9DZHagIKe08HgCt+O+B70xQJbVKorD9wlPuE9oAK6yAOOz+cKel Y2ugp/ztrMC4mCf3EGX2h96+ktMZJCCJ4PbH8nT3z9G9Nw1CesVZluWRbcbcnTD4 ZA+nZJ9f00HM84l4Fcu/xiRSNY55SOKQIAD/bqkmx/pUJoDJ6LhhY3s0hdCm4p5S 5uhZ73wu7/j+Fky5ufotK400H05OvHlE8v97w9mFMITQq1phY55yfWjstNe7lVyw U7icv8cphspndLz6Vbh15s+xIT7A0Uw= -----END CERTIFICATE-----Generated at Tue Sep 29 01:12:59 2026 by rpki-client