$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa File: b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa (raw, json) Hash identifier: BSIEpIQMGHa815zu9M8hFpdDByjm+n2/EOv1K0iudbE= Subject key identifier: EF:55:C1:69:AD:98:34:C4:10:A2:A4:3E:BA:99:B7:6E:E4:82:90:E6 Certificate issuer: /CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Certificate serial: 010D0C9F4328584EA788A3319503B2D72BE42F2E Authority key identifier: 0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40684 IP address blocks: 68.67.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a3:31:95:03:b2:d7:2b:e4:2f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7a63c0-1781-4cd9-9b1e-477a557ae5db Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1e6d74b-8e87-4626-8327-6328091cc00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:95:bb:4c:48:e8:95:ba:17:5d:80:8e:fb: e3:45:69:7c:16:7e:4c:88:b5:6a:7b:99:3e:53:8a: b1:ba:25:5f:af:00:f9:db:39:58:e8:59:f7:1a:c2: 1d:16:75:7a:b1:36:be:5d:c4:36:99:8e:d9:07:fc: f8:22:fb:6e:78:f7:d3:35:62:e2:62:b0:ff:80:94: 0f:b2:b1:0c:04:fb:18:f7:77:1c:ac:3e:70:35:77: 6b:b5:72:a9:9f:19:f7:9c:f3:22:84:6d:ab:8b:24: da:cb:e5:63:94:b0:f5:77:e7:ce:0a:e3:7e:1b:07: 8b:f0:79:bc:af:8c:0e:0e:45:f4:b3:ef:99:38:86: 91:d2:36:d8:f4:91:44:42:17:2e:3d:40:8e:00:17: d1:c4:ab:12:bc:16:39:eb:a5:10:fe:da:97:d0:e7: be:00:96:e1:2f:55:f6:bf:f6:04:82:99:92:70:9f: c2:e6:0d:b5:9f:7e:8f:05:ab:96:67:c7:3d:64:55: 8a:e1:a6:0d:2d:6b:ca:06:7c:b9:26:00:79:1d:9b: 3c:60:11:2d:02:d5:98:05:16:7e:5a:cd:58:e3:e3: 30:83:9e:f2:7e:2b:33:43:27:c0:e1:ff:6e:6d:20: 3b:0f:55:d4:ae:06:97:ad:b5:6c:5a:a9:a8:51:88: 20:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:55:C1:69:AD:98:34:C4:10:A2:A4:3E:BA:99:B7:6E:E4:82:90:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/b7eee4a6-4a54-332c-b3cb-3a413d53d5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.crl X509v3 Authority Key Identifier: keyid:0D:49:B1:EB:DE:DB:C9:9D:41:E4:61:ED:88:D7:29:4A:97:33:35:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d7a63c0-1781-4cd9-9b1e-477a557ae5db.cer sbgp-ipAddrBlock: critical IPv4: 68.67.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:29:c9:be:2b:95:09:88:bf:15:bd:b0:c8:7a:36:0a:5c:a6: 81:69:62:66:e8:55:97:43:be:0a:5f:54:31:06:9e:67:80:f3: 17:47:55:aa:e3:31:29:81:c8:4c:7d:ad:f2:35:32:d4:8b:40: 0c:64:af:be:76:22:2e:95:e9:92:79:3f:d1:f2:02:3d:d4:ea: 11:25:ab:23:34:c5:c6:49:e4:7d:80:1e:50:95:c7:9d:ab:a1: cd:f7:55:3f:e8:2d:03:d2:30:a2:ac:eb:63:67:1c:2e:76:ce: c4:a2:23:3c:1a:55:48:14:d9:c1:d5:e9:02:0f:ee:23:97:87: 02:67:fc:bc:4f:9f:03:cc:09:6c:a2:ed:f1:37:d6:a5:bd:bc: e1:af:11:a7:cd:f4:28:1a:ed:3b:af:7a:2e:53:91:7b:8c:46: d3:67:bc:7f:b6:5e:11:28:42:ed:ad:2d:54:31:8f:6b:67:2d: 76:4d:89:d3:7d:93:0d:d8:ef:77:20:17:94:ee:1c:e9:7b:d2: ad:cc:cf:c7:21:06:09:31:63:08:f2:8f:ad:ee:c1:d9:e7:3f: 09:dc:a5:33:2f:fd:f7:5a:a8:dd:c0:c0:8e:67:d4:ba:0a:20: e9:a7:6d:b8:b6:1d:b2:56:60:57:51:2d:eb:37:90:0e:ac:ed: 2a:c1:ad:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKMxlQOy1yvkLy4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3YTYzYzAtMTc4MS00Y2Q5LTliMWUtNDc3YTU1N2Fl NWRiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFlNmQ3NGItOGU4Ny00NjI2LTgzMjctNjMyODA5MWNjMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzmVu0xI6JW6F12AjvvjRWl8Fn5MiLVqe5k+ U4qxuiVfrwD52zlY6Fn3GsIdFnV6sTa+XcQ2mY7ZB/z4IvtuePfTNWLiYrD/gJQP srEMBPsY93ccrD5wNXdrtXKpnxn3nPMihG2riyTay+VjlLD1d+fOCuN+GweL8Hm8 r4wODkX0s++ZOIaR0jbY9JFEQhcuPUCOABfRxKsSvBY566UQ/tqX0Oe+AJbhL1X2 v/YEgpmScJ/C5g21n36PBauWZ8c9ZFWK4aYNLWvKBny5JgB5HZs8YBEtAtWYBRZ+ Ws1Y4+Mwg57yfiszQyfA4f9ubSA7D1XUrgaXrbVsWqmoUYggDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9VwWmtmDTEEKKkPrqZt27kgpDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDdh NjNjMC0xNzgxLTRjZDktOWIxZS00NzdhNTU3YWU1ZGIvYjdlZWU0YTYtNGE1NC0z MzJjLWIzY2ItM2E0MTNkNTNkNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q3YTYzYzAtMTc4MS00Y2Q5LTli MWUtNDc3YTU1N2FlNWRiLzNkN2E2M2MwLTE3ODEtNGNkOS05YjFlLTQ3N2E1NTdh ZTVkYi5jcmwwHwYDVR0jBBgwFoAUDUmx697byZ1B5GHtiNcpSpczNUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDdhNjNjMC0xNzgxLTRjZDktOWIxZS00Nzdh NTU3YWU1ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkpyb4rlQmIvxW9sMh6NgpcpoFpYmboVZdDvgpfVDEGnmeA8xdHVarj MSmByEx9rfI1MtSLQAxkr752Ii6V6ZJ5P9HyAj3U6hElqyM0xcZJ5H2AHlCVx52r oc33VT/oLQPSMKKs62NnHC52zsSiIzwaVUgU2cHV6QIP7iOXhwJn/LxPnwPMCWyi 7fE31qW9vOGvEafN9Cga7Tuvei5TkXuMRtNnvH+2XhEoQu2tLVQxj2tnLXZNidN9 kw3Y73cgF5TuHOl70q3Mz8chBgkxYwjyj63uwdnnPwncpTMv/fdaqN3AwI5n1LoK IOmnbbi2HbJWYFdRLes3kA6s7SrBrc4= -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:02 2026 by rpki-client