$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa File: cef865ee-b2f3-3257-b04e-8d7011350c02.roa (raw, json) Hash identifier: S2Fdfg6p2AElKJpiwi2BiaoAc8qedWrbT77cuihM9dg= Subject key identifier: 3E:87:35:82:06:66:0C:CC:D4:8E:09:18:2A:FE:6A:33:65:12:86:14 Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584F9E9871C84AA61F28ACF48780 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 23059 IP address blocks: 68.142.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:71:c8:4a:a6:1f:28:ac:f4:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=ca5e2c1c-7a20-4e76-ab1f-97bbe23d73c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:91:8f:55:8b:a0:e5:b8:c5:bb:27:1e:ff: dc:a6:65:64:64:94:ba:ee:5e:4a:7c:b8:bd:c1:d0: ad:07:09:05:85:55:66:6e:2b:5f:df:73:19:ad:c0: 43:97:e1:7b:e1:2a:50:cb:7f:bc:38:41:bf:08:71: 78:b9:04:e6:3a:35:22:de:04:e1:b3:31:75:42:5b: c9:b7:18:71:47:3b:24:45:34:cd:9e:21:85:e4:c2: 47:e1:36:30:62:cc:a3:be:53:04:2e:a5:3e:6e:5e: ea:6f:0a:de:a2:a8:5c:d8:10:ec:6a:ec:98:63:38: b1:f0:4f:5d:1a:e2:81:81:ef:18:35:92:d6:a6:ed: 4a:45:d5:b3:79:37:1c:89:66:b2:32:bd:a9:90:00: 1e:9c:f8:c3:d5:9b:8f:4b:c4:b9:6b:47:7e:8f:63: 22:5a:35:56:80:6f:54:86:10:0b:8a:6e:95:3f:c8: 66:df:b9:3d:d3:24:9f:77:f6:b7:11:12:39:16:01: 5f:da:7d:45:f5:22:68:09:d8:c4:b1:67:ed:eb:ce: 1b:e9:1b:95:07:ca:92:b2:70:c1:4c:16:a9:28:57: f8:50:8a:a2:3a:d6:ba:85:fd:a4:8b:b8:dc:16:2f: dd:cf:0f:25:91:a0:e6:96:58:d9:65:7b:c4:85:fc: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:87:35:82:06:66:0C:CC:D4:8E:09:18:2A:FE:6A:33:65:12:86:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 68.142.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:aa:e5:79:e8:f7:75:0a:0a:bc:13:b1:b2:19:bd:83:19:04: 23:12:3a:4b:5d:0e:e1:58:86:e3:ba:dc:a4:88:23:68:db:c8: 7c:62:66:b7:ba:b0:e4:d7:94:67:f4:c6:9d:a9:ea:6c:7c:08: 92:6a:ce:ab:d8:24:63:c3:c6:08:b7:e4:50:fa:39:30:ce:4a: 0c:65:cd:e1:f7:bf:75:bc:37:6b:c9:67:a9:7c:6b:19:12:3e: e0:d9:b4:ca:63:39:81:1a:78:e0:5c:ba:8f:af:72:1b:43:e5: d7:72:f6:b4:3d:dd:97:3a:d3:84:d5:4f:94:aa:58:79:b5:e5: 53:4a:3d:12:d4:15:36:02:48:ae:1e:4b:ce:62:60:69:87:f0: cb:b9:bc:d7:2e:44:5e:0d:6a:46:fa:78:b2:07:9d:f8:0f:b3: ad:c3:b4:b6:99:bb:11:ef:67:5c:d7:d8:e7:62:3a:b0:64:e9: 4c:a5:fd:77:58:29:cc:4b:7a:29:8c:18:d7:fa:be:86:14:28: 7a:03:8b:e6:a4:ff:49:14:5a:06:2a:43:ed:c8:58:47:31:19: 20:cd:3d:ec:44:93:80:d8:e5:ae:30:f9:3c:dc:ff:fb:5f:d9: 55:ab:fc:0b:3a:74:30:97:3a:83:52:9a:f8:71:3a:2d:25:62: f5:5c:f6:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emHHISqYfKKz0h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk Y2E1ZTJjMWMtN2EyMC00ZTc2LWFiMWYtOTdiYmUyM2Q3M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKqRj1WLoOW4xbsnHv/cpmVkZJS67l5KfLi9 wdCtBwkFhVVmbitf33MZrcBDl+F74SpQy3+8OEG/CHF4uQTmOjUi3gThszF1QlvJ txhxRzskRTTNniGF5MJH4TYwYsyjvlMELqU+bl7qbwreoqhc2BDsauyYYzix8E9d GuKBge8YNZLWpu1KRdWzeTcciWayMr2pkAAenPjD1ZuPS8S5a0d+j2MiWjVWgG9U hhALim6VP8hm37k90ySfd/a3ERI5FgFf2n1F9SJoCdjEsWft684b6RuVB8qSsnDB TBapKFf4UIqiOta6hf2ki7jcFi/dzw8lkaDmlljZZXvEhfxqHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6HNYIGZgzM1I4JGCr+ajNlEoYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvY2VmODY1ZWUtYjJmMy0z MjU3LWIwNGUtOGQ3MDExMzUwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARI5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuq5Xno93UKCrwTsbIZvYMZBCMSOktdDuFYhuO63KSII2jbyHxiZre6 sOTXlGf0xp2p6mx8CJJqzqvYJGPDxgi35FD6OTDOSgxlzeH3v3W8N2vJZ6l8axkS PuDZtMpjOYEaeOBcuo+vchtD5ddy9rQ93Zc604TVT5SqWHm15VNKPRLUFTYCSK4e S85iYGmH8Mu5vNcuRF4Nakb6eLIHnfgPs63DtLaZuxHvZ1zX2OdiOrBk6Uyl/XdY KcxLeimMGNf6voYUKHoDi+ak/0kUWgYqQ+3IWEcxGSDNPexEk4DY5a4w+Tzc//tf 2VWr/As6dDCXOoNSmvhxOi0lYvVc9uI= -----END CERTIFICATE-----Generated at Tue Oct 27 15:06:37 2026 by rpki-client