$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa File: 35020f1b-66f6-38ce-b296-a8a736d9ba08.roa (raw, json) Hash identifier: aGh5gKdNc/1EtGKRcWmaK2MHyocRUZBbu1wemIwGOT0= Subject key identifier: E4:F4:E7:1C:97:85:FF:D0:51:90:18:FC:1A:5F:B4:EE:F4:35:82:F5 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B44CED93EBB248905C00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 54137 IP address blocks: 68.67.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:4c:ed:93:eb:b2:48:90:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e4c6ec00-e780-462c-a4ec-f53bf94cfd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:19:3c:fd:2e:5b:be:b1:a3:fc:6b:4f:28: 7f:99:10:f9:e4:9c:b0:1d:d3:16:dc:97:4d:bf:e5: ad:44:3d:5e:a9:95:8d:cf:39:09:58:4d:d3:75:62: 77:b1:02:9b:6e:fb:ae:77:c6:27:28:f6:74:41:4e: 5b:da:f2:fe:4b:91:c6:dd:d7:2f:27:a9:ab:c5:84: 94:0b:af:96:6b:c8:51:1b:67:4e:35:bf:40:16:60: 0d:79:c2:80:4c:a2:ed:dd:78:7b:9e:ac:87:36:9d: 9a:a2:e8:e3:72:11:7f:9f:82:18:a8:be:b3:26:5a: 2e:9e:80:e0:15:29:ab:8b:23:94:27:2d:f4:e3:32: 35:60:85:25:0d:e4:80:35:96:f3:eb:25:e0:df:f6: 39:01:c7:cc:83:b5:86:1f:2a:4a:47:b6:24:cb:31: e7:e6:4e:fc:aa:98:f4:04:d2:26:22:82:d5:85:93: bd:7c:76:e5:21:d1:8d:78:26:b8:fe:82:77:b6:fb: ab:0d:75:60:87:57:c3:33:60:c1:01:00:fb:a7:16: fa:8e:c8:4d:92:dd:9d:6d:f3:9b:d9:0d:6e:27:56: 58:c1:7b:85:84:db:a0:c8:7c:4c:94:88:2b:bd:f9: 57:e0:3b:0b:3e:91:06:dd:d6:b5:3d:d3:b4:13:b6: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F4:E7:1C:97:85:FF:D0:51:90:18:FC:1A:5F:B4:EE:F4:35:82:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e1:25:c4:8c:f0:e7:d8:f6:9d:1e:d4:4d:34:6f:31:f2:e2: 3a:90:14:11:8d:b4:fa:bc:b5:cc:22:38:fe:d7:98:e6:ad:70: 93:37:87:ab:ed:f2:47:4e:96:66:8f:ca:3e:08:df:09:cc:ea: 34:b5:89:04:76:7e:75:b0:82:c3:d3:d1:b8:89:95:cf:b2:51: 33:7f:de:02:7c:51:03:09:1c:98:ab:bf:e6:69:35:e7:e9:1a: 80:58:2e:fc:88:88:55:e7:cb:d6:01:ba:69:ad:e0:76:4a:75: 78:b0:cb:a0:96:2d:ae:9f:3e:0f:a5:ac:da:13:e9:0d:60:c3: f6:01:1f:85:e0:f4:90:02:94:20:fc:bc:25:9d:cf:c1:00:33: ed:86:ee:ff:c8:7a:11:8a:b7:08:28:f8:a0:69:00:2b:bf:2e: b9:60:01:d0:57:0b:8d:a9:86:36:9f:7e:ba:b2:a3:62:66:70: dd:59:0f:75:b9:1d:a1:9b:3b:6f:59:84:29:ca:7c:2c:a8:10: 85:df:e1:e4:d8:34:02:ac:4a:f6:ee:c7:0b:10:cd:a7:24:83: 57:fb:dd:f2:be:76:d0:18:a7:e2:6c:ff:f0:ce:dd:1b:20:e6: d1:83:af:6b:3e:73:55:02:60:68:6a:aa:30:a1:a7:01:da:7a: 75:b5:43:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErRM7ZPrskiQXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTRjNmVjMDAtZTc4MC00NjJjLWE0ZWMtZjUzYmY5NGNmZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFEZPP0uW76xo/xrTyh/mRD55JywHdMW3JdN v+WtRD1eqZWNzzkJWE3TdWJ3sQKbbvuud8YnKPZ0QU5b2vL+S5HG3dcvJ6mrxYSU C6+Wa8hRG2dONb9AFmANecKATKLt3Xh7nqyHNp2aoujjchF/n4IYqL6zJlounoDg FSmriyOUJy304zI1YIUlDeSANZbz6yXg3/Y5AcfMg7WGHypKR7YkyzHn5k78qpj0 BNImIoLVhZO9fHblIdGNeCa4/oJ3tvurDXVgh1fDM2DBAQD7pxb6jshNkt2dbfOb 2Q1uJ1ZYwXuFhNugyHxMlIgrvflX4DsLPpEG3da1PdO0E7bP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT05xyXhf/QUZAY/BpftO70NYL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzUwMjBmMWItNjZmNi0z OGNlLWIyOTYtYThhNzM2ZDliYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvhJcSM8OfY9p0e1E00bzHy4jqQFBGNtPq8tcwiOP7XmOatcJM3h6vt 8kdOlmaPyj4I3wnM6jS1iQR2fnWwgsPT0biJlc+yUTN/3gJ8UQMJHJirv+ZpNefp GoBYLvyIiFXny9YBummt4HZKdXiwy6CWLa6fPg+lrNoT6Q1gw/YBH4Xg9JAClCD8 vCWdz8EAM+2G7v/IehGKtwgo+KBpACu/LrlgAdBXC42phjaffrqyo2JmcN1ZD3W5 HaGbO29ZhCnKfCyoEIXf4eTYNAKsSvbuxwsQzackg1f73fK+dtAYp+Js//DO3Rsg 5tGDr2s+c1UCYGhqqjChpwHaenW1Qz4= -----END CERTIFICATE-----Generated at Thu Sep 24 05:23:51 2026 by rpki-client