$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/689511c9-252d-3d11-a8b9-78e51551333e.roa File: 689511c9-252d-3d11-a8b9-78e51551333e.roa (raw, json) Hash identifier: JTOj+2F5UewnFVHiZH//3QvUPmD4d9jHsTq8Nf1h+k0= Subject key identifier: EA:AA:38:3D:B0:83:01:E2:23:E9:EF:3A:9F:3F:6A:FD:06:1E:8F:2D Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584EA787FA780DDC85CD980A07C0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/689511c9-252d-3d11-a8b9-78e51551333e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22652 IP address blocks: 68.67.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:fa:78:0d:dc:85:cd:98:0a:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c31d30d4-d40d-4a1b-b2d7-12c6465764e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:25:02:00:92:2c:76:99:44:7e:36:8b:3e: 5c:2e:30:65:da:37:22:44:41:0e:c5:38:77:d3:c8: 8f:0e:b5:6c:67:bd:b2:c7:9a:cf:ff:3f:09:a5:ee: 86:60:fb:71:49:35:ba:bf:8a:61:54:af:db:5c:69: c8:81:c0:be:16:a5:b2:eb:dc:d7:56:53:4a:c1:14: e6:dc:88:fb:fd:ee:56:92:43:49:53:a9:a4:0f:8a: c6:ea:fb:67:58:df:a8:f1:66:28:ca:e7:d4:1c:7d: aa:1a:e0:82:ae:ec:e6:d9:4a:cf:5f:80:48:bb:c2: 76:1b:0e:70:9f:ff:10:31:72:32:e0:4d:ba:c4:03: ea:88:37:2d:35:b6:29:01:7e:ba:b2:94:b9:d3:4e: 0a:87:f1:24:08:09:c1:4d:2a:71:68:21:c5:e9:92: de:7e:e2:de:60:66:61:61:71:48:ff:6b:33:fa:37: ad:cd:aa:73:6d:46:cf:0f:ab:a6:be:0a:50:63:1e: 30:b5:0e:6d:84:09:33:b0:b5:bd:1e:2b:f5:81:cd: 3f:5e:73:6f:78:7a:0d:34:d6:7b:a2:71:1b:38:8a: 9f:80:0e:89:65:6f:6e:a7:21:bd:38:ea:0b:c5:3a: 8f:1c:e5:ed:8c:23:26:e5:7f:eb:00:fc:5a:1d:7c: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AA:38:3D:B0:83:01:E2:23:E9:EF:3A:9F:3F:6A:FD:06:1E:8F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/689511c9-252d-3d11-a8b9-78e51551333e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:38:24:60:16:72:95:ad:59:43:bf:9f:a3:90:3e:95:a6:19: 21:a2:f0:e5:4d:90:44:0e:30:5b:62:df:f6:d4:dc:42:c1:0b: 70:c4:7b:bc:50:29:12:56:13:fb:82:61:16:d2:1c:2a:fa:95: 25:c7:3e:db:f2:26:c7:50:72:71:42:f6:3c:c1:84:a1:0a:2e: ef:d5:f8:7e:e8:56:b9:c7:8b:7f:f0:7b:45:3c:7d:01:58:e9: 2a:d8:33:af:21:ae:3e:48:79:5b:6d:14:68:ac:50:79:31:da: fd:15:c1:14:3b:3d:6a:82:14:ab:83:e4:10:ca:40:a9:c8:8b: d3:e6:01:ca:6d:6d:5b:d3:0f:1f:fb:dd:0d:d0:e5:ec:83:89: 51:dc:6a:4f:35:8f:e4:48:7a:3a:24:e0:4c:3f:e0:5c:77:e2: e1:5b:59:a2:3d:44:60:af:2b:ed:bc:9c:b0:a2:f9:fb:35:9e: e2:73:9e:23:c1:a2:8e:24:21:0b:f1:8a:ab:97:40:6d:aa:03: 5f:1f:bf:36:86:d9:38:ef:2c:fc:c1:67:34:a5:a2:13:7e:18: 80:04:ee:1b:a0:d9:0e:04:ac:f9:21:d9:a9:83:4b:a0:66:7e: 92:28:a3:e5:df:b5:05:9d:23:b4:b8:30:77:64:98:bb:9e:a8: 34:24:63:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/p4DdyFzZgKB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzMxZDMwZDQtZDQwZC00YTFiLWIyZDctMTJjNjQ2NTc2NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfglAgCSLHaZRH42iz5cLjBl2jciREEOxTh3 08iPDrVsZ72yx5rP/z8Jpe6GYPtxSTW6v4phVK/bXGnIgcC+FqWy69zXVlNKwRTm 3Ij7/e5WkkNJU6mkD4rG6vtnWN+o8WYoyufUHH2qGuCCruzm2UrPX4BIu8J2Gw5w n/8QMXIy4E26xAPqiDctNbYpAX66spS5004Kh/EkCAnBTSpxaCHF6ZLefuLeYGZh YXFI/2sz+jetzapzbUbPD6umvgpQYx4wtQ5thAkzsLW9Hiv1gc0/XnNveHoNNNZ7 onEbOIqfgA6JZW9upyG9OOoLxTqPHOXtjCMm5X/rAPxaHXxjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqqOD2wgwHiI+nvOp8/av0GHo8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNjg5NTExYzktMjUyZC0z ZDExLWE4YjktNzhlNTE1NTEzMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU4JGAWcpWtWUO/n6OQPpWmGSGi8OVNkEQOMFti3/bU3ELBC3DEe7xQ KRJWE/uCYRbSHCr6lSXHPtvyJsdQcnFC9jzBhKEKLu/V+H7oVrnHi3/we0U8fQFY 6SrYM68hrj5IeVttFGisUHkx2v0VwRQ7PWqCFKuD5BDKQKnIi9PmAcptbVvTDx/7 3Q3Q5eyDiVHcak81j+RIejok4Ew/4Fx34uFbWaI9RGCvK+28nLCi+fs1nuJzniPB oo4kIQvxiquXQG2qA18fvzaG2TjvLPzBZzSlohN+GIAE7hug2Q4ErPkh2amDS6Bm fpIoo+XftQWdI7S4MHdkmLueqDQkY5s= -----END CERTIFICATE-----Generated at Sat Aug 8 22:35:45 2026 by rpki-client