$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa File: 68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json) Hash identifier: ypo6NvGeACbTfuYv4GI41Lox5moTMO/vVJlDYlN+0Ho= Subject key identifier: 79:13:54:4B:23:FC:F0:59:2B:11:A5:73:7C:08:F5:85:41:D0:42:5C Certificate issuer: /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Certificate serial: 010D0C9F4328584EA786E33451168991B90E0AE0 Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 34774 IP address blocks: 199.64.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e3:34:51:16:89:91:b9:0e:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e6e99a52-1bf2-4070-a462-692a66e77f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ea:f2:6c:17:f0:1b:bf:36:7f:78:57:f7:88: d3:6b:f1:12:ee:c1:bc:ec:76:69:91:24:19:06:14: ae:13:9a:ec:8e:83:18:d9:61:c6:eb:5a:a2:5e:c6: 58:ee:7b:c0:a6:99:0d:dc:0a:ed:5a:fe:4f:fb:d6: ab:4a:7a:93:a8:d8:1c:d8:a8:d4:f1:1e:09:b4:ca: f6:db:5c:1a:88:3f:6e:cc:bf:56:57:c5:6a:6e:8b: ad:c0:ab:8f:14:1e:d0:5e:b7:be:ee:b4:1e:31:cc: d6:e5:81:7e:c8:1d:51:30:05:e7:ea:1c:70:65:43: 08:f9:ee:23:cb:f8:92:44:ca:6d:38:9d:aa:33:85: fe:02:f9:28:74:6f:26:7c:b4:c9:db:ef:8b:c1:4d: b2:96:1a:31:e1:fe:96:2d:60:4d:89:ef:53:64:59: 1a:e0:65:74:34:77:60:0c:bb:7d:c8:5a:84:cc:f9: cf:c2:7b:12:64:c8:02:42:89:63:87:1e:04:4d:91: bd:35:8d:28:f8:f9:d0:f8:a9:4a:10:01:13:16:40: 50:b3:6f:f0:2d:11:65:29:1d:ee:20:87:86:19:3d: 4a:4c:85:6c:73:0a:e2:77:f5:da:de:33:bb:9f:be: 9e:ac:03:b9:6f:4b:92:00:40:b6:8e:23:62:3e:11: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:13:54:4B:23:FC:F0:59:2B:11:A5:73:7C:08:F5:85:41:D0:42:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl X509v3 Authority Key Identifier: keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer sbgp-ipAddrBlock: critical IPv4: 199.64.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ec:fa:57:98:d5:09:f9:f0:ab:a7:1e:22:53:ae:63:15:b9: e2:60:e0:68:76:b5:f5:bf:23:9e:a9:f6:2c:e6:fa:99:e6:a9: 10:26:dd:ab:86:1f:42:85:2f:32:4b:99:f3:60:d7:35:9c:4a: 32:80:0d:06:c7:73:85:e9:1a:ce:a4:b2:25:91:60:ce:aa:00: 9c:8d:25:7e:de:fc:95:8c:e5:7d:1e:28:6f:b2:fe:47:74:87: d0:ce:a6:88:e5:e6:d7:f1:49:20:83:83:ab:f7:60:97:20:8d: c8:24:36:18:87:cc:25:fe:c5:d1:9d:12:b9:48:8a:37:d6:aa: d5:2f:af:eb:55:f6:75:e3:d0:c1:65:83:b3:76:29:0b:f2:50: b5:55:ca:25:83:d6:7e:10:b2:7c:79:ba:de:88:5f:bc:fb:92: 6a:de:6f:33:68:6d:fb:93:b9:1f:ac:2a:8c:f5:e1:10:81:e7: ec:c1:56:e6:b6:5b:48:77:75:47:52:ec:0e:db:05:9c:39:27: 88:54:6d:d7:c3:f1:b2:a5:31:56:ff:10:dd:ca:47:5a:52:5c: a0:6d:0c:aa:28:4f:d7:b1:38:f9:fc:49:5d:2c:fc:0f:35:10: 25:34:16:e6:48:ea:0a:7e:79:4e:27:83:77:80:f2:02:cf:8a: fd:42:4c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuM0URaJkbkOCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh YjVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTZlOTlhNTItMWJmMi00MDcwLWE0NjItNjkyYTY2ZTc3ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmerybBfwG782f3hX94jTa/ES7sG87HZpkSQZ BhSuE5rsjoMY2WHG61qiXsZY7nvAppkN3ArtWv5P+9arSnqTqNgc2KjU8R4JtMr2 21waiD9uzL9WV8VqboutwKuPFB7QXre+7rQeMczW5YF+yB1RMAXn6hxwZUMI+e4j y/iSRMptOJ2qM4X+AvkodG8mfLTJ2++LwU2ylhox4f6WLWBNie9TZFka4GV0NHdg DLt9yFqEzPnPwnsSZMgCQoljhx4ETZG9NY0o+PnQ+KlKEAETFkBQs2/wLRFlKR3u IIeGGT1KTIVscwrid/Xa3jO7n76erAO5b0uSAEC2jiNiPhFuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkTVEsj/PBZKxGlc3wI9YVB0EJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvs+leY1Qn58KunHiJTrmMVueJg4Gh2tfW/I56p9izm+pnmqRAm3auG H0KFLzJLmfNg1zWcSjKADQbHc4XpGs6ksiWRYM6qAJyNJX7e/JWM5X0eKG+y/kd0 h9DOpojl5tfxSSCDg6v3YJcgjcgkNhiHzCX+xdGdErlIijfWqtUvr+tV9nXj0MFl g7N2KQvyULVVyiWD1n4Qsnx5ut6IX7z7kmrebzNobfuTuR+sKoz14RCB5+zBVua2 W0h3dUdS7A7bBZw5J4hUbdfD8bKlMVb/EN3KR1pSXKBtDKooT9exOPn8SV0s/A81 ECU0FuZI6gp+eU4ng3eA8gLPiv1CTLE= -----END CERTIFICATE-----Generated at Sat Aug 15 04:39:38 2026 by rpki-client