$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa File: cd10208d-4730-3373-99e4-97134af5cead.roa (raw, json) Hash identifier: bJdvR5Nmv0q+qaqdYSglP5xtqoaJGP6DLxj6t4tQmhU= Subject key identifier: AD:78:AF:E9:E8:67:54:FE:39:10:BE:78:0C:4A:86:46:BE:72:89:0A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584E5E7A04CC5845DCB833E635C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 20001 IP address blocks: 68.65.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:7a:04:cc:58:45:dc:b8:33:e6:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=cdc12148-6eeb-4cd0-8bfa-ced59005a5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:d7:1f:77:ff:1e:a0:38:15:7e:38:b0:e8: 82:b5:a6:56:11:f6:8e:24:4b:cd:5b:88:6a:9b:7b: e8:3e:75:25:66:d2:c6:fe:c5:73:b7:c5:f6:77:f9: 8d:2f:0b:85:a5:e1:7d:09:48:0d:c3:8e:af:69:90: d3:fd:87:b0:0e:7b:84:0a:5f:08:1c:4d:b3:92:12: f5:71:3e:ee:e8:fd:d2:77:40:fa:8d:52:7e:26:66: 9b:d8:36:17:0c:51:75:1f:51:f1:49:11:0b:fe:49: c0:3f:2a:9f:19:ab:b1:a0:9e:e6:7f:b5:d2:f2:c2: eb:78:86:bd:c4:00:21:d7:7c:5e:e1:d1:f2:13:8f: e1:be:6f:61:77:70:70:77:6a:0e:6e:c1:1c:26:63: b7:75:57:0e:ad:8d:3b:87:d4:e1:d3:73:7a:ec:99: d1:82:fd:5e:a8:db:ef:dd:1d:0f:63:53:7f:f9:97: e8:dd:f8:db:7e:f9:01:06:79:48:4d:17:12:0d:cf: c4:6a:42:04:ab:0c:cf:d5:44:5f:3d:60:93:26:b7: 72:bc:69:4f:a6:eb:db:ac:59:38:0c:20:83:d6:9e: cf:64:21:13:e6:85:c8:d4:44:51:67:8d:7a:5c:e7: 33:ca:06:0c:47:4a:fc:23:f1:61:f6:87:70:c9:a0: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:AF:E9:E8:67:54:FE:39:10:BE:78:0C:4A:86:46:BE:72:89:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cd10208d-4730-3373-99e4-97134af5cead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 68.65.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6f:1e:f1:40:bd:91:10:9c:46:f2:2c:c4:44:6a:e5:77:e5: f9:54:e5:4a:89:bb:19:87:2e:f9:d9:67:e6:1c:2f:79:21:9d: 58:bc:90:e9:0c:e1:29:ea:2d:8f:a6:34:cc:c8:76:3b:df:76: cc:7c:a6:b8:66:95:e0:b5:95:00:4a:99:3e:87:10:28:fc:d0: 5b:78:a3:f1:16:0c:86:cd:37:59:e3:35:80:e5:15:21:49:d7: 2f:54:2a:84:07:ea:0d:5e:c3:39:8b:e1:95:3e:9f:77:d4:b7: 87:8d:65:db:cb:b9:ef:1b:2f:24:df:2b:9b:c6:c7:1a:26:8c: 59:4f:5a:7b:f5:ee:d5:1c:b2:3f:a9:e8:30:0f:52:67:11:25: ba:81:38:27:83:e8:0d:4e:68:08:b8:16:3d:67:16:e1:2c:51: fd:b4:04:b1:76:9e:4b:d1:62:fc:85:f9:ae:8f:dc:48:b7:b2: 9c:b9:d4:81:e1:b8:2e:ac:e4:4d:ac:4a:30:af:e9:b0:98:3d: bf:af:92:5a:67:c2:48:78:85:c3:ea:69:62:7d:2d:bf:a3:41: 74:4e:85:97:b3:32:dc:53:c5:e0:7b:2c:c0:80:2f:85:ec:22: b6:b0:c0:da:50:07:e3:c1:71:72:59:4e:5e:1c:69:86:8e:ad: e2:31:97:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eegTMWEXcuDPmNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk Y2RjMTIxNDgtNmVlYi00Y2QwLThiZmEtY2VkNTkwMDVhNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky3XH3f/HqA4FX44sOiCtaZWEfaOJEvNW4hq m3voPnUlZtLG/sVzt8X2d/mNLwuFpeF9CUgNw46vaZDT/YewDnuECl8IHE2zkhL1 cT7u6P3Sd0D6jVJ+Jmab2DYXDFF1H1HxSREL/knAPyqfGauxoJ7mf7XS8sLreIa9 xAAh13xe4dHyE4/hvm9hd3Bwd2oObsEcJmO3dVcOrY07h9Th03N67JnRgv1eqNvv 3R0PY1N/+Zfo3fjbfvkBBnlITRcSDc/EakIEqwzP1URfPWCTJrdyvGlPpuvbrFk4 DCCD1p7PZCET5oXI1ERRZ416XOczygYMR0r8I/Fh9odwyaDhbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK14r+noZ1T+ORC+eAxKhka+cokKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvY2QxMDIwOGQtNDczMC0z MzczLTk5ZTQtOTcxMzRhZjVjZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREHfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlvHvFAvZEQnEbyLMREauV35flU5UqJuxmHLvnZZ+YcL3khnVi8kOkM 4SnqLY+mNMzIdjvfdsx8prhmleC1lQBKmT6HECj80Ft4o/EWDIbNN1njNYDlFSFJ 1y9UKoQH6g1ewzmL4ZU+n3fUt4eNZdvLue8bLyTfK5vGxxomjFlPWnv17tUcsj+p 6DAPUmcRJbqBOCeD6A1OaAi4Fj1nFuEsUf20BLF2nkvRYvyF+a6P3Ei3spy51IHh uC6s5E2sSjCv6bCYPb+vklpnwkh4hcPqaWJ9Lb+jQXROhZezMtxTxeB7LMCAL4Xs IrawwNpQB+PBcXJZTl4caYaOreIxlzM= -----END CERTIFICATE-----Generated at Tue Jul 21 13:24:46 2026 by rpki-client