$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa File: bd85e14a-a941-3190-81ec-819309f5fa0e.roa (raw, json) Hash identifier: z5u2cGztcsyKQEXNyTWyZn5+UmIPzDrRlMWgoQxKtJg= Subject key identifier: 14:ED:21:C3:13:A4:78:64:CB:5B:5F:2E:D9:55:A5:1F:6B:85:83:0E Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584EA79756093D58869862CB9080 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 69.67.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:56:09:3d:58:86:98:62:cb:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0afeb691-cc0b-4951-83b0-11c3aa79a2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:2e:6e:4a:41:53:07:30:9b:68:ea:26:db: 90:93:fd:67:07:13:d4:d7:55:db:39:3d:b2:e2:95: 7e:e0:d3:08:a9:88:41:f3:bb:e2:5f:7a:50:89:3f: 00:4b:ac:26:46:43:98:4d:7c:e6:85:3a:24:8c:60: 78:9b:4e:c7:74:df:0b:29:2a:76:56:ec:73:1a:d6: bb:76:e7:2e:4f:6d:e7:af:0c:3a:10:da:07:8f:c2: 04:ce:58:68:8e:88:bb:bb:a1:57:48:56:bd:99:cb: 9e:32:13:2f:21:76:7c:17:94:69:d0:db:76:16:53: 3d:0b:dd:44:37:d5:0e:f9:27:47:d6:7c:95:31:23: e7:2d:35:75:56:32:38:10:33:63:00:f8:be:09:fd: 4f:65:ef:7c:74:b1:7f:cb:7a:2e:65:89:98:20:b4: 33:b1:37:41:f7:b3:b8:86:44:ed:ac:47:2c:51:85: 9e:fd:f9:90:38:9b:12:50:a1:d0:fa:78:90:4e:93: ba:f5:32:c9:ae:8b:91:0c:72:5e:c9:c0:36:d1:aa: f0:38:d3:37:a6:a2:b4:cf:61:2f:63:6d:6e:c9:27: f6:42:45:7d:ab:f0:a5:3b:43:e0:b3:5b:52:05:a5: 4f:e6:b4:19:6f:5f:a3:54:61:73:d9:ae:a0:55:29: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:21:C3:13:A4:78:64:CB:5B:5F:2E:D9:55:A5:1F:6B:85:83:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 69.67.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:35:c5:55:e1:fa:1e:3c:f3:7b:3e:48:cf:25:bd:c9:16:74: af:03:61:99:e5:36:db:74:99:4c:16:ff:90:ef:61:de:97:a1: 33:d5:f5:03:e1:a6:0e:c5:f5:ed:99:a7:38:5f:d9:ab:c6:ed: db:53:9d:c0:07:85:68:95:e2:e2:11:d2:52:c7:34:f9:15:9c: 6f:0e:bb:32:10:1c:e0:c3:b8:2a:dc:2c:9d:d3:4c:5b:bc:ba: 4a:53:00:f7:7c:b1:d5:1b:7f:d3:d4:32:81:56:a1:f8:73:13: 66:c8:ef:e2:b9:a7:fb:16:75:cb:59:6f:80:59:e4:52:88:e9: 6a:4f:95:1b:05:17:46:fb:ea:e9:b5:99:9b:2c:66:a0:d4:ca: 06:91:98:ee:55:77:83:2f:8d:f9:f8:cc:ff:a6:c3:e0:4d:f0: 2b:95:67:3b:94:5e:a1:2f:8f:cb:1e:8d:aa:80:f6:f9:e3:d5: 72:fd:73:ea:22:ea:c7:45:ea:10:b2:77:c7:70:71:ef:ed:c6: 31:7e:e2:e2:b3:3c:7e:89:71:ab:f0:de:e7:b8:a1:8c:2a:ae: 11:4e:70:32:6b:6c:ec:af:22:97:61:07:cf:9c:0f:cc:3f:9c: 11:fb:91:1e:c1:51:73:b8:f0:c2:a3:1d:1d:c4:ae:29:60:3a: c1:ca:80:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl1YJPViGmGLLkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGFmZWI2OTEtY2MwYi00OTUxLTgzYjAtMTFjM2FhNzlhMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuoubkpBUwcwm2jqJtuQk/1nBxPU11XbOT2y 4pV+4NMIqYhB87viX3pQiT8AS6wmRkOYTXzmhTokjGB4m07HdN8LKSp2VuxzGta7 ducuT23nrww6ENoHj8IEzlhojoi7u6FXSFa9mcueMhMvIXZ8F5Rp0Nt2FlM9C91E N9UO+SdH1nyVMSPnLTV1VjI4EDNjAPi+Cf1PZe98dLF/y3ouZYmYILQzsTdB97O4 hkTtrEcsUYWe/fmQOJsSUKHQ+niQTpO69TLJrouRDHJeycA20arwONM3pqK0z2Ev Y21uySf2QkV9q/ClO0Pgs1tSBaVP5rQZb1+jVGFz2a6gVSk77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTtIcMTpHhky1tfLtlVpR9rhYMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvYmQ4NWUxNGEtYTk0MS0z MTkwLTgxZWMtODE5MzA5ZjVmYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw1xVXh+h4883s+SM8lvckWdK8DYZnlNtt0mUwW/5DvYd6XoTPV9QPh pg7F9e2Zpzhf2avG7dtTncAHhWiV4uIR0lLHNPkVnG8OuzIQHODDuCrcLJ3TTFu8 ukpTAPd8sdUbf9PUMoFWofhzE2bI7+K5p/sWdctZb4BZ5FKI6WpPlRsFF0b76um1 mZssZqDUygaRmO5Vd4Mvjfn4zP+mw+BN8CuVZzuUXqEvj8sejaqA9vnj1XL9c+oi 6sdF6hCyd8dwce/txjF+4uKzPH6Jcavw3ue4oYwqrhFOcDJrbOyvIpdhB8+cD8w/ nBH7kR7BUXO48MKjHR3ErilgOsHKgH8= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:43 2026 by rpki-client