$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa File: 84b980dc-1b89-371a-8343-16c5dac99a40.roa (raw, json) Hash identifier: wOYE1O5EXvv9vV27LB2u7yxY8A94R3zaWTtYHLVyt7I= Subject key identifier: 16:E3:66:EE:37:1A:F6:71:A7:C2:AC:D8:DF:B0:FF:87:3D:E6:07:59 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584E4129D1751FA2A7E9ECA234A0 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 58580 IP address blocks: 168.245.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d1:75:1f:a2:a7:e9:ec:a2:34:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=d96dc77d-3550-4735-8ee5-6fabb269f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:aa:22:65:4f:8a:81:ed:76:12:d4:05:45: 1e:fd:ea:98:c0:9e:b8:b6:9a:4a:38:9c:84:15:e8: 29:80:ba:ad:af:47:4b:51:81:c8:4d:39:d9:00:16: ef:53:06:ec:eb:95:52:f2:95:48:79:84:38:11:12: 21:4c:8a:b6:d1:a3:41:ca:b8:9b:f5:75:f2:11:0e: 5c:8a:e8:36:87:96:4a:90:37:11:de:83:b0:e7:20: 58:6e:d5:e5:5a:b4:12:69:70:da:a7:a2:3e:fc:e6: 25:6f:09:7a:38:88:73:ba:6f:ba:30:11:03:8f:a1: 0b:c3:6b:a2:da:7f:ae:8c:3e:65:45:ac:74:e2:60: bc:10:b3:41:70:40:30:6f:06:73:a6:60:45:e9:e2: 87:c3:a7:57:21:16:e6:0f:10:8c:4e:e1:44:c1:17: dc:8b:37:d8:1c:aa:81:6b:71:6e:c9:51:f7:fe:f9: d8:1f:1b:b6:5a:1f:34:05:e3:40:36:19:84:46:25: 80:b1:eb:ef:88:20:ea:65:ec:34:c0:08:a3:4c:d8: 87:16:1c:1b:6f:4c:24:79:43:75:15:26:20:44:14: 26:a2:4e:f3:a4:fb:8a:3b:52:04:c6:51:2f:7e:fe: 17:55:64:8f:60:54:4e:81:6e:ad:36:14:86:a2:9d: c7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E3:66:EE:37:1A:F6:71:A7:C2:AC:D8:DF:B0:FF:87:3D:E6:07:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/84b980dc-1b89-371a-8343-16c5dac99a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:38:93:03:32:5b:96:c3:27:39:c4:58:5b:75:e7:ff:bf:69: fa:8b:fb:34:38:f3:cc:79:28:dd:a6:cc:00:cc:1b:ac:4e:01: 49:e1:ac:4f:9f:b3:95:20:1d:cd:85:b0:5d:70:21:0d:12:d0: 1a:71:51:5e:a3:80:3e:19:30:a2:e1:92:4e:fd:f5:2c:d8:7a: e4:e2:3a:47:b2:5b:ac:01:93:42:96:b8:41:d7:12:e9:8f:b8: 40:bc:02:91:ee:b6:b2:d9:22:23:bb:4c:ee:1b:b9:a4:7a:a9: b5:e6:ed:b5:c6:54:03:f3:e4:d9:ed:ea:fd:58:97:23:86:b8: b0:05:55:98:25:24:6e:db:a9:a8:c2:c4:19:72:f6:96:5a:08: 87:a5:b0:c8:75:c0:fd:98:41:24:d9:5e:5a:6f:f1:45:34:26: fe:f1:ae:03:79:16:0f:17:14:13:e7:ed:b1:fd:15:c8:9b:9c: 5f:0b:9d:54:b4:8e:1c:89:1d:41:cd:23:68:f9:77:9d:0f:08: 62:ea:b0:0d:65:11:5f:29:ad:27:3a:99:98:9c:b1:85:68:1b: 31:bf:ae:2e:68:13:a2:5d:c6:00:51:42:9b:aa:ae:38:fa:62: fa:e7:18:d7:2f:18:0e:f0:28:f4:6b:7d:00:c6:9f:cf:c1:39: ca:d5:4e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdF1H6Kn6eyiNKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDk2ZGM3N2QtMzU1MC00NzM1LThlZTUtNmZhYmIyNjlmMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO6qImVPioHtdhLUBUUe/eqYwJ64tppKOJyE FegpgLqtr0dLUYHITTnZABbvUwbs65VS8pVIeYQ4ERIhTIq20aNByrib9XXyEQ5c iug2h5ZKkDcR3oOw5yBYbtXlWrQSaXDap6I+/OYlbwl6OIhzum+6MBEDj6ELw2ui 2n+ujD5lRax04mC8ELNBcEAwbwZzpmBF6eKHw6dXIRbmDxCMTuFEwRfcizfYHKqB a3FuyVH3/vnYHxu2Wh80BeNANhmERiWAsevviCDqZew0wAijTNiHFhwbb0wkeUN1 FSYgRBQmok7zpPuKO1IExlEvfv4XVWSPYFROgW6tNhSGop3H/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbjZu43GvZxp8Ks2N+w/4c95gdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvODRiOTgwZGMtMWI4OS0z NzFhLTgzNDMtMTZjNWRhYzk5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw4kwMyW5bDJznEWFt15/+/afqL+zQ488x5KN2mzADMG6xOAUnhrE+f s5UgHc2FsF1wIQ0S0BpxUV6jgD4ZMKLhkk799SzYeuTiOkeyW6wBk0KWuEHXEumP uEC8ApHutrLZIiO7TO4buaR6qbXm7bXGVAPz5Nnt6v1YlyOGuLAFVZglJG7bqajC xBly9pZaCIelsMh1wP2YQSTZXlpv8UU0Jv7xrgN5Fg8XFBPn7bH9FcibnF8LnVS0 jhyJHUHNI2j5d50PCGLqsA1lEV8prSc6mZicsYVoGzG/ri5oE6JdxgBRQpuqrjj6 YvrnGNcvGA7wKPRrfQDGn8/BOcrVTiA= -----END CERTIFICATE-----Generated at Wed Jun 24 16:08:25 2026 by rpki-client