$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa File: 13997c14-c581-3e61-9df1-e2286853ad8a.roa (raw, json) Hash identifier: DEnWTeeweSR5Wiet+7viQhBpvDskhxdieXbN9vv+vcU= Subject key identifier: 08:66:B5:F9:43:13:16:AB:7E:30:FD:7B:65:29:8F:61:B8:EE:DD:0B Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584F06729FDECC337933471FAE80 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9f:de:cc:33:79:33:47:1f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=afb91e63-fe1b-4d65-9640-2caaad021bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:a3:ed:23:45:51:e4:f7:c1:74:36:98:e4: 4f:e6:ce:f4:91:26:1b:9f:7e:31:fa:10:01:8e:db: 44:70:6a:72:69:75:a5:17:5f:e8:bc:44:86:b3:ab: 0e:af:43:e1:32:80:26:a3:d7:b9:07:d4:49:6d:bf: cb:6c:77:6d:dd:27:02:52:9e:dc:02:d8:c5:23:a7: 20:80:fd:1d:49:21:47:7c:4e:45:c8:7e:90:5f:5c: bc:37:05:a9:df:1f:1c:da:d9:93:6b:f0:47:fe:7b: a8:55:eb:bc:8c:f9:e9:97:c9:f3:19:98:86:70:97: 30:12:56:96:07:57:28:fb:1d:d4:73:0b:8a:11:bf: 26:7c:4a:4c:34:21:0b:f8:81:21:a8:4d:28:26:7b: 99:5c:ce:a3:f3:d6:81:0c:5f:d9:c7:b8:5e:ba:71: 95:ed:9e:4a:a2:1c:69:48:df:16:c0:47:c3:b7:68: 00:a3:d1:bd:89:e5:74:4f:da:f1:fa:9d:28:75:08: ab:c5:f8:92:ca:c8:17:b3:2d:7d:34:45:35:07:b5: 00:8c:03:13:3d:0a:a8:40:59:88:55:8b:67:f8:43: 02:22:08:52:f3:a2:55:65:e4:84:8d:12:e9:dc:b2: fc:6b:07:b4:86:4d:84:6e:9d:e8:99:f3:59:99:fe: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:66:B5:F9:43:13:16:AB:7E:30:FD:7B:65:29:8F:61:B8:EE:DD:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c9:61:2d:16:36:80:0b:d3:3c:50:ac:01:46:04:bd:ad:cf: a0:cc:c9:85:71:82:00:07:42:a2:18:55:79:40:58:e4:51:a7: 9f:74:90:43:3b:61:86:a2:19:90:f1:fb:cc:8e:24:29:2a:25: aa:b2:42:09:e9:1e:11:f8:d2:97:a2:68:f0:2d:67:ac:03:24: 02:89:d0:cf:4c:5d:dc:ad:ba:22:1b:90:6d:f2:01:4c:2c:13: bd:c5:f8:4b:d6:4b:b3:81:4a:d0:b3:70:ec:71:2a:e6:d8:e8: 3e:9b:3e:3c:dd:56:4d:3e:da:db:e7:fa:54:4b:3c:77:19:d3: e2:97:bb:f9:c5:4e:a0:46:81:7a:87:3d:17:e1:cf:9c:32:9c: 42:44:35:a3:75:7a:95:7d:1a:75:62:fc:6e:61:91:09:75:37: 8b:05:e0:3a:4e:a4:f8:7d:99:72:d7:71:30:d4:14:29:91:22: c0:9b:60:26:e0:4f:fb:29:b1:c2:2d:fe:5d:73:37:42:f6:0f: 76:37:2e:08:3b:5e:6e:19:6b:a2:7b:2b:41:f4:73:75:18:28: af:42:3e:b4:5d:15:e5:3c:0c:c3:fc:42:e5:29:fe:89:06:2e: bd:8b:3b:06:9d:c1:dc:93:a1:7c:b3:72:f0:a3:f7:17:09:ba: 43:3a:2b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcp/ezDN5M0cfroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YWZiOTFlNjMtZmUxYi00ZDY1LTk2NDAtMmNhYWFkMDIxYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Wj7SNFUeT3wXQ2mORP5s70kSYbn34x+hAB jttEcGpyaXWlF1/ovESGs6sOr0PhMoAmo9e5B9RJbb/LbHdt3ScCUp7cAtjFI6cg gP0dSSFHfE5FyH6QX1y8NwWp3x8c2tmTa/BH/nuoVeu8jPnpl8nzGZiGcJcwElaW B1co+x3UcwuKEb8mfEpMNCEL+IEhqE0oJnuZXM6j89aBDF/Zx7heunGV7Z5Kohxp SN8WwEfDt2gAo9G9ieV0T9rx+p0odQirxfiSysgXsy19NEU1B7UAjAMTPQqoQFmI VYtn+EMCIghS86JVZeSEjRLp3LL8awe0hk2Ebp3omfNZmf64pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhmtflDExarfjD9e2Upj2G47t0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvMTM5OTdjMTQtYzU4MS0z ZTYxLTlkZjEtZTIyODY4NTNhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXJYS0WNoAL0zxQrAFGBL2tz6DMyYVxggAHQqIYVXlAWORRp590kEM7 YYaiGZDx+8yOJCkqJaqyQgnpHhH40peiaPAtZ6wDJAKJ0M9MXdytuiIbkG3yAUws E73F+EvWS7OBStCzcOxxKubY6D6bPjzdVk0+2tvn+lRLPHcZ0+KXu/nFTqBGgXqH PRfhz5wynEJENaN1epV9GnVi/G5hkQl1N4sF4DpOpPh9mXLXcTDUFCmRIsCbYCbg T/spscIt/l1zN0L2D3Y3Lgg7Xm4Za6J7K0H0c3UYKK9CPrRdFeU8DMP8QuUp/okG Lr2LOwadwdyToXyzcvCj9xcJukM6K0E= -----END CERTIFICATE-----Generated at Tue Sep 1 04:07:26 2026 by rpki-client