$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa File: bbde01bf-09e8-34ef-ac65-33475597aa73.roa (raw, json) Hash identifier: hvZkwqvvPtsKzuNsYRBxrljfM+UXkrs2y74B1Gx/1vk= Subject key identifier: 38:48:09:86:15:75:4E:61:C8:4A:1E:0E:D5:38:CF:89:08:87:81:28 Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584EA795D531F0546536E7BB1F40 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6079 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:d5:31:f0:54:65:36:e7:bb:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=59eb74e0-05b8-4b3f-93f6-ea3d3af41a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:21:f8:ac:05:12:a6:7f:38:1a:27:9f:a6: c2:93:14:cc:4e:cc:c6:13:f4:0c:d2:c6:52:70:a9: 32:5b:ca:51:50:6e:ef:2c:4b:9a:49:ad:e7:e6:f9: 56:39:c4:b0:ae:1b:7d:ac:fd:33:86:70:16:7d:ac: 5c:38:af:22:b7:65:a6:41:a1:83:d5:37:7f:3f:b7: 1b:85:b8:30:35:a5:31:09:78:5f:e9:83:83:23:cb: 1b:67:3b:28:40:0e:4c:ae:93:37:48:98:50:52:63: c7:74:e8:70:fd:6a:15:f7:94:30:65:53:86:76:bc: e0:22:ea:e8:1e:b7:58:9a:25:7e:96:01:1b:79:e8: 0d:68:8f:04:92:f0:07:5f:9b:55:14:70:a4:08:ce: f8:df:35:8f:c6:81:a3:57:e3:dc:05:69:2d:76:b7: 79:96:68:17:d1:a4:e8:dc:2a:b4:19:a6:c8:8b:37: 50:70:63:90:2c:88:b0:b6:20:1f:8c:de:82:90:78: 15:5f:b7:c1:2f:fa:04:b6:e7:f8:f2:4a:68:5b:4a: 57:76:5c:6c:5c:d4:25:62:44:7c:be:b7:72:77:3f: 38:6f:a2:97:96:37:2a:15:90:68:b4:9c:07:bb:14: 82:1e:8b:24:28:1e:6a:6a:62:ba:32:06:fd:79:b4: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:48:09:86:15:75:4E:61:C8:4A:1E:0E:D5:38:CF:89:08:87:81:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:48:ff:d4:b2:9b:0a:a9:52:46:32:2c:78:68:cf:a6:97:d2: 3c:da:08:e8:9a:a4:81:e9:54:ab:16:6b:cd:ab:7c:39:5b:4a: ea:7b:1b:7c:0c:49:4c:72:b6:93:52:8b:ba:d7:a4:52:91:4c: fd:ed:6b:1b:6e:d7:8d:d5:fa:02:42:04:37:db:7c:cb:84:44: 72:ad:9f:20:8c:de:6e:14:0f:5f:69:de:20:4a:22:17:a9:f7: d7:89:26:54:45:7a:76:d3:1d:53:1e:59:25:2d:24:2c:27:ad: 13:0d:ce:92:e3:d0:90:a9:42:51:82:dc:a0:46:fa:8a:57:a4: 49:c0:8c:30:f3:0e:53:28:ed:78:ee:a9:77:60:2e:ac:3a:90: 48:08:aa:b1:76:84:61:46:33:f9:96:77:4a:fe:36:9b:cf:75: df:b2:01:11:9c:0f:3e:02:17:cf:36:66:4f:74:e3:a9:a8:d5: 08:6b:49:3f:2c:85:e0:5a:85:03:86:08:a8:a5:19:2f:11:30: eb:2f:f1:89:cc:52:cb:90:23:c8:cd:f9:47:fd:b5:b5:81:e8: c9:cf:c9:c0:79:9f:dd:01:d8:b2:97:b4:ed:41:cf:c0:11:eb: 27:49:97:d3:42:c1:74:0a:72:88:5e:1f:ff:ed:01:86:a9:53: 4b:f3:20:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldUx8FRlNue7H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTllYjc0ZTAtMDViOC00YjNmLTkzZjYtZWEzZDNhZjQxYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLUh+KwFEqZ/OBonn6bCkxTMTszGE/QM0sZS cKkyW8pRUG7vLEuaSa3n5vlWOcSwrht9rP0zhnAWfaxcOK8it2WmQaGD1Td/P7cb hbgwNaUxCXhf6YODI8sbZzsoQA5MrpM3SJhQUmPHdOhw/WoV95QwZVOGdrzgIuro HrdYmiV+lgEbeegNaI8EkvAHX5tVFHCkCM743zWPxoGjV+PcBWktdrd5lmgX0aTo 3Cq0GabIizdQcGOQLIiwtiAfjN6CkHgVX7fBL/oEtuf48kpoW0pXdlxsXNQlYkR8 vrdydz84b6KXljcqFZBotJwHuxSCHoskKB5qamK6Mgb9ebRFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhICYYVdU5hyEoeDtU4z4kIh4EoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvYmJkZTAxYmYtMDllOC0z NGVmLWFjNjUtMzM0NzU1OTdhYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNI/9SymwqpUkYyLHhoz6aX0jzaCOiapIHpVKsWa82rfDlbSup7G3wM SUxytpNSi7rXpFKRTP3taxtu143V+gJCBDfbfMuERHKtnyCM3m4UD19p3iBKIhep 99eJJlRFenbTHVMeWSUtJCwnrRMNzpLj0JCpQlGC3KBG+opXpEnAjDDzDlMo7Xju qXdgLqw6kEgIqrF2hGFGM/mWd0r+NpvPdd+yARGcDz4CF882Zk9046mo1QhrST8s heBahQOGCKilGS8RMOsv8YnMUsuQI8jN+Uf9tbWB6MnPycB5n90B2LKXtO1Bz8AR 6ydJl9NCwXQKcoheH//tAYapU0vzIJ4= -----END CERTIFICATE-----Generated at Thu Sep 3 16:57:59 2026 by rpki-client