$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa File: 902c0d77-3daa-321f-b60d-911f9428b935.roa (raw, json) Hash identifier: M3pJKrh8tzpc3uXY1wID1aVjoSxm2mpDeJrzx1WykUE= Subject key identifier: 9B:AF:5F:D6:4B:4A:8C:04:5B:CC:D1:B1:13:01:FD:AD:AD:6A:39:01 Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036 Certificate serial: 010D0C9F4328584EA7903A8EEF2B4C47F9C0F3F0 Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55001 IP address blocks: 68.68.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:3a:8e:ef:2b:4c:47:f9:c0:f3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d7c7eb81-3c26-4425-b509-63b9660e4223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:20:e1:4c:b0:27:df:80:8d:8a:fe:4b:b3: 69:98:86:0a:36:b3:1e:c8:ed:ba:d4:4f:0e:5f:75: 44:51:82:dd:d8:25:c8:e6:4a:a3:15:96:e0:15:cf: 38:64:6c:13:2e:72:24:1b:c7:81:3a:36:27:5b:50: 7c:ff:0e:ee:fc:66:68:0b:dd:23:df:97:e5:e9:39: 1b:76:8a:c9:9e:9e:ff:3b:2d:04:80:0b:c9:49:df: 69:07:be:00:47:cb:70:d8:4b:95:e4:60:f6:43:40: 2d:3b:1b:9f:8e:53:89:1e:8e:b8:03:4a:b7:ca:44: af:32:1c:e7:12:37:ca:8e:a1:58:7f:ab:45:3c:86: 9a:2b:d4:ad:04:5b:38:ac:3d:9f:a6:75:00:e9:2a: b7:7c:1a:0a:15:12:b6:89:e1:90:28:57:a2:71:0e: 65:2b:5b:7a:2e:3b:f6:29:8b:d7:29:2b:91:21:b4: 73:d4:fb:85:81:b4:14:da:bb:74:9e:7a:a6:91:fe: 70:04:01:9f:2e:14:0e:69:2c:39:95:3f:a9:cf:34: 5d:f0:c3:ce:37:e2:6f:de:9f:be:86:cb:f3:69:fb: 10:32:ae:4c:69:49:9e:7e:ae:03:fc:5f:e7:f7:c0: 78:fe:73:d2:5b:48:e8:b1:0c:1d:34:ac:e2:40:c2: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AF:5F:D6:4B:4A:8C:04:5B:CC:D1:B1:13:01:FD:AD:AD:6A:39:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/902c0d77-3daa-321f-b60d-911f9428b935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl X509v3 Authority Key Identifier: keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer sbgp-ipAddrBlock: critical IPv4: 68.68.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:28:d0:32:50:88:e8:99:fb:f9:37:55:c1:59:a6:87:0f:f0: b1:a3:f2:85:a3:de:8c:73:9a:36:90:e6:08:a9:fa:11:f0:df: cd:cc:0c:0d:68:d6:d3:5e:06:84:25:1b:ef:d0:ec:43:72:fd: 11:75:6b:90:25:d9:83:a2:a4:bc:c7:f7:fc:e8:b9:64:1c:60: 7d:c9:45:74:52:2f:b7:e3:a1:b1:07:eb:1b:d4:d6:49:a6:81: 03:93:e6:8f:d5:e7:d4:0f:83:12:1a:c5:4f:59:12:96:2a:d3: 0c:ba:01:73:f4:a6:22:53:1d:75:f2:63:6c:53:ec:62:10:e5: 38:7f:0c:64:98:fa:8e:dd:ca:bb:37:db:22:81:6d:20:6f:43: b3:70:3b:75:7c:48:42:2c:e8:67:3c:db:db:dd:6b:ed:85:ac: ce:aa:51:86:24:dc:aa:06:da:89:81:7f:61:bf:f5:38:5c:c2: da:95:6b:cc:11:33:80:19:b5:81:e5:44:65:46:8d:7b:0e:9c: cf:7b:da:1a:3c:c6:6b:a1:cc:85:70:f8:44:7a:e4:50:02:3b: b8:b8:3e:3d:0f:bd:4c:9d:36:ee:28:23:47:3e:63:21:e9:42: e4:c9:f0:1b:2a:79:56:45:09:7b:48:b1:93:10:bc:99:3e:77: cf:a3:99:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkDqO7ytMR/nA8/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw MDM2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDdjN2ViODEtM2MyNi00NDI1LWI1MDktNjNiOTY2MGU0MjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyygg4UywJ9+AjYr+S7NpmIYKNrMeyO261E8O X3VEUYLd2CXI5kqjFZbgFc84ZGwTLnIkG8eBOjYnW1B8/w7u/GZoC90j35fl6Tkb dorJnp7/Oy0EgAvJSd9pB74AR8tw2EuV5GD2Q0AtOxufjlOJHo64A0q3ykSvMhzn EjfKjqFYf6tFPIaaK9StBFs4rD2fpnUA6Sq3fBoKFRK2ieGQKFeicQ5lK1t6Ljv2 KYvXKSuRIbRz1PuFgbQU2rt0nnqmkf5wBAGfLhQOaSw5lT+pzzRd8MPON+Jv3p++ hsvzafsQMq5MaUmefq4D/F/n98B4/nPSW0josQwdNKziQMLkgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuvX9ZLSowEW8zRsRMB/a2tajkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvOTAyYzBkNzctM2RhYS0z MjFmLWI2MGQtOTExZjk0MjhiOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0 MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh ZTU3NDAwMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRETMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwo0DJQiOiZ+/k3VcFZpocP8LGj8oWj3oxzmjaQ5gip+hHw383MDA1o 1tNeBoQlG+/Q7ENy/RF1a5Al2YOipLzH9/zouWQcYH3JRXRSL7fjobEH6xvU1kmm gQOT5o/V59QPgxIaxU9ZEpYq0wy6AXP0piJTHXXyY2xT7GIQ5Th/DGSY+o7dyrs3 2yKBbSBvQ7NwO3V8SEIs6Gc829vda+2FrM6qUYYk3KoG2omBf2G/9ThcwtqVa8wR M4AZtYHlRGVGjXsOnM972ho8xmuhzIVw+ER65FACO7i4Pj0PvUydNu4oI0c+YyHp QuTJ8BsqeVZFCXtIsZMQvJk+d8+jmds= -----END CERTIFICATE-----Generated at Sat Aug 15 06:36:33 2026 by rpki-client