$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa File: bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa (raw, json) Hash identifier: M6eE9c2mobCZDClytA0b0hOrTlWEY+fjZR7EtYBAv+U= Subject key identifier: 2E:8D:20:E9:10:5E:E6:3E:CD:7F:32:E6:7E:11:3F:F6:4A:D0:E5:D7 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584EC4D70E90E5BD833908A17A80 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 91 IP address blocks: 204.76.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:0e:90:e5:bd:83:39:08:a1:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=f67aa786-95d1-4be8-86e5-ff883904087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:6f:b2:05:82:89:a4:64:0a:e4:37:e3:89: 00:31:66:46:cd:f6:e7:3b:30:ba:fa:12:8d:7a:d5: 15:de:4e:cb:82:4c:fc:72:c5:44:1e:a4:a0:24:43: ff:74:0c:1e:e8:4b:68:32:83:d0:d8:ca:f0:a8:f8: 16:f7:5d:12:8f:ae:72:83:b8:20:e5:bf:08:6f:e1: da:70:04:e8:c2:ec:68:01:c5:4a:9e:2e:d3:51:fa: 10:de:98:f6:28:d7:b6:44:8e:64:6a:87:a0:92:ad: 58:f9:a8:98:43:c2:42:55:f0:63:be:aa:8a:ae:6b: e9:d4:a1:58:93:95:89:ec:94:d8:ea:d7:2a:2d:0c: d6:41:3e:75:db:4b:69:51:58:d3:b6:6c:25:21:75: 6d:e0:55:bc:1c:62:ca:b1:36:25:3a:21:19:65:99: 0b:79:22:4d:49:ac:65:ae:49:3b:91:04:f3:22:1c: 75:07:d7:b6:e4:5b:3a:d5:b6:f4:48:5a:4b:ee:de: fb:32:bd:c1:e3:40:a9:54:4d:a9:ba:57:9a:c0:2e: 04:61:5e:33:f2:d3:9a:6a:63:97:1d:19:7d:ae:8e: 1b:f8:c7:47:71:d7:19:6e:79:90:a8:62:4d:d7:aa: 48:83:4c:88:3f:f4:cf:b9:93:4b:91:58:61:38:8d: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:20:E9:10:5E:E6:3E:CD:7F:32:E6:7E:11:3F:F6:4A:D0:E5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/bef47c6f-3199-3fa5-82df-ce3a53cc4794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:48:df:82:bf:80:91:b4:fa:ec:f0:d7:ac:58:2b:d1:b9:ef: 79:79:9f:6b:87:fe:41:5d:33:06:62:db:b3:b0:76:58:32:a7: e4:30:de:f6:cf:17:18:f4:9c:8e:cd:39:fe:5b:21:7a:97:e5: 8f:5a:16:89:dd:a1:00:d4:be:39:6e:d0:fa:00:7f:79:c3:9b: 59:b2:dd:03:3e:bf:8c:14:a6:5c:99:16:a8:9c:ae:15:60:13: d5:07:2f:dd:4b:a3:d0:60:a2:c8:09:93:60:b4:4b:8e:bc:c0: 0e:5f:12:6c:0c:9a:27:9d:24:d9:54:5c:ec:64:d3:54:83:7c: 14:04:dc:e7:13:f0:bc:de:f8:76:f1:b8:29:8a:a7:02:0b:bc: 30:24:f6:50:4f:aa:78:c4:d2:ad:1e:36:50:a6:e6:97:fa:d0: 80:17:e4:65:cd:04:d6:d9:da:87:70:c3:06:ae:90:14:44:78: db:1c:d2:6b:a6:78:6e:2f:34:c4:a1:a2:55:03:9c:a1:dc:8b: a4:9f:c9:2d:49:3e:13:eb:04:ed:2f:cd:96:4d:f9:c3:64:89: a7:c1:77:b0:eb:65:5e:8c:c2:31:c8:78:df:57:5f:ad:e1:61: 0d:9a:ad:37:f7:1a:4a:9a:bd:e3:f7:d3:63:b5:ba:4f:b8:28: 10:fd:93:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1w6Q5b2DOQiheoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk ZjY3YWE3ODYtOTVkMS00YmU4LTg2ZTUtZmY4ODM5MDQwODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFtvsgWCiaRkCuQ344kAMWZGzfbnOzC6+hKN etUV3k7Lgkz8csVEHqSgJEP/dAwe6EtoMoPQ2MrwqPgW910Sj65yg7gg5b8Ib+Ha cATowuxoAcVKni7TUfoQ3pj2KNe2RI5kaoegkq1Y+aiYQ8JCVfBjvqqKrmvp1KFY k5WJ7JTY6tcqLQzWQT5120tpUVjTtmwlIXVt4FW8HGLKsTYlOiEZZZkLeSJNSaxl rkk7kQTzIhx1B9e25Fs61bb0SFpL7t77Mr3B40CpVE2puleawC4EYV4z8tOaamOX HRl9ro4b+MdHcdcZbnmQqGJN16pIg0yIP/TPuZNLkVhhOI2DlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6NIOkQXuY+zX8y5n4RP/ZK0OXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvYmVmNDdjNmYtMzE5OS0z ZmE1LTgyZGYtY2UzYTUzY2M0Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVI34K/gJG0+uzw16xYK9G573l5n2uH/kFdMwZi27Owdlgyp+Qw3vbP Fxj0nI7NOf5bIXqX5Y9aFondoQDUvjlu0PoAf3nDm1my3QM+v4wUplyZFqicrhVg E9UHL91Lo9BgosgJk2C0S468wA5fEmwMmiedJNlUXOxk01SDfBQE3OcT8Lze+Hbx uCmKpwILvDAk9lBPqnjE0q0eNlCm5pf60IAX5GXNBNbZ2odwwwaukBREeNsc0mum eG4vNMSholUDnKHci6SfyS1JPhPrBO0vzZZN+cNkiafBd7DrZV6MwjHIeN9XX63h YQ2arTf3GkqaveP302O1uk+4KBD9k6I= -----END CERTIFICATE-----Generated at Thu Aug 20 00:06:54 2026 by rpki-client