$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa File: d38d2318-c196-35bd-940f-43a4eb1b63c8.roa (raw, json) Hash identifier: mBhkidzlhbYbK0cez0K9MNVmkv5UGDu9lgbnXfFmFw0= Subject key identifier: 4A:64:D6:CB:A5:D5:83:B5:66:41:64:A8:96:A3:FA:14:B5:64:6F:B1 Certificate issuer: /CN=a68ef886-c437-4b77-8d56-b917b6150d9a Certificate serial: 010D0C9F4328584E36018953083805C5317B1718 Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 91 IP address blocks: 204.76.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:89:53:08:38:05:c5:31:7b:17:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=d45259e7-8d48-4ba6-82d0-7e95dca4b2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:9c:ed:ce:c9:cd:d3:bc:46:79:86:59:4d: 25:be:d0:a1:ac:c6:3e:96:a0:56:d6:d7:16:8b:6d: 6a:a1:38:c5:ba:56:64:ec:84:ef:f6:d7:e2:12:fc: 5a:d9:f2:4d:3a:9f:2d:f9:e3:a7:68:81:85:b2:ce: 3a:b4:75:47:51:30:ba:66:bc:e9:3d:9f:41:dc:f6: 7e:8f:cb:54:d4:f2:21:3a:a9:f9:ce:76:1c:03:75: 56:38:14:a3:8d:bf:d4:af:e8:20:f6:ed:13:23:18: 55:a5:6a:24:59:89:81:7a:24:e0:10:36:bc:27:c9: 79:0b:c3:13:a5:85:f0:25:70:d1:0f:28:0d:24:aa: 8d:a6:5e:41:09:3d:41:97:e0:e8:ef:bd:e6:2a:29: 9d:78:c2:a8:8e:b0:46:e3:8b:d5:c9:81:03:69:ef: aa:59:b6:3e:c1:53:2b:0d:db:80:17:f4:b0:e9:a3: 1d:43:ad:c1:22:83:57:b4:d0:01:11:26:d1:b6:f7: 50:ef:83:f5:0a:35:a0:3f:ef:48:0b:f5:c9:2a:34: 47:5c:48:f1:3a:79:7a:e5:72:f5:09:c0:78:9b:f2: 9a:96:8c:0f:91:b4:2d:8d:4b:b9:d8:f7:1e:8c:26: 21:dc:31:5a:ba:a9:5d:7e:85:9d:04:00:bb:c6:48: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:D6:CB:A5:D5:83:B5:66:41:64:A8:96:A3:FA:14:B5:64:6F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/d38d2318-c196-35bd-940f-43a4eb1b63c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl X509v3 Authority Key Identifier: keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer sbgp-ipAddrBlock: critical IPv4: 204.76.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b2:e3:cb:f6:f9:0a:b4:b5:3d:7f:e8:2a:87:1f:d5:b4:5b: 86:40:71:b4:3d:b9:10:95:43:0e:5b:37:38:52:85:e4:3b:cf: cd:4e:fd:52:74:53:a0:4b:70:b8:9d:2b:b5:95:9b:51:2a:8d: 36:b8:99:4f:0e:b7:e5:4d:01:00:40:6b:d7:34:9d:26:a9:b6: 4a:3c:db:2f:6c:2e:8e:25:08:da:15:61:82:3a:d2:e3:75:04: 61:08:c1:9f:33:d4:6d:83:d7:9a:ea:7e:d5:c4:af:88:66:70: b9:70:79:65:7d:63:cf:4a:e1:23:6a:5a:58:71:c2:08:77:44: eb:03:65:50:54:05:10:d3:d3:e9:43:25:be:f8:80:3d:e5:eb: 64:56:32:13:0d:87:24:87:fe:e1:b2:df:44:46:62:73:9e:74: 25:78:bc:85:1d:ea:c6:fa:92:13:68:c0:17:9a:24:60:4f:76: 38:9a:41:a1:fd:51:59:82:f6:94:19:fc:7c:76:c9:17:4d:b7: 26:86:d4:3d:77:3c:6d:11:39:b1:37:e8:51:e5:de:2d:5c:23: d8:3c:d5:c1:0e:08:ff:29:f1:db:0e:21:f8:7f:38:a2:71:74: cb:b1:05:1e:92:0c:b8:2f:7a:70:33:74:8a:d3:6a:f1:ec:08: 85:86:8c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AYlTCDgFxTF7FxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw ZDlhMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZDQ1MjU5ZTctOGQ0OC00YmE2LTgyZDAtN2U5NWRjYTRiMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEuc7c7JzdO8RnmGWU0lvtChrMY+lqBW1tcW i21qoTjFulZk7ITv9tfiEvxa2fJNOp8t+eOnaIGFss46tHVHUTC6ZrzpPZ9B3PZ+ j8tU1PIhOqn5znYcA3VWOBSjjb/Ur+gg9u0TIxhVpWokWYmBeiTgEDa8J8l5C8MT pYXwJXDRDygNJKqNpl5BCT1Bl+Do773mKimdeMKojrBG44vVyYEDae+qWbY+wVMr DduAF/Sw6aMdQ63BIoNXtNABESbRtvdQ74P1CjWgP+9IC/XJKjRHXEjxOnl65XL1 CcB4m/KalowPkbQtjUu52PcejCYh3DFauqldfoWdBAC7xkitUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpk1sul1YO1ZkFkqJaj+hS1ZG+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvZDM4ZDIzMTgtYzE5Ni0z NWJkLTk0MGYtNDNhNGViMWI2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1 MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3 YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzEzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSy48v2+Qq0tT1/6CqHH9W0W4ZAcbQ9uRCVQw5bNzhSheQ7z81O/VJ0 U6BLcLidK7WVm1EqjTa4mU8Ot+VNAQBAa9c0nSaptko82y9sLo4lCNoVYYI60uN1 BGEIwZ8z1G2D15rqftXEr4hmcLlweWV9Y89K4SNqWlhxwgh3ROsDZVBUBRDT0+lD Jb74gD3l62RWMhMNhySH/uGy30RGYnOedCV4vIUd6sb6khNowBeaJGBPdjiaQaH9 UVmC9pQZ/Hx2yRdNtyaG1D13PG0RObE36FHl3i1cI9g81cEOCP8p8dsOIfh/OKJx dMuxBR6SDLgvenAzdIrTavHsCIWGjK8= -----END CERTIFICATE-----Generated at Wed Jun 24 03:52:39 2026 by rpki-client