$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: XuMbSZ2og/gBnIfC/lTpTif+rBKvA7k3SMrQZnl9x0M= Subject key identifier: FF:A4:F7:07:74:30:00:8C:41:17:C0:DA:A8:8D:FA:14:17:28:96:75 Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584EA791B452005F09293591CF00 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:b4:52:00:5f:09:29:35:91:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=07eeba0d-be15-49f6-b315-bbbbe54d6079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:ed:f1:8a:b2:d0:b3:75:47:1c:34:1d:0c: 33:b8:61:50:de:65:08:91:6d:83:55:8e:c6:3e:c2: 49:1b:45:87:ed:04:74:78:b2:b5:d8:fb:af:3f:ae: 73:36:0e:29:0e:96:f3:71:9a:67:c6:11:f9:17:3e: 19:13:bc:22:e5:93:9f:5b:34:0e:68:1d:87:13:9b: 50:1e:d2:64:36:5e:bd:47:be:f5:5d:ea:04:10:14: 55:dd:95:bc:8e:35:c4:ab:48:d9:64:ad:d6:35:09: 01:24:d5:7b:11:43:cc:cd:79:a0:eb:66:dd:ff:79: 50:0e:e8:7e:81:f9:ee:b0:b0:95:15:67:b8:c9:ef: 82:8c:7e:f7:b5:61:83:04:fe:a4:f0:70:1b:e5:d5: c6:bf:b3:c4:1a:45:dd:a3:15:15:01:21:0d:55:01: ac:44:b7:df:d7:3a:2f:e8:4a:05:14:18:9f:34:8b: cf:b5:ab:69:40:8d:f4:aa:1c:86:b0:8d:17:ac:93: e4:a4:a2:5c:99:d0:3c:49:17:e1:43:9c:36:85:29: 3a:6f:af:e7:80:6c:dd:e5:4b:14:04:79:e1:90:d5: 31:bd:fa:9a:4a:d8:2b:15:36:19:f0:24:b6:88:78: ed:53:bf:0d:c3:ad:f9:f5:67:c1:a9:ba:c7:f1:63: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A4:F7:07:74:30:00:8C:41:17:C0:DA:A8:8D:FA:14:17:28:96:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6f:7b:6d:5d:44:86:13:a7:f0:d4:ae:d5:55:70:7f:32:71: f3:a0:3e:bc:f6:cb:d8:d5:9c:f0:f0:e8:9b:f7:8a:77:85:76: 3b:17:9c:07:91:63:22:ef:5e:8b:da:90:a8:22:8e:93:46:29: 76:0a:67:f9:84:78:e5:e3:46:60:01:fd:45:f7:ab:88:00:e9: 7c:8c:74:ad:c7:34:f0:00:9f:fd:9b:3c:21:fc:72:66:96:b4: 33:87:76:30:7d:68:03:1a:f9:f2:94:92:0a:10:af:24:07:90: 5f:3d:34:fc:b7:77:87:cf:94:5a:55:9c:10:03:13:ed:ed:e4: a3:ab:34:82:cb:53:d5:8f:d9:a1:32:a0:3c:14:e9:01:79:5e: 80:47:2b:9a:15:35:1d:5a:5b:48:72:86:c8:79:19:6b:8b:82: 35:e8:55:3b:fd:23:f5:1d:fc:c9:88:57:1c:b3:c5:9f:7f:88: dd:54:35:46:7e:6c:3d:11:d6:e6:d3:ee:a5:58:ed:5a:9f:34: 97:8d:b0:11:43:d4:11:b9:42:46:87:0f:eb:4f:58:0c:17:d4: cb:cb:9e:fc:86:94:96:c8:bd:28:47:8e:fe:b3:f6:c2:4c:e1: 45:c8:99:dc:fc:d8:da:4e:e5:86:9a:62:1d:4a:6c:21:45:ce: 21:b2:41:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbRSAF8JKTWRzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDdlZWJhMGQtYmUxNS00OWY2LWIzMTUtYmJiYmU1NGQ2MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Pt8Yqy0LN1Rxw0HQwzuGFQ3mUIkW2DVY7G PsJJG0WH7QR0eLK12PuvP65zNg4pDpbzcZpnxhH5Fz4ZE7wi5ZOfWzQOaB2HE5tQ HtJkNl69R771XeoEEBRV3ZW8jjXEq0jZZK3WNQkBJNV7EUPMzXmg62bd/3lQDuh+ gfnusLCVFWe4ye+CjH73tWGDBP6k8HAb5dXGv7PEGkXdoxUVASENVQGsRLff1zov 6EoFFBifNIvPtatpQI30qhyGsI0XrJPkpKJcmdA8SRfhQ5w2hSk6b6/ngGzd5UsU BHnhkNUxvfqaStgrFTYZ8CS2iHjtU78Nw6359WfBqbrH8WNk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+k9wd0MACMQRfA2qiN+hQXKJZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNve21dRIYTp/DUrtVVcH8ycfOgPrz2y9jVnPDw6Jv3ineFdjsXnAeR YyLvXovakKgijpNGKXYKZ/mEeOXjRmAB/UX3q4gA6XyMdK3HNPAAn/2bPCH8cmaW tDOHdjB9aAMa+fKUkgoQryQHkF89NPy3d4fPlFpVnBADE+3t5KOrNILLU9WP2aEy oDwU6QF5XoBHK5oVNR1aW0hyhsh5GWuLgjXoVTv9I/Ud/MmIVxyzxZ9/iN1UNUZ+ bD0R1ubT7qVY7VqfNJeNsBFD1BG5QkaHD+tPWAwX1MvLnvyGlJbIvShHjv6z9sJM 4UXImdz82NpO5YaaYh1KbCFFziGyQec= -----END CERTIFICATE-----Generated at Wed Aug 26 10:47:33 2026 by rpki-client