$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa File: 05af0cf4-89dd-3349-894b-00eb6af7b866.roa (raw, json) Hash identifier: 8mQdD+INDNhOsKa+lSmNkuqWg5GAT0mkGvFZLMMAhC0= Subject key identifier: 86:E6:F1:AA:57:AE:98:9E:27:A8:98:11:1A:7A:DC:D1:FF:A4:24:6E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF44CC89B12E9E74C95EC4B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 68.167.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:c8:9b:12:e9:e7:4c:95:ec:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=aa66b609-ce8a-4c10-99bd-764116e168c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:83:58:4e:e6:93:00:b4:f4:92:72:71:d0: 6e:44:56:07:43:c5:65:5a:8a:5e:26:e2:3f:53:3d: 29:5f:9f:b7:b4:ed:82:c2:63:e9:50:4a:5f:6c:31: 79:2a:fd:fb:38:35:2c:87:3c:05:8f:4b:84:41:35: d9:33:22:2d:62:59:0c:e3:5a:54:ea:3d:40:dd:48: f4:3f:9b:f4:23:74:0d:b3:1b:a8:3c:6a:cc:c5:e6: f0:03:00:27:56:62:ee:93:b3:36:9b:83:d6:4a:01: 98:31:56:0f:cd:5e:55:c4:f3:df:7e:ff:3a:4b:49: 60:bb:75:91:92:65:7b:16:72:98:93:ce:17:c1:1f: af:3c:ee:da:4c:81:19:65:e4:17:01:29:80:0c:93: 7d:ae:b0:de:c8:6c:cd:fa:4a:88:36:b4:cc:d9:d5: 16:9f:37:67:e9:9a:1b:cd:15:17:2b:eb:ff:87:ca: 5d:46:9c:eb:0d:38:99:7b:72:c8:29:3e:97:9d:77: 42:3c:e4:ef:bd:5a:5e:db:18:01:66:3b:8e:be:62: 2f:65:32:72:62:08:2a:6c:ce:31:8c:89:b2:92:63: 59:fa:a9:e1:63:f7:01:12:5f:09:d0:de:88:9a:1a: 85:47:5e:4d:7c:34:33:b3:6f:3e:a8:5d:3f:72:19: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E6:F1:AA:57:AE:98:9E:27:A8:98:11:1A:7A:DC:D1:FF:A4:24:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/05af0cf4-89dd-3349-894b-00eb6af7b866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:66:45:44:61:2a:b4:e7:bb:7c:bf:1a:20:44:95:33:ed:b3: 63:49:5d:0a:21:f8:df:80:72:06:f9:96:6d:b1:1c:14:8b:85: d4:31:e3:14:4f:f9:63:e3:4e:08:ee:90:3d:6a:51:4c:14:7f: 89:95:f1:20:77:83:74:ee:d6:b1:b7:a7:d3:91:96:ec:50:03: 10:d4:83:29:5b:41:3b:ee:c4:ab:77:a6:8d:e9:2e:05:07:92: ee:7c:57:29:71:db:0b:2a:a7:da:15:20:10:83:71:94:36:42: 2b:b7:4e:68:b3:c4:50:2c:3b:99:f7:54:4b:91:7e:11:5d:72: 00:be:fc:c3:3b:bf:e6:c6:96:e5:68:78:35:65:45:b9:50:de: 01:f4:ba:95:fd:79:b7:b9:1b:ef:2c:72:78:d0:c4:34:95:12: f0:e6:1e:53:05:ca:3c:4e:a7:89:28:9d:12:62:2b:11:12:57: 30:61:7f:70:00:b3:7a:c1:5a:63:c7:c7:3f:fd:31:16:fc:e9: 17:3d:d2:44:ff:c3:f1:64:31:60:04:fc:23:78:e9:ef:1a:37: ca:f2:da:f7:a2:ec:ea:10:71:99:f1:0e:03:a0:98:b1:a3:d2: 0d:ac:a2:4d:6e:c2:f6:3f:93:d0:ad:94:97:75:f5:b2:ec:65: 9f:d2:e0:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMibEunnTJXsS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWE2NmI2MDktY2U4YS00YzEwLTk5YmQtNzY0MTE2ZTE2OGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdGDWE7mkwC09JJycdBuRFYHQ8VlWopeJuI/ Uz0pX5+3tO2CwmPpUEpfbDF5Kv37ODUshzwFj0uEQTXZMyItYlkM41pU6j1A3Uj0 P5v0I3QNsxuoPGrMxebwAwAnVmLuk7M2m4PWSgGYMVYPzV5VxPPffv86S0lgu3WR kmV7FnKYk84XwR+vPO7aTIEZZeQXASmADJN9rrDeyGzN+kqINrTM2dUWnzdn6Zob zRUXK+v/h8pdRpzrDTiZe3LIKT6XnXdCPOTvvVpe2xgBZjuOvmIvZTJyYggqbM4x jImykmNZ+qnhY/cBEl8J0N6ImhqFR15NfDQzs28+qF0/chmhBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbm8apXrpieJ6iYERp63NH/pCRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDVhZjBjZjQtODlkZC0z MzQ5LTg5NGItMDBlYjZhZjdiODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhmRURhKrTnu3y/GiBElTPts2NJXQoh+N+Acgb5lm2xHBSLhdQx4xRP +WPjTgjukD1qUUwUf4mV8SB3g3Tu1rG3p9ORluxQAxDUgylbQTvuxKt3po3pLgUH ku58Vylx2wsqp9oVIBCDcZQ2Qiu3TmizxFAsO5n3VEuRfhFdcgC+/MM7v+bGluVo eDVlRblQ3gH0upX9ebe5G+8scnjQxDSVEvDmHlMFyjxOp4konRJiKxESVzBhf3AA s3rBWmPHxz/9MRb86Rc90kT/w/FkMWAE/CN46e8aN8ry2vei7OoQcZnxDgOgmLGj 0g2sok1uwvY/k9CtlJd19bLsZZ/S4FQ= -----END CERTIFICATE-----Generated at Wed Aug 26 22:37:46 2026 by rpki-client