$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ccab5e5-83c4-320e-ba30-6ba4c73c622a.roa File: 3ccab5e5-83c4-320e-ba30-6ba4c73c622a.roa (raw, json) Hash identifier: DM5x5aDwigT7Ml7ypkL5NteVzFKjMO2uGZ44eQb8n/A= Subject key identifier: 1B:2C:8C:AC:8A:19:43:51:46:46:A4:48:67:D8:DD:13:3D:06:C8:D5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E74BDB804C29FE45DFDA50440 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ccab5e5-83c4-320e-ba30-6ba4c73c622a.roa Signing time: Fri 10 Jul 2026 20:24:32 +0000 ROA not before: Fri 10 Jul 2026 20:24:32 +0000 ROA not after: Thu 08 Oct 2026 20:24:32 +0000 asID: 13347 IP address blocks: 68.164.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:bd:b8:04:c2:9f:e4:5d:fd:a5:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 10 20:24:32 2026 GMT Not After : Oct 8 20:24:32 2026 GMT Subject: CN=ce72b967-abb6-4ea7-ab89-12889da09e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:ef:b9:47:0e:b9:de:70:3d:9c:8a:81:d6: 90:75:41:92:fa:bf:d6:87:13:12:81:d8:59:13:e5: 17:ea:5f:18:fa:38:d0:63:a5:fd:0c:07:76:c9:f7: bd:c8:7d:2e:8b:ae:7b:72:63:95:90:36:d8:ce:70: 8e:ef:62:0f:91:ef:f0:b6:bc:bd:90:51:87:c6:21: aa:ea:d7:c1:50:68:ea:55:f3:5f:f4:08:0c:34:af: d4:53:42:63:80:a9:a1:bc:bb:d5:6f:f4:6a:12:cc: 9e:12:2c:41:03:d3:62:8b:74:0a:3f:37:13:5d:94: dd:67:70:64:d8:f8:24:5f:e9:65:f0:b8:56:6c:29: 42:c3:4a:1a:99:58:86:e3:98:9e:ad:58:3c:e1:46: 3d:41:4a:47:0e:76:cd:97:ab:fa:90:05:0f:18:7f: d9:d0:e7:d8:df:d6:53:cf:1a:72:3f:09:d8:e3:19: 76:54:07:67:a0:84:54:c6:de:d3:13:b4:7b:00:52: a8:6b:39:db:b2:03:2a:d9:f6:61:e4:4d:e2:74:dd: aa:21:ce:27:58:81:2b:93:1a:8e:f1:1d:5f:35:a0: 5c:72:87:fe:61:30:3e:1e:28:7f:e9:69:3c:b2:6e: 80:19:66:5e:f2:e8:5e:4b:d9:63:1e:03:93:09:ee: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:8C:AC:8A:19:43:51:46:46:A4:48:67:D8:DD:13:3D:06:C8:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ccab5e5-83c4-320e-ba30-6ba4c73c622a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2c:b5:e1:2e:14:bd:7d:08:2e:3a:4f:02:73:72:df:cd:ee: 5f:6f:7d:01:17:f8:de:b0:c5:e9:b7:3b:94:89:8c:d4:5a:dc: 42:62:cc:21:6e:1a:75:4e:b8:b3:e6:24:13:89:31:23:9a:57: 72:c5:3b:86:8a:8b:1d:f3:cb:ed:a2:19:6d:61:8e:a9:49:d1: c1:65:c3:db:92:28:d5:a1:15:46:25:0e:74:f8:ea:5b:a0:dd: a8:95:ad:eb:9d:33:51:f9:23:25:20:00:7f:f5:67:88:3f:43: 0f:ca:72:56:d5:76:c1:86:be:66:a5:2c:0f:9b:d6:7c:55:98: 4f:49:d2:8d:d0:79:6e:49:1c:93:6f:05:eb:93:df:dc:2b:4b: d3:3f:93:5d:b9:d1:77:eb:08:55:0d:da:22:eb:54:c1:da:6b: be:06:e6:6a:e6:d6:fe:ec:80:6f:d7:9e:09:de:7e:bf:67:4e: 06:eb:1d:bd:2e:53:4f:54:ba:d4:78:24:11:16:71:f5:b5:89: 36:c9:a2:32:1b:7d:aa:19:e8:82:32:32:97:77:49:cf:77:07: 8f:f8:1e:a4:cc:98:df:09:6b:5a:17:a0:cc:4d:55:01:de:54: 0e:2e:8d:91:79:20:52:08:be:6a:8e:a0:0c:24:8b:a4:ff:6a: 6f:88:a4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50vbgEwp/kXf2lBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxMDIwMjQzMloXDTI2MTAwODIwMjQzMlowLzEtMCsGA1UEAxMk Y2U3MmI5NjctYWJiNi00ZWE3LWFiODktMTI4ODlkYTA5ZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjjvuUcOud5wPZyKgdaQdUGS+r/WhxMSgdhZ E+UX6l8Y+jjQY6X9DAd2yfe9yH0ui657cmOVkDbYznCO72IPke/wtry9kFGHxiGq 6tfBUGjqVfNf9AgMNK/UU0JjgKmhvLvVb/RqEsyeEixBA9Nii3QKPzcTXZTdZ3Bk 2PgkX+ll8LhWbClCw0oamViG45ierVg84UY9QUpHDnbNl6v6kAUPGH/Z0OfY39ZT zxpyPwnY4xl2VAdnoIRUxt7TE7R7AFKoaznbsgMq2fZh5E3idN2qIc4nWIErkxqO 8R1fNaBccof+YTA+Hih/6Wk8sm6AGWZe8uheS9ljHgOTCe7SswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBssjKyKGUNRRkakSGfY3RM9BsjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvM2NjYWI1ZTUtODNjNC0z MjBlLWJhMzAtNmJhNGM3M2M2MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYsteEuFL19CC46TwJzct/N7l9vfQEX+N6wxem3O5SJjNRa3EJizCFu GnVOuLPmJBOJMSOaV3LFO4aKix3zy+2iGW1hjqlJ0cFlw9uSKNWhFUYlDnT46lug 3aiVreudM1H5IyUgAH/1Z4g/Qw/KclbVdsGGvmalLA+b1nxVmE9J0o3QeW5JHJNv BeuT39wrS9M/k1250XfrCFUN2iLrVMHaa74G5mrm1v7sgG/Xngnefr9nTgbrHb0u U09UutR4JBEWcfW1iTbJojIbfaoZ6IIyMpd3Sc93B4/4HqTMmN8Ja1oXoMxNVQHe VA4ujZF5IFIIvmqOoAwki6T/am+IpLk= -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:01 2026 by rpki-client