$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa File: 8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa (raw, json) Hash identifier: Ys2zHPIDEPExTHK+1Md8/ZNiFtHXvs4GUIx1fA9wt7A= Subject key identifier: 54:22:B6:43:63:CA:75:18:00:DC:2A:BE:C9:EC:0C:67:2C:93:F1:1F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E455A00E0798E4B8F3A972EC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 834 IP address blocks: 68.167.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:5a:00:e0:79:8e:4b:8f:3a:97:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=4cb08667-0d66-469b-8bee-1f17a0d706e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:cc:0d:94:dc:b6:71:39:ee:d3:15:88:92: 7e:42:c3:ba:72:36:47:8c:ca:90:7d:6c:93:f4:7f: 3a:98:e4:a3:cb:31:c5:ff:09:8c:63:83:a5:0b:5f: 4f:64:9a:38:c3:98:02:b4:11:32:38:39:69:fc:49: 58:0c:80:40:b5:78:4d:5c:7f:87:eb:11:b9:55:62: c8:15:1a:80:3a:0f:e8:fd:80:c8:4e:49:b6:7b:05: 8f:86:6b:78:77:c2:29:35:29:e8:dc:d7:f2:70:b5: 3c:0a:be:84:b4:94:77:eb:8d:38:85:78:cb:b9:ed: a9:5e:c3:24:3a:14:01:d9:87:66:42:b5:21:17:44: 1f:d2:d6:f0:0a:5b:db:3c:44:05:9e:6f:9a:a5:49: a5:ab:32:db:64:5e:cc:07:48:7e:96:6e:e0:49:a8: 38:89:92:74:3f:8a:d5:a9:20:6d:fc:f0:8d:2a:01: 0c:9a:b9:50:65:ac:95:34:23:cc:06:90:80:e0:ee: 1d:12:b4:61:1a:09:4b:1e:1e:35:e3:c7:2c:24:55: 4f:e8:36:00:14:38:e0:4f:db:01:fc:e5:20:0d:70: c4:f4:44:16:84:e3:30:cb:cc:17:bd:1d:19:b0:c7: 5f:f5:36:d7:45:89:90:15:31:95:6a:66:1b:34:4e: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:22:B6:43:63:CA:75:18:00:DC:2A:BE:C9:EC:0C:67:2C:93:F1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:97:42:67:59:99:8b:fb:64:72:82:86:62:c8:81:f7:22:ce: 34:bd:c2:73:06:03:ae:76:50:66:44:03:b8:0a:83:5a:bb:50: 2a:ef:a5:b7:ae:5f:ec:51:41:0c:65:b1:f4:98:26:c2:53:cb: b4:85:70:f6:4c:bb:87:7b:94:69:e2:21:1f:c0:d1:26:cd:2b: 1c:48:ad:70:8e:e2:a3:a7:cf:46:54:3d:20:fb:85:ce:3b:11: 6d:1b:25:4d:18:2b:68:c8:15:77:21:c7:54:57:5c:67:ba:b9: 89:0c:ec:f4:20:4e:64:91:09:cb:d3:b1:24:56:ee:83:64:64: 14:65:7d:5e:1c:2f:2a:0b:09:ac:53:a8:97:24:c3:b5:1b:d9: 0d:d9:f9:dc:b3:36:93:00:39:c5:01:ab:fc:0b:5d:56:d6:45: e4:f5:7e:ae:32:6f:f1:02:ec:25:af:1d:0e:2d:2a:2d:52:fe: fc:80:4b:90:fc:00:8e:fb:2e:05:b3:68:56:61:37:04:3d:cd: a3:14:79:e0:41:a1:fa:ca:8a:fa:15:b6:0c:b3:cf:92:79:68: f0:3b:06:e4:28:ba:06:a3:36:be:c9:0c:0b:21:7d:25:3b:3b: b4:48:5b:ed:b0:44:89:45:29:14:18:60:ae:39:82:fc:5f:8d: ed:e3:b3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWgDgeY5LjzqXLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NGNiMDg2NjctMGQ2Ni00NjliLThiZWUtMWYxN2EwZDcwNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDfMDZTctnE57tMViJJ+QsO6cjZHjMqQfWyT 9H86mOSjyzHF/wmMY4OlC19PZJo4w5gCtBEyODlp/ElYDIBAtXhNXH+H6xG5VWLI FRqAOg/o/YDITkm2ewWPhmt4d8IpNSno3NfycLU8Cr6EtJR36404hXjLue2pXsMk OhQB2YdmQrUhF0Qf0tbwClvbPEQFnm+apUmlqzLbZF7MB0h+lm7gSag4iZJ0P4rV qSBt/PCNKgEMmrlQZayVNCPMBpCA4O4dErRhGglLHh4148csJFVP6DYAFDjgT9sB /OUgDXDE9EQWhOMwy8wXvR0ZsMdf9TbXRYmQFTGVamYbNE5eEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQitkNjynUYANwqvsnsDGcsk/EfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGYzODM0NWQtMWFhMC0z ZTQ3LTkxYmYtNzk1OTFjOWFlZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiXQmdZmYv7ZHKChmLIgfcizjS9wnMGA652UGZEA7gKg1q7UCrvpbeu X+xRQQxlsfSYJsJTy7SFcPZMu4d7lGniIR/A0SbNKxxIrXCO4qOnz0ZUPSD7hc47 EW0bJU0YK2jIFXchx1RXXGe6uYkM7PQgTmSRCcvTsSRW7oNkZBRlfV4cLyoLCaxT qJckw7Ub2Q3Z+dyzNpMAOcUBq/wLXVbWReT1fq4yb/EC7CWvHQ4tKi1S/vyAS5D8 AI77LgWzaFZhNwQ9zaMUeeBBofrKivoVtgyzz5J5aPA7BuQougajNr7JDAshfSU7 O7RIW+2wRIlFKRQYYK45gvxfje3js6g= -----END CERTIFICATE-----Generated at Fri Jul 10 13:52:39 2026 by rpki-client