$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa File: db87ee69-26f1-35e0-9f3c-ed70be87dece.roa (raw, json) Hash identifier: +xI8v9yZDrCZZEj8/q2NCq5RJxfNtiAA/+Z4h27hyIg= Subject key identifier: 80:CF:BB:E7:00:4A:E1:44:59:D6:DB:5A:75:E7:3D:B9:17:5B:65:0D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E7BACCB4F514EDA9F9500ED80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa Signing time: Mon 13 Jul 2026 08:01:06 +0000 ROA not before: Mon 13 Jul 2026 08:01:06 +0000 ROA not after: Sun 11 Oct 2026 08:01:06 +0000 asID: 5650 IP address blocks: 68.167.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7b:ac:cb:4f:51:4e:da:9f:95:00:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 13 08:01:06 2026 GMT Not After : Oct 11 08:01:06 2026 GMT Subject: CN=0b053951-830d-4bcd-8cbf-77dc13ca7e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:09:e4:06:5d:68:3d:3c:17:52:b9:42:47:a0: 09:f1:b4:b4:6b:f8:bf:62:0c:8e:64:ad:c7:0b:e4: bd:89:6f:8b:41:03:65:01:67:11:9b:7d:4b:23:6a: 7b:61:b5:c1:7d:63:12:7d:7d:99:02:86:f3:45:69: 4a:6d:2b:7f:7c:28:7c:7f:66:a4:0d:d1:56:f6:d0: 03:f8:d4:1e:55:e1:ff:d1:3b:f6:c5:74:2a:b3:3c: 87:0c:7d:db:49:17:b7:c1:37:26:8e:79:f5:8b:11: 89:f5:d0:a9:56:4f:88:99:22:c3:05:b0:73:94:96: 63:3a:56:cf:fe:6a:0e:04:ec:9d:75:44:12:0e:d7: 57:02:c1:d0:ae:6f:8b:26:8c:d0:79:07:5c:32:4b: 27:0c:ed:2f:97:48:12:92:de:98:c5:26:77:b1:c7: 61:d9:8c:cc:2e:b1:cd:57:8d:6c:69:b7:b8:88:14: ad:a5:c8:6d:41:0d:e2:53:bb:22:50:fe:0a:5e:fc: 3f:c2:f0:11:61:ce:b4:d0:ef:98:e2:8f:e4:09:f7: e4:34:a1:4b:a1:b9:09:d3:27:c7:c7:cd:f8:26:60: 5e:b3:84:b7:72:b1:15:ca:df:de:05:0c:a4:ee:90: 08:68:89:ff:ea:50:41:ed:0d:65:69:24:fe:68:79: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:BB:E7:00:4A:E1:44:59:D6:DB:5A:75:E7:3D:B9:17:5B:65:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db87ee69-26f1-35e0-9f3c-ed70be87dece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:61:ee:63:68:27:6c:28:b9:12:0d:fd:97:82:f7:0d:00:7d: 90:83:63:9a:10:83:6a:eb:49:1b:fb:9d:0e:10:84:0a:5f:fb: dd:98:2d:10:58:56:b3:30:1a:3c:dd:f1:54:60:02:56:a4:e1: 56:34:11:6b:6a:08:fa:65:aa:5e:ea:3d:62:9d:f7:ed:33:79: aa:e8:e1:4d:53:53:17:f4:e1:fa:f1:7d:5f:a7:c6:50:0f:8f: 68:d9:20:d1:aa:07:23:3a:21:83:d7:62:1f:f4:f2:03:6e:ff: 3a:fd:7c:d5:78:fa:01:cd:41:4d:71:76:ae:e8:0d:aa:ed:bd: b7:8e:02:3a:15:32:cf:87:3a:2d:4b:98:23:44:ae:af:14:f2: 3d:39:32:94:33:d9:44:51:09:fe:9f:b0:f5:df:98:9f:0e:96: e1:c0:7a:99:ed:67:50:14:03:fb:10:f7:63:16:de:9b:b5:11: cf:82:2d:06:76:90:cf:f6:77:9a:d8:2a:ff:37:c5:bc:d6:2c: 92:21:47:0a:b9:48:f9:ff:36:81:30:d9:ff:1e:c1:98:bc:3a: bf:17:c9:7d:bc:b9:37:a7:50:11:a3:ec:ee:b1:93:f9:81:63: b7:60:a4:64:43:57:fb:be:b7:5c:0e:3b:ae:fa:b8:cc:f5:d4: d3:4e:1b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57rMtPUU7an5UA7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcxMzA4MDEwNloXDTI2MTAxMTA4MDEwNlowLzEtMCsGA1UEAxMk MGIwNTM5NTEtODMwZC00YmNkLThjYmYtNzdkYzEzY2E3ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgnkBl1oPTwXUrlCR6AJ8bS0a/i/YgyOZK3H C+S9iW+LQQNlAWcRm31LI2p7YbXBfWMSfX2ZAobzRWlKbSt/fCh8f2akDdFW9tAD +NQeVeH/0Tv2xXQqszyHDH3bSRe3wTcmjnn1ixGJ9dCpVk+ImSLDBbBzlJZjOlbP /moOBOyddUQSDtdXAsHQrm+LJozQeQdcMksnDO0vl0gSkt6YxSZ3scdh2YzMLrHN V41sabe4iBStpchtQQ3iU7siUP4KXvw/wvARYc600O+Y4o/kCffkNKFLobkJ0yfH x834JmBes4S3crEVyt/eBQyk7pAIaIn/6lBB7Q1laST+aHkZHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDPu+cASuFEWdbbWnXnPbkXW2UNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI4N2VlNjktMjZmMS0z NWUwLTlmM2MtZWQ3MGJlODdkZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNh7mNoJ2wouRIN/ZeC9w0AfZCDY5oQg2rrSRv7nQ4QhApf+92YLRBY VrMwGjzd8VRgAlak4VY0EWtqCPplql7qPWKd9+0zearo4U1TUxf04frxfV+nxlAP j2jZINGqByM6IYPXYh/08gNu/zr9fNV4+gHNQU1xdq7oDartvbeOAjoVMs+HOi1L mCNErq8U8j05MpQz2URRCf6fsPXfmJ8OluHAepntZ1AUA/sQ92MW3pu1Ec+CLQZ2 kM/2d5rYKv83xbzWLJIhRwq5SPn/NoEw2f8ewZi8Or8XyX28uTenUBGj7O6xk/mB Y7dgpGRDV/u+t1wOO676uMz11NNOG2A= -----END CERTIFICATE-----Generated at Mon Jul 20 13:47:14 2026 by rpki-client