$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa File: 5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa (raw, json) Hash identifier: Sz9DrzPCvCJqaCbtQZCtExckUuphGhIVtcjYO6dCn8M= Subject key identifier: 7B:A1:A0:A5:58:79:F3:81:01:76:5D:80:B1:8B:DE:A8:19:E4:23:78 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584EA7886205595AB4052D277180 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21782 IP address blocks: 68.66.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:62:05:59:5a:b4:05:2d:27:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=435a9b91-5742-4d9a-9468-35f4d0b5bee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:c4:8e:b7:21:67:68:ba:04:97:4c:74:39: 21:a8:e2:ed:6f:b5:d1:14:f9:07:d9:92:a0:2f:e4: da:7d:a5:7d:8b:4c:26:3c:41:ba:67:04:61:2b:d6: 16:94:03:f3:09:31:c4:63:1d:b3:15:71:86:99:5c: 24:06:34:73:f0:9c:c1:7f:63:9c:f7:ca:ab:f9:8d: ec:b9:8f:14:f1:3e:f5:ec:4d:bf:67:f5:89:a3:b8: 80:92:7d:ed:27:bb:c6:90:11:a4:2a:15:d4:26:1c: be:f8:2b:cd:da:d6:48:86:34:40:41:52:da:08:31: 64:4d:83:f0:bc:a9:a6:f4:e9:eb:53:1e:4b:af:0f: 61:c3:fd:ac:a4:5c:3d:99:72:c7:cb:64:98:e5:da: 6a:51:94:4d:45:ac:52:24:7a:3c:c9:73:98:b7:5f: bc:79:cb:9d:5c:7d:72:1f:36:c4:9f:dc:92:39:2d: 4d:38:da:18:11:8c:f0:7f:57:85:28:8b:8b:15:cf: 39:fb:e0:73:50:9a:6e:06:fe:8c:6b:01:93:87:95: 01:e1:e6:91:a3:59:cd:13:e5:fa:1f:87:c7:c1:27: c3:47:a0:78:dd:db:02:54:0e:e4:ad:16:7f:c5:dc: f8:db:e8:dc:cf:ec:4e:44:80:97:20:f6:51:9b:ce: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A1:A0:A5:58:79:F3:81:01:76:5D:80:B1:8B:DE:A8:19:E4:23:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/5651ab28-e4f9-3e7d-be4b-1d5a95bb0bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 68.66.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:73:fa:6d:e3:67:1b:5c:83:60:5a:06:1a:eb:d7:21:05:14: 30:bb:a1:fa:1a:a8:17:b5:01:e8:31:89:0d:60:88:7a:88:71: 1d:a9:88:c6:1c:de:55:65:34:08:0a:87:97:59:36:50:53:8b: ff:31:3c:3c:e6:e0:04:18:4c:d0:da:f3:f6:d3:b8:d7:91:e7: 73:50:46:fc:c5:16:ea:eb:9e:39:e2:55:bd:78:83:14:6f:6d: bf:02:d3:c1:87:b4:4d:66:ce:e5:12:8f:4f:3f:5e:97:a5:ea: a6:da:40:d8:14:ce:5b:28:25:03:c7:0b:18:bd:fa:64:9b:a7: 18:9f:5d:b2:f9:a5:65:a3:5e:05:b1:b7:ab:9e:ac:14:78:77: a7:c4:49:ac:30:ba:51:ae:e8:76:08:3e:05:09:2d:ee:18:4f: 1f:ee:5a:f5:49:4c:6c:66:d1:ba:19:b0:17:bd:87:48:e8:52: 85:b2:d6:51:21:f2:ae:0d:13:01:96:00:48:3b:e5:dd:c8:3a: e4:ef:65:df:56:11:01:34:bd:af:00:40:be:11:5f:d3:68:4a: 9c:9e:03:d3:7d:c1:e3:2b:d6:10:28:5b:b7:42:56:e2:f0:01: 82:21:26:c1:2a:43:8a:df:f3:1b:93:4c:8b:c6:99:f6:6c:78: 92:ea:74:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGIFWVq0BS0ncYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDM1YTliOTEtNTc0Mi00ZDlhLTk0NjgtMzVmNGQwYjViZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7EjrchZ2i6BJdMdDkhqOLtb7XRFPkH2ZKg L+TafaV9i0wmPEG6ZwRhK9YWlAPzCTHEYx2zFXGGmVwkBjRz8JzBf2Oc98qr+Y3s uY8U8T717E2/Z/WJo7iAkn3tJ7vGkBGkKhXUJhy++CvN2tZIhjRAQVLaCDFkTYPw vKmm9OnrUx5Lrw9hw/2spFw9mXLHy2SY5dpqUZRNRaxSJHo8yXOYt1+8ecudXH1y HzbEn9ySOS1NONoYEYzwf1eFKIuLFc85++BzUJpuBv6MawGTh5UB4eaRo1nNE+X6 H4fHwSfDR6B43dsCVA7krRZ/xdz42+jcz+xORICXIPZRm84V+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuhoKVYefOBAXZdgLGL3qgZ5CN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvNTY1MWFiMjgtZTRmOS0z ZTdkLWJlNGItMWQ1YTk1YmIwYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJz+m3jZxtcg2BaBhrr1yEFFDC7ofoaqBe1AegxiQ1giHqIcR2piMYc 3lVlNAgKh5dZNlBTi/8xPDzm4AQYTNDa8/bTuNeR53NQRvzFFurrnjniVb14gxRv bb8C08GHtE1mzuUSj08/Xpel6qbaQNgUzlsoJQPHCxi9+mSbpxifXbL5pWWjXgWx t6uerBR4d6fESawwulGu6HYIPgUJLe4YTx/uWvVJTGxm0boZsBe9h0joUoWy1lEh 8q4NEwGWAEg75d3IOuTvZd9WEQE0va8AQL4RX9NoSpyeA9N9weMr1hAoW7dCVuLw AYIhJsEqQ4rf8xuTTIvGmfZseJLqdHE= -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:30 2026 by rpki-client