$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/591029b0-df21-3210-91d4-3f70c85f01f4.roa File: 591029b0-df21-3210-91d4-3f70c85f01f4.roa (raw, json) Hash identifier: ewEVOVd5N5Ub5+5iRdLWtRpiaXxfNRTzXlCPrTNzwZE= Subject key identifier: 17:A2:3B:02:E0:79:9A:2F:AE:FB:43:B1:49:93:56:6C:53:9D:9B:02 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584F0C07834C6C4D88205C14E400 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/591029b0-df21-3210-91d4-3f70c85f01f4.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 3503 IP address blocks: 68.170.0.0/24 maxlen: 24 68.170.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:83:4c:6c:4d:88:20:5c:14:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=c2c0806b-4e52-42e8-a3c2-5b186a7d9c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:f8:51:f5:af:84:13:92:ac:52:04:2b:05: 1f:1b:1b:24:dc:5b:f1:2b:89:ca:a9:75:f3:66:df: 47:67:3e:94:85:17:80:a3:b5:26:51:cb:6a:5b:1e: 61:42:4c:e9:a3:56:2d:ae:9c:e2:85:f3:f8:e9:00: b7:ab:57:c8:8e:fc:45:53:37:fe:ba:40:f5:bc:3e: e1:47:b1:1a:ef:69:59:ad:61:7e:bf:d2:7e:0b:98: 52:50:35:50:7e:ce:1d:dc:2f:57:51:24:96:1c:94: c8:08:61:67:a5:43:c2:62:17:38:b5:6e:1c:25:63: f5:d9:e3:12:7c:36:54:85:6b:79:bb:2b:ff:81:cb: 67:65:73:df:a8:57:2b:6a:f9:fc:2f:b0:34:b3:33: 47:95:ab:df:41:3b:2d:09:aa:f9:aa:f9:d7:bc:7c: d4:cc:98:88:e3:17:a4:c8:72:ae:f4:12:19:c9:d5: b0:53:55:21:ca:6a:44:d8:69:01:95:ff:78:02:d6: cc:69:b6:8f:49:7b:a5:97:64:5f:06:8a:b9:2e:02: b9:47:9e:8e:36:2f:70:af:d7:52:c9:ac:64:69:52: b6:78:2e:05:f7:f0:ac:7f:f6:00:5b:fd:53:3b:3f: c2:a5:69:33:b1:26:7a:6e:31:39:70:c3:28:06:9a: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:3B:02:E0:79:9A:2F:AE:FB:43:B1:49:93:56:6C:53:9D:9B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/591029b0-df21-3210-91d4-3f70c85f01f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:71:0f:fe:d6:3a:b6:fb:8d:6f:dc:56:9c:c4:e4:b0:e3:a2: 17:ea:26:60:b6:aa:2f:72:50:2f:88:ad:7b:44:43:a8:1e:ee: e3:f0:b8:7e:1b:bf:e3:6d:4d:43:73:df:56:94:48:24:14:55: ca:75:fe:2f:76:d7:e4:0d:8d:b9:4a:48:8b:dd:61:02:15:fd: eb:d8:04:bc:78:08:4e:da:ff:70:53:d7:f3:81:52:0a:af:ec: 9d:e3:ab:5f:f6:8c:41:c1:79:4d:4b:80:71:9b:01:e0:1c:bc: 9f:a9:d0:36:76:04:4c:03:1f:ab:fc:49:0c:33:f8:e6:00:00: e9:9f:b7:45:df:4c:2f:4b:2e:1f:d6:34:27:a3:e5:eb:d7:79: fd:36:a2:11:bc:e4:9a:7a:ab:24:e7:c1:76:6d:ed:b1:df:04: e5:46:dd:ed:27:be:ae:e1:b5:b4:e9:c2:f5:8a:49:18:ca:07: 94:60:de:f5:2d:9f:d1:39:58:eb:46:f7:a2:20:f4:8c:33:81: fc:db:1b:f0:d3:68:29:40:e5:48:45:f5:05:55:ac:be:df:5c: c3:39:ed:a6:d4:90:cc:be:00:29:5f:03:99:a9:b8:15:eb:3a: 66:f5:0e:5a:97:09:ca:fe:c1:a3:27:b7:c9:c9:e5:3e:69:a8: dd:ce:aa:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4NMbE2IIFwU5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk YzJjMDgwNmItNGU1Mi00MmU4LWEzYzItNWIxODZhN2Q5YzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nz4UfWvhBOSrFIEKwUfGxsk3FvxK4nKqXXz Zt9HZz6UhReAo7UmUctqWx5hQkzpo1YtrpzihfP46QC3q1fIjvxFUzf+ukD1vD7h R7Ea72lZrWF+v9J+C5hSUDVQfs4d3C9XUSSWHJTICGFnpUPCYhc4tW4cJWP12eMS fDZUhWt5uyv/gctnZXPfqFcravn8L7A0szNHlavfQTstCar5qvnXvHzUzJiI4xek yHKu9BIZydWwU1UhympE2GkBlf94AtbMabaPSXull2RfBoq5LgK5R56ONi9wr9dS yaxkaVK2eC4F9/Csf/YAW/1TOz/CpWkzsSZ6bjE5cMMoBpq0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeiOwLgeZovrvtDsUmTVmxTnZsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvNTkxMDI5YjAtZGYyMS0z MjEwLTkxZDQtM2Y3MGM4NWYwMWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxxD/7WOrb7jW/cVpzE5LDjohfqJmC2qi9yUC+IrXtEQ6ge7uPwuH4b v+NtTUNz31aUSCQUVcp1/i921+QNjblKSIvdYQIV/evYBLx4CE7a/3BT1/OBUgqv 7J3jq1/2jEHBeU1LgHGbAeAcvJ+p0DZ2BEwDH6v8SQwz+OYAAOmft0XfTC9LLh/W NCej5evXef02ohG85Jp6qyTnwXZt7bHfBOVG3e0nvq7htbTpwvWKSRjKB5Rg3vUt n9E5WOtG96Ig9IwzgfzbG/DTaClA5UhF9QVVrL7fXMM57abUkMy+AClfA5mpuBXr Omb1DlqXCcr+waMnt8nJ5T5pqN3Oqhs= -----END CERTIFICATE-----Generated at Fri Sep 4 20:58:38 2026 by rpki-client