$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/ad28293e-922f-3479-992b-e08ea7eb355e.roa File: ad28293e-922f-3479-992b-e08ea7eb355e.roa (raw, json) Hash identifier: V7eMJDDi1x0y78/pZr7wClA3dBKK/Odyq+IuJuUMw0I= Subject key identifier: 19:E6:5A:8C:52:5C:3E:C2:B9:5C:46:5A:68:A9:54:E9:30:C1:9D:71 Certificate issuer: /CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Certificate serial: 010D0C9F4328584F6F6243B7B7689420C2598FC0 Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/ad28293e-922f-3479-992b-e08ea7eb355e.roa Signing time: Thu 08 Oct 2026 15:08:10 +0000 ROA not before: Thu 08 Oct 2026 15:08:10 +0000 ROA not after: Wed 06 Jan 2027 16:08:10 +0000 asID: 0 IP address blocks: 68.170.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:62:43:b7:b7:68:94:20:c2:59:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449 Validity Not Before: Oct 8 15:08:10 2026 GMT Not After : Jan 6 16:08:10 2027 GMT Subject: CN=d278c5f3-b681-4a7e-8658-659702de4277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:3f:82:d2:9e:da:4f:22:a8:9d:ae:ae:8f: cb:23:c2:b7:a5:87:01:e3:c1:c9:7b:40:ae:14:a2: 2c:bb:b2:45:81:99:37:a9:7f:f9:9b:52:d4:4a:92: 0d:70:e6:34:f6:23:a6:39:94:6d:75:5b:91:57:c5: 9a:56:f4:0e:d3:75:8e:43:2a:35:04:c3:24:7f:0d: 91:49:97:88:9f:51:fd:cb:16:5d:bd:9f:4c:1b:0d: d2:57:9f:04:b8:d7:60:91:1a:bd:b9:38:3a:b8:0b: 06:e6:8b:9a:22:d5:59:f4:04:f5:c9:89:ef:d6:80: 1a:b5:f3:51:ac:5a:40:49:56:e5:34:54:c2:cd:62: 14:09:9f:d8:f8:de:42:c3:16:22:77:fe:fb:b9:9d: e0:6b:f3:20:1d:77:98:a9:ef:8f:83:66:40:df:9d: 4e:98:6f:70:08:c7:74:8d:9d:da:8a:47:ed:55:4b: f2:db:e2:f4:36:22:19:7c:51:fa:49:29:9f:9b:f8: 46:8f:30:15:61:7a:df:cc:90:21:c2:62:d7:45:a5: d5:8a:84:aa:69:a1:51:23:41:55:bd:4a:b3:3b:57: 73:ed:ad:9e:12:38:fc:29:c7:50:f8:3e:15:f0:9f: 85:ff:d1:1c:af:c5:8c:9f:87:ac:3c:66:7f:74:36: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:5A:8C:52:5C:3E:C2:B9:5C:46:5A:68:A9:54:E9:30:C1:9D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/ad28293e-922f-3479-992b-e08ea7eb355e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl X509v3 Authority Key Identifier: keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer sbgp-ipAddrBlock: critical IPv4: 68.170.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cd:74:f1:25:19:f3:84:4d:75:b7:fc:16:8d:48:61:d2:5d: 8c:73:6c:00:46:f8:d7:a5:94:5c:d5:70:b2:6b:3c:bc:ba:33: 5b:26:3e:1b:e5:b5:fc:54:11:03:e0:53:6f:f7:0c:47:87:08: 91:fd:45:3f:58:95:50:d1:79:b6:2e:7e:f5:4a:3c:ba:71:57: 35:36:3a:a2:26:3e:9b:ae:70:78:9e:4a:bd:56:f4:8f:e7:57: 1e:54:36:29:ef:4c:cc:7c:f3:a2:aa:e5:c4:70:2c:9d:aa:2c: 7e:12:1e:64:a3:3f:f1:20:69:83:87:65:f9:de:df:b6:2c:b7: bb:ec:7d:e0:ac:b8:99:43:2a:e0:13:86:a8:b6:71:ae:21:a5: 40:2b:c0:ff:c3:a6:e0:b3:66:8c:3b:53:b2:ef:b8:46:f3:db: 7a:d2:0b:22:f2:ba:1a:62:73:11:43:ae:a1:3f:07:ec:46:14: 46:4b:f2:5f:e6:8b:a3:00:61:79:a8:ed:3e:da:85:d6:fc:c7: 1b:03:e7:72:9e:1a:06:c7:87:17:90:c5:21:31:6d:cb:dd:f5: bd:8a:09:0f:37:9d:18:be:db:00:8f:33:29:5d:3f:b8:82:49: 05:32:7a:4d:76:90:2d:f5:48:72:ba:ac:e5:0f:46:d1:10:47: 1b:b9:5d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vYkO3t2iUIMJZj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc1NTRlOWYtYTNiMC00NzRmLWI3MjgtNGY5NTlhYTM1 NDQ5MB4XDTI2MTAwODE1MDgxMFoXDTI3MDEwNjE2MDgxMFowLzEtMCsGA1UEAxMk ZDI3OGM1ZjMtYjY4MS00YTdlLTg2NTgtNjU5NzAyZGU0Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLg/gtKe2k8iqJ2uro/LI8K3pYcB48HJe0Cu FKIsu7JFgZk3qX/5m1LUSpINcOY09iOmOZRtdVuRV8WaVvQO03WOQyo1BMMkfw2R SZeIn1H9yxZdvZ9MGw3SV58EuNdgkRq9uTg6uAsG5ouaItVZ9AT1yYnv1oAatfNR rFpASVblNFTCzWIUCZ/Y+N5CwxYid/77uZ3ga/MgHXeYqe+Pg2ZA351OmG9wCMd0 jZ3aikftVUvy2+L0NiIZfFH6SSmfm/hGjzAVYXrfzJAhwmLXRaXVioSqaaFRI0FV vUqzO1dz7a2eEjj8KcdQ+D4V8J+F/9Ecr8WMn4esPGZ/dDbSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnmWoxSXD7CuVxGWmipVOkwwZ1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1 NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1OWFhMzU0NDkvYWQyODI5M2UtOTIyZi0z NDc5LTk5MmItZTA4ZWE3ZWIzNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzc1NTRlOWYtYTNiMC00NzRmLWI3 MjgtNGY5NTlhYTM1NDQ5L2M3NTU0ZTlmLWEzYjAtNDc0Zi1iNzI4LTRmOTU5YWEz NTQ0OS5jcmwwHwYDVR0jBBgwFoAUli7MQkEJ9CB4PLADz1sQrKOP3gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNzU1NGU5Zi1hM2IwLTQ3NGYtYjcyOC00Zjk1 OWFhMzU0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzNdPElGfOETXW3/BaNSGHSXYxzbABG+NellFzVcLJrPLy6M1smPhvl tfxUEQPgU2/3DEeHCJH9RT9YlVDRebYufvVKPLpxVzU2OqImPpuucHieSr1W9I/n Vx5UNinvTMx886Kq5cRwLJ2qLH4SHmSjP/EgaYOHZfne37Yst7vsfeCsuJlDKuAT hqi2ca4hpUArwP/DpuCzZow7U7LvuEbz23rSCyLyuhpicxFDrqE/B+xGFEZL8l/m i6MAYXmo7T7ahdb8xxsD53KeGgbHhxeQxSExbcvd9b2KCQ83nRi+2wCPMyldP7iC SQUyek12kC31SHK6rOUPRtEQRxu5XYA= -----END CERTIFICATE-----Generated at Thu Oct 22 18:36:03 2026 by rpki-client