$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d7adc0c9-505f-3203-ad11-446978cd846b.roa File: d7adc0c9-505f-3203-ad11-446978cd846b.roa (raw, json) Hash identifier: u16ZfWrqcqS5iOj7JnwA2re7gGqjp2k+LkJfKglH1lo= Subject key identifier: CE:3D:F7:46:E3:75:BC:35:0E:8C:5B:9C:AF:CB:C0:F5:BB:36:F9:F5 Certificate issuer: /CN=e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4 Certificate serial: 010D0C9F4328584EECB2D7F6186B3666907F3CE0 Authority key identifier: A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d7adc0c9-505f-3203-ad11-446978cd846b.roa Signing time: Sat 22 Aug 2026 19:39:38 +0000 ROA not before: Sat 22 Aug 2026 19:39:38 +0000 ROA not after: Fri 20 Nov 2026 20:39:38 +0000 asID: 9304 IP address blocks: 68.68.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ec:b2:d7:f6:18:6b:36:66:90:7f:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4 Validity Not Before: Aug 22 19:39:38 2026 GMT Not After : Nov 20 20:39:38 2026 GMT Subject: CN=ec9e6733-9011-468d-ab06-4c1fdaa6c82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:9b:4f:24:f7:fb:20:de:74:f6:45:23:90: e1:93:c3:21:28:55:27:b4:5d:ca:25:f1:68:d7:a6: b6:75:ab:03:b1:43:72:1e:c1:02:1e:52:c6:b0:fb: 7e:ef:1b:52:57:ac:8a:37:c2:f1:a3:e3:e7:56:3f: c0:5b:3a:70:2b:4f:8f:3c:1f:8c:f8:e8:f3:47:b9: ca:d7:0d:9a:7e:aa:5f:52:83:9c:82:ba:14:de:79: ec:25:d5:ff:da:29:55:e6:75:9e:93:1c:8c:00:b2: a4:d0:53:ca:72:52:fb:6d:b3:f5:85:2e:3e:b5:2d: 2b:ba:a6:b5:6e:61:4d:f9:3b:24:8f:77:af:38:4c: 20:49:47:fe:64:60:1d:9e:12:2e:b8:06:b7:27:1d: 68:6d:c0:1b:cd:a6:c5:44:9f:37:74:c1:8f:86:7b: e9:9d:10:1e:9d:d9:be:a9:22:f2:09:33:db:c6:a2: fd:ad:6b:2a:d5:e7:be:a5:de:de:ca:53:bb:57:4e: 80:48:89:cf:ca:0b:49:d0:f8:ac:53:17:77:05:61: e0:eb:0a:b6:46:eb:b3:a9:c8:3c:a3:61:a8:56:99: aa:fa:b2:57:88:c5:e4:ad:e6:8a:1c:5e:1e:86:29: 88:bd:b0:3a:54:ee:3f:47:21:d3:4b:1b:3c:c7:9a: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:F7:46:E3:75:BC:35:0E:8C:5B:9C:AF:CB:C0:F5:BB:36:F9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d7adc0c9-505f-3203-ad11-446978cd846b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.crl X509v3 Authority Key Identifier: keyid:A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer sbgp-ipAddrBlock: critical IPv4: 68.68.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:61:63:4f:53:bf:90:8d:76:6b:82:09:b6:d2:20:6e:19:7d: f6:70:49:3e:59:b9:29:12:72:a6:26:54:22:4b:a4:91:8e:f6: 29:30:8b:82:ea:1f:23:a0:3e:16:57:72:2b:98:5c:0e:8c:eb: 01:a2:f1:b3:f8:91:03:c1:e1:3c:21:c3:7c:ad:61:f4:28:fc: f9:fb:1e:4e:8c:e9:36:00:73:ba:b7:cd:0c:ac:a0:4a:6c:2a: ff:62:65:86:c1:ca:12:2d:c3:8f:94:7c:d4:29:c3:80:2c:6a: a1:4f:c0:6d:17:51:1d:fa:ca:85:95:29:54:60:9e:42:7d:47: e8:4f:7e:9c:82:cb:b1:c8:97:9b:19:c8:2c:7b:03:db:d5:31: 12:6b:b8:45:9c:60:e8:94:d7:2a:0d:85:44:cc:94:f7:b8:31: 92:f9:f9:ed:69:4f:0d:33:b9:01:c1:10:55:c6:27:29:1a:eb: 16:16:7e:1a:5b:34:f1:32:cb:61:cb:ad:c6:2b:15:94:ad:ba: ff:b6:7d:62:c4:d0:ee:b5:cb:e7:2b:fb:50:cf:b6:53:e8:d2: cc:26:ed:5b:11:a0:53:c7:fd:29:fc:99:f0:f3:70:3f:65:46: 3d:1e:f9:be:26:2f:6a:72:9a:56:8a:f4:2f:18:0d:63:bf:5c: e0:cb:66:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7sstf2GGs2ZpB/POAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNhYTY4Y2EtZTc4MC00YjFhLTg4MTctZGRiOGFkM2Qw MWE0MB4XDTI2MDgyMjE5MzkzOFoXDTI2MTEyMDIwMzkzOFowLzEtMCsGA1UEAxMk ZWM5ZTY3MzMtOTAxMS00NjhkLWFiMDYtNGMxZmRhYTZjODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKCbTyT3+yDedPZFI5Dhk8MhKFUntF3KJfFo 16a2dasDsUNyHsECHlLGsPt+7xtSV6yKN8Lxo+PnVj/AWzpwK0+PPB+M+OjzR7nK 1w2afqpfUoOcgroU3nnsJdX/2ilV5nWekxyMALKk0FPKclL7bbP1hS4+tS0ruqa1 bmFN+Tskj3evOEwgSUf+ZGAdnhIuuAa3Jx1obcAbzabFRJ83dMGPhnvpnRAendm+ qSLyCTPbxqL9rWsq1ee+pd7eylO7V06ASInPygtJ0PisUxd3BWHg6wq2Ruuzqcg8 o2GoVpmq+rJXiMXkreaKHF4ehimIvbA6VO4/RyHTSxs8x5pCuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4990bjdbw1DoxbnK/LwPW7Nvn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lM2Fh NjhjYS1lNzgwLTRiMWEtODgxNy1kZGI4YWQzZDAxYTQvZDdhZGMwYzktNTA1Zi0z MjAzLWFkMTEtNDQ2OTc4Y2Q4NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTNhYTY4Y2EtZTc4MC00YjFhLTg4 MTctZGRiOGFkM2QwMWE0L2UzYWE2OGNhLWU3ODAtNGIxYS04ODE3LWRkYjhhZDNk MDFhNC5jcmwwHwYDVR0jBBgwFoAUo/TPv6c+CNdJyIOQyRuhQ2196wowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lM2FhNjhjYS1lNzgwLTRiMWEtODgxNy1kZGI4 YWQzZDAxYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNhY09Tv5CNdmuCCbbSIG4ZffZwST5ZuSkScqYmVCJLpJGO9ikwi4Lq HyOgPhZXciuYXA6M6wGi8bP4kQPB4Twhw3ytYfQo/Pn7Hk6M6TYAc7q3zQysoEps Kv9iZYbByhItw4+UfNQpw4AsaqFPwG0XUR36yoWVKVRgnkJ9R+hPfpyCy7HIl5sZ yCx7A9vVMRJruEWcYOiU1yoNhUTMlPe4MZL5+e1pTw0zuQHBEFXGJyka6xYWfhpb NPEyy2HLrcYrFZStuv+2fWLE0O61y+cr+1DPtlPo0swm7VsRoFPH/Sn8mfDzcD9l Rj0e+b4mL2pymlaK9C8YDWO/XODLZqc= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:11 2026 by rpki-client