$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa File: b54fd014-e39f-3ef6-9507-17c43f40e70e.roa (raw, json) Hash identifier: 14PFzJpnX0nQqpy3Rf6lc3FGEv/qHm5fxWfN3isasfU= Subject key identifier: 53:68:48:8C:02:D3:D8:82:0E:4A:8C:1A:98:17:68:3C:BD:57:AD:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CE5453E1180E3B36A0310 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e5:45:3e:11:80:e3:b3:6a:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7baafe98-9216-4514-8566-b6b13ee3183a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:30:00:81:75:e6:0d:9e:17:9f:82:7e:1a: fc:46:1b:cd:c7:97:92:6b:67:1f:ce:0f:81:82:08: db:81:da:40:eb:a0:d7:b4:c5:8d:43:9b:f4:48:bd: c8:29:0f:0e:97:4f:4f:8d:a6:ca:ce:50:2a:79:9d: 8a:4a:46:c7:4a:37:d9:0e:b3:41:39:63:ad:7c:35: 5b:5c:0a:d2:d8:dc:de:e8:71:2e:35:ee:cb:22:a0: 9a:f1:cb:d2:be:91:3c:05:18:09:f7:dc:ea:4f:e3: e9:7b:61:8b:90:9d:87:3a:df:90:85:ac:fe:5b:6b: 3a:cc:01:c6:98:45:2e:49:16:51:ed:30:4d:26:6a: eb:f4:c8:9e:39:89:2e:65:6f:ce:6f:87:9e:1d:c8: 5a:60:24:ae:b8:66:f2:98:db:54:e8:00:ef:88:e8: 54:de:db:53:44:1d:b8:a5:08:48:1b:cd:4c:81:cc: b9:db:9b:25:de:f7:42:a9:02:9d:4e:76:f0:66:bb: bb:77:82:99:d9:80:6e:b0:54:06:f0:88:fd:e4:46: fe:60:6b:f1:ea:5b:74:2d:73:a4:fb:38:48:46:99: 67:40:a7:b1:a6:23:19:94:06:03:ca:79:c4:a7:cb: 5f:89:2e:28:b4:28:b2:f6:e3:97:58:ed:85:1a:bd: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:68:48:8C:02:D3:D8:82:0E:4A:8C:1A:98:17:68:3C:BD:57:AD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b54fd014-e39f-3ef6-9507-17c43f40e70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c7:70:72:96:96:24:c7:6a:7d:c7:8c:8b:b5:cf:48:e2:5a: 03:ec:63:70:d8:91:06:66:87:74:16:02:42:cc:78:43:4f:dc: af:c6:66:f4:df:34:96:aa:3d:6b:60:a7:ab:83:6a:e7:87:10: f0:a7:49:5e:8b:e3:e7:c3:8a:92:ed:9f:4e:81:b8:9e:13:6f: 85:65:b8:c6:aa:96:89:21:c2:95:22:a2:4c:b3:44:b3:a5:d3: 3e:6a:2b:08:e9:16:56:38:ad:a0:71:ba:7f:93:77:dd:e6:4b: da:36:ae:4d:95:47:d7:59:76:31:9d:43:2d:1b:e4:3e:2f:f8: ff:2b:7e:9f:6a:96:3b:4b:bc:5c:b3:1e:f5:e8:43:45:3a:0c: 4d:c4:0c:92:de:eb:39:b1:57:ec:0e:90:73:34:37:e5:d9:cc: 9d:42:8b:63:9e:a1:8f:9e:1f:7a:ad:bf:c4:03:f0:e7:b1:43: 0a:c3:72:5e:ae:6d:26:99:10:78:45:e9:e8:10:08:76:72:00: ff:e3:ce:7e:e4:04:72:d1:32:58:ac:32:97:51:18:f8:67:ba: a3:97:65:d0:ba:77:e9:7d:b9:c0:98:73:b8:a8:d7:3b:04:76: 94:9e:3a:8b:6b:07:2b:ca:c7:09:ad:e0:54:7e:5a:fe:58:b8: be:7c:8d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOVFPhGA47NqAxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JhYWZlOTgtOTIxNi00NTE0LTg1NjYtYjZiMTNlZTMxODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx8wAIF15g2eF5+Cfhr8RhvNx5eSa2cfzg+B ggjbgdpA66DXtMWNQ5v0SL3IKQ8Ol09PjabKzlAqeZ2KSkbHSjfZDrNBOWOtfDVb XArS2Nze6HEuNe7LIqCa8cvSvpE8BRgJ99zqT+Ppe2GLkJ2HOt+Qhaz+W2s6zAHG mEUuSRZR7TBNJmrr9MieOYkuZW/Ob4eeHchaYCSuuGbymNtU6ADviOhU3ttTRB24 pQhIG81Mgcy525sl3vdCqQKdTnbwZru7d4KZ2YBusFQG8Ij95Eb+YGvx6lt0LXOk +zhIRplnQKexpiMZlAYDynnEp8tfiS4otCiy9uOXWO2FGr1iVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNoSIwC09iCDkqMGpgXaDy9V60TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjU0ZmQwMTQtZTM5Zi0z ZWY2LTk1MDctMTdjNDNmNDBlNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLHcHKWliTHan3HjIu1z0jiWgPsY3DYkQZmh3QWAkLMeENP3K/GZvTf NJaqPWtgp6uDaueHEPCnSV6L4+fDipLtn06BuJ4Tb4VluMaqlokhwpUiokyzRLOl 0z5qKwjpFlY4raBxun+Td93mS9o2rk2VR9dZdjGdQy0b5D4v+P8rfp9qljtLvFyz HvXoQ0U6DE3EDJLe6zmxV+wOkHM0N+XZzJ1Ci2OeoY+eH3qtv8QD8OexQwrDcl6u bSaZEHhF6egQCHZyAP/jzn7kBHLRMlisMpdRGPhnuqOXZdC6d+l9ucCYc7io1zsE dpSeOotrByvKxwmt4FR+Wv5YuL58jXM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:30:39 2026 by rpki-client