$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c757368-1a45-3cff-9fdd-0c2c582ff78e.roa File: 1c757368-1a45-3cff-9fdd-0c2c582ff78e.roa (raw, json) Hash identifier: PNnQiKooGJL2dWXeQSqA6dpZlP6QdrcFGym53M7oS7A= Subject key identifier: C8:01:E9:E2:63:DC:71:0F:67:7D:56:57:12:C0:93:7F:EF:DC:7A:81 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234F9D5C25E8876D962B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c757368-1a45-3cff-9fdd-0c2c582ff78e.roa Signing time: Wed 19 Aug 2026 18:03:58 +0000 ROA not before: Wed 19 Aug 2026 18:03:58 +0000 ROA not after: Fri 22 Mar 2030 04:00:00 +0000 asID: 8068 IP address blocks: 65.54.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4f:9d:5c:25:e8:87:6d:96:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:58 2026 GMT Not After : Mar 22 04:00:00 2030 GMT Subject: CN=702cfdb8-7da2-449d-8808-fea7282f8ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:65:05:a3:57:f0:aa:e3:8e:06:c4:8b:ad: 24:6e:1d:b2:a8:0d:2f:b1:f2:c6:87:cd:c1:d1:36: c2:62:a3:6c:d0:e2:5d:81:56:bb:15:52:a7:bb:b2: 0e:06:c0:c3:89:b3:3f:4f:73:44:6b:a2:88:db:9b: e1:fa:f4:ae:0d:24:64:4e:08:88:85:ed:dd:d1:1b: e4:32:49:3a:1f:a2:43:ae:a2:6c:32:9e:98:00:2b: b7:a3:e3:2c:92:12:3e:b4:0d:3e:29:11:31:df:aa: 36:f8:f2:3a:92:3d:bc:fd:49:26:68:5c:8c:3e:9f: e8:2a:67:69:f7:e6:4b:2a:13:a4:d3:4d:2c:be:32: 56:3a:18:fb:2e:a5:99:2d:48:46:e6:91:ad:58:9f: b7:68:39:8c:49:8a:8e:b9:b8:61:b8:a8:51:e9:ca: 02:c1:c2:02:33:25:23:5c:15:82:b5:4c:b4:e3:8c: f8:0e:4d:d6:c1:94:ac:14:41:9d:d4:b3:98:5a:c7: a6:6c:97:d8:b4:70:43:1e:bf:08:9a:72:ad:0f:4e: 3c:5f:c4:e8:2f:18:de:0d:48:03:e1:1f:e8:ea:8e: 05:74:57:7f:af:c2:4f:64:d5:5f:f6:d4:72:84:6b: 37:7d:fc:5f:87:19:f7:32:bd:c5:5d:63:ce:43:0f: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:E9:E2:63:DC:71:0F:67:7D:56:57:12:C0:93:7F:EF:DC:7A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1c757368-1a45-3cff-9fdd-0c2c582ff78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 65.54.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:38:7c:fd:49:03:56:58:03:ec:c0:a0:df:2b:6a:04:ff:ac: 36:09:4f:2e:bc:f2:48:90:d4:ca:f1:1d:29:2e:20:4e:2e:ef: 8b:6a:1e:63:3d:c7:ee:c6:30:2f:45:b5:bf:bf:e7:3c:be:47: e4:a1:2c:94:a2:7e:4e:84:52:fe:a0:de:9e:67:ca:f3:fd:e0: d6:77:b9:10:13:63:6c:41:c1:87:f7:5b:da:a1:07:dd:e3:c2: 9e:89:9f:dd:86:5e:48:56:fd:55:56:25:f7:72:1e:4e:5f:1c: ae:0c:ca:60:ba:e1:38:76:dd:7e:95:82:b3:7b:52:93:63:08: c5:1d:2e:f5:10:5d:45:e6:3a:f2:a0:2d:08:60:ba:70:3a:53: 3c:63:21:d1:41:68:0b:b6:9e:41:f7:de:26:47:ca:14:82:93: 80:73:3e:67:99:80:33:ec:22:71:dc:a1:ad:61:3f:bb:ce:ee: 77:10:31:ab:39:2f:db:e6:9f:d7:51:0d:95:39:83:a3:9b:51: d8:8b:87:a3:3f:71:65:c5:32:ce:1c:b6:57:81:79:e6:c3:7d: 21:81:7d:cb:38:79:d5:4a:15:c3:d7:16:66:90:d1:a5:78:ef: ac:10:8f:63:b5:20:33:97:c0:0a:5b:c8:47:8c:04:ad:0c:5f: 52:9d:ee:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI0+dXCXoh22WKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OFoXDTMwMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk NzAyY2ZkYjgtN2RhMi00NDlkLTg4MDgtZmVhNzI4MmY4ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjtlBaNX8KrjjgbEi60kbh2yqA0vsfLGh83B 0TbCYqNs0OJdgVa7FVKnu7IOBsDDibM/T3NEa6KI25vh+vSuDSRkTgiIhe3d0Rvk Mkk6H6JDrqJsMp6YACu3o+MskhI+tA0+KREx36o2+PI6kj28/UkmaFyMPp/oKmdp 9+ZLKhOk000svjJWOhj7LqWZLUhG5pGtWJ+3aDmMSYqOubhhuKhR6coCwcICMyUj XBWCtUy044z4Dk3WwZSsFEGd1LOYWsembJfYtHBDHr8ImnKtD048X8ToLxjeDUgD 4R/o6o4FdFd/r8JPZNVf9tRyhGs3ffxfhxn3Mr3FXWPOQw8MPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgB6eJj3HEPZ31WVxLAk3/v3HqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWM3NTczNjgtMWE0NS0z Y2ZmLTlmZGQtMGMyYzU4MmZmNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY4fP1JA1ZYA+zAoN8ragT/rDYJTy688kiQ1MrxHSkuIE4u74tqHmM9 x+7GMC9Ftb+/5zy+R+ShLJSifk6EUv6g3p5nyvP94NZ3uRATY2xBwYf3W9qhB93j wp6Jn92GXkhW/VVWJfdyHk5fHK4MymC64Th23X6VgrN7UpNjCMUdLvUQXUXmOvKg LQhgunA6UzxjIdFBaAu2nkH33iZHyhSCk4BzPmeZgDPsInHcoa1hP7vO7ncQMas5 L9vmn9dRDZU5g6ObUdiLh6M/cWXFMs4ctleBeebDfSGBfcs4edVKFcPXFmaQ0aV4 76wQj2O1IDOXwApbyEeMBK0MX1Kd7tI= -----END CERTIFICATE-----Generated at Sat Sep 5 05:24:12 2026 by rpki-client