$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa File: 1f929c95-ae43-3e26-b5e3-8775bab3b742.roa (raw, json) Hash identifier: C8EeIFYvNN2b4WZOH3itOZaYK1gw9/K/+ctgYhXsOHo= Subject key identifier: EB:45:3D:C2:A6:16:FD:A0:08:0B:44:F9:C7:0E:43:D7:E0:B8:EA:6C Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42359E0E8540C1790F4AAC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Wed 20 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.107.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:59:e0:e8:54:0c:17:90:f4:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Mar 20 04:00:00 2030 GMT Subject: CN=d4bd36c1-d3e4-4558-9877-d83c718e386d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:d6:2a:68:a1:63:00:e3:64:8b:24:c1:41: 39:e3:d2:c3:31:35:86:00:f0:ff:5d:93:14:df:12: 8b:22:fd:da:9b:82:c1:dd:1b:ec:2d:13:bb:72:b9: b8:07:cc:fa:b9:6c:ac:3c:d9:a8:ff:e0:19:ef:97: f5:c7:c0:4f:4e:ed:02:0b:3b:ae:6f:93:37:1e:b4: 95:1e:0c:cb:2c:95:b7:af:bb:0d:4c:25:55:07:9e: 17:d2:c0:2e:fb:42:01:de:ea:1e:be:30:ca:85:b7: 3e:fa:aa:5e:3b:74:50:7d:af:80:d7:e7:fb:a7:19: 0c:54:60:5a:3f:e4:ed:3f:a6:a6:63:bc:a4:ff:9b: e5:a6:8d:22:8d:34:b8:8e:0e:52:64:76:1b:0b:21: f3:62:92:11:4b:41:06:75:4a:52:ce:7e:57:cb:82: 7c:73:40:19:ab:e0:5d:f1:3b:ee:1c:88:ab:84:1d: 8b:43:38:a8:77:b5:30:4a:7d:a6:7a:27:51:c2:bd: 58:cf:65:f8:35:d0:09:d6:6c:5c:da:bb:93:55:9b: 2d:88:59:4b:f6:84:a1:cc:e2:9d:da:55:f6:27:8d: 9b:b4:92:bb:bc:50:67:0c:6f:af:6d:53:05:f4:5c: 5e:33:4d:79:79:4c:07:8d:0e:6a:5e:17:17:40:6c: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:3D:C2:A6:16:FD:A0:08:0B:44:F9:C7:0E:43:D7:E0:B8:EA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f929c95-ae43-3e26-b5e3-8775bab3b742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.107.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:cf:09:71:a3:e1:a7:6f:7c:1e:88:8d:88:3a:20:4d:c2: 0c:b8:8e:d0:91:7b:37:58:fb:b3:4a:69:8f:6c:ea:17:4f:c8: f6:5a:16:46:9b:69:af:d2:27:dd:90:ac:55:4f:b5:5d:fa:1c: 85:7a:99:ad:f3:2f:5d:ce:39:45:0d:91:3a:ae:5c:2a:f6:2b: c3:86:98:63:94:eb:da:2f:21:64:12:7b:2d:5f:52:d1:09:aa: 67:06:3a:cb:f0:10:99:eb:e5:a8:f2:c3:77:b5:1a:a6:60:e3: ff:9f:5a:a9:88:7f:26:3a:dd:8e:42:a1:4d:eb:bd:b4:c3:0f: 5b:db:52:9e:f1:e9:c4:85:bd:d7:8f:b8:bb:8e:9c:29:85:76: f2:04:f5:00:32:47:b6:34:48:87:67:07:ee:c2:a9:94:08:4f: 49:3b:fc:9f:f0:76:fd:a4:40:76:18:2b:70:42:c0:1f:89:f7: 73:29:84:b9:fc:e1:c5:d5:4c:8a:2a:cc:42:66:0d:c5:eb:66: d2:ab:f1:59:8f:a3:17:a6:d3:45:41:2d:02:26:6e:7a:8e:b5: 4e:99:39:64:97:00:ca:d9:c2:fe:76:58:fb:d1:32:32:d5:f6: fc:25:a8:c5:9b:18:68:c0:d2:54:13:54:6d:2e:13:55:12:9f: 40:3d:ae:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1ng6FQMF5D0qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDMyMDA0MDAwMFowLzEtMCsGA1UEAxMk ZDRiZDM2YzEtZDNlNC00NTU4LTk4NzctZDgzYzcxOGUzODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzHWKmihYwDjZIskwUE549LDMTWGAPD/XZMU 3xKLIv3am4LB3RvsLRO7crm4B8z6uWysPNmo/+AZ75f1x8BPTu0CCzuub5M3HrSV HgzLLJW3r7sNTCVVB54X0sAu+0IB3uoevjDKhbc++qpeO3RQfa+A1+f7pxkMVGBa P+TtP6amY7yk/5vlpo0ijTS4jg5SZHYbCyHzYpIRS0EGdUpSzn5Xy4J8c0AZq+Bd 8TvuHIirhB2LQziod7UwSn2meidRwr1Yz2X4NdAJ1mxc2ruTVZstiFlL9oShzOKd 2lX2J42btJK7vFBnDG+vbVMF9FxeM015eUwHjQ5qXhcXQGwLSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtFPcKmFv2gCAtE+ccOQ9fguOpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWY5MjljOTUtYWU0My0z ZTI2LWI1ZTMtODc3NWJhYjNiNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKGuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOdzwlxo+Gnb3weiI2IOiBNwgy4jtCRezdY+7NKaY9s6hdPyPZaFkab aa/SJ92QrFVPtV36HIV6ma3zL13OOUUNkTquXCr2K8OGmGOU69ovIWQSey1fUtEJ qmcGOsvwEJnr5ajyw3e1GqZg4/+fWqmIfyY63Y5CoU3rvbTDD1vbUp7x6cSFvdeP uLuOnCmFdvIE9QAyR7Y0SIdnB+7CqZQIT0k7/J/wdv2kQHYYK3BCwB+J93MphLn8 4cXVTIoqzEJmDcXrZtKr8VmPoxem00VBLQImbnqOtU6ZOWSXAMrZwv52WPvRMjLV 9vwlqMWbGGjA0lQTVG0uE1USn0A9rqQ= -----END CERTIFICATE-----Generated at Sat Sep 5 04:31:28 2026 by rpki-client