$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa File: 295206d3-cafe-37a1-bf98-f53bd8e8a660.roa (raw, json) Hash identifier: JQcghulEvcC6BSE+2wxkfE2Ygpc7Z6YqPJU46s8tY5s= Subject key identifier: 07:FD:54:C8:D8:20:6F:B4:41:84:97:30:6F:49:82:13:6F:03:C9:7A Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235C0EBEC5B86F7F695600 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Tue 12 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 208.84.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5c:0e:be:c5:b8:6f:7f:69:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Mar 12 04:00:00 2030 GMT Subject: CN=7cccd1ac-8803-40c8-b018-98e6a0f20f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:dd:ba:18:82:02:45:83:b9:24:95:eb:20: 07:25:3d:8c:08:17:73:ca:c0:8b:12:54:3c:15:f3: 86:c9:74:96:9e:c9:bc:16:cf:97:dd:a7:35:dd:df: cf:c2:71:50:30:7d:27:d0:b4:f6:c5:2a:4d:e7:c8: 91:d2:00:d5:1b:37:1a:0f:a8:ed:b6:98:6e:d6:8d: b1:10:8b:32:f1:7f:4e:6d:15:24:66:55:19:c1:93: f5:1d:c7:9d:27:c6:7c:92:a0:7e:bf:62:00:9c:23: 81:d6:06:11:f6:c3:5f:73:60:aa:03:ac:75:32:17: 2b:d8:13:43:36:cd:27:5d:e3:70:54:08:fe:9f:65: b6:8b:b1:23:c6:64:06:ce:33:48:9d:9c:99:56:b2: e3:b1:96:e9:c7:e8:93:b5:53:11:c8:e6:3e:0f:ba: f7:5c:d2:88:19:42:2c:a0:7f:9e:2e:18:15:69:52: 73:a7:3b:76:e9:27:59:bd:3f:f9:8c:c5:37:eb:56: dc:64:7b:17:b3:ec:9b:11:74:3d:a7:9c:31:ef:44: c7:6b:62:6a:4d:0b:59:f0:43:0f:65:f3:60:2a:f0: 8d:91:34:22:ee:b6:4a:e4:df:a9:e9:77:e9:8d:66: ec:a5:be:ff:19:96:0b:6b:f9:73:77:55:76:7e:c9: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FD:54:C8:D8:20:6F:B4:41:84:97:30:6F:49:82:13:6F:03:C9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/295206d3-cafe-37a1-bf98-f53bd8e8a660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 208.84.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:67:93:be:3e:56:82:7b:0b:d5:a4:d1:04:6e:1f:c1:10:b0: 82:fb:d1:6c:be:fd:da:6a:5b:56:08:88:42:7c:95:34:3a:fa: 75:52:8f:62:18:fd:88:5e:95:f2:dd:05:22:be:95:25:c7:34: e8:a2:cb:4a:02:95:8f:d8:f2:2f:0b:9d:83:50:27:44:a6:94: cb:77:ab:ff:6f:11:26:77:17:97:6b:8d:d1:44:54:de:2c:3e: ae:a1:bd:66:73:9e:fc:f6:b2:15:91:b7:42:38:29:77:9f:d4: 72:8f:76:a0:29:ca:3f:cc:bb:b4:8e:b4:77:d4:ae:a3:f7:53: 4f:83:e5:62:8c:72:24:8f:82:c2:ba:92:d0:08:56:e4:74:a0: 73:2f:91:22:f6:fa:2c:03:55:95:b5:ce:19:9b:c9:81:91:34: 36:ea:79:84:b3:02:17:28:f0:c6:0d:e3:ac:c0:49:6f:ba:6c: c6:aa:5d:77:81:31:34:ff:84:6a:a5:66:f1:9f:c4:0b:4b:c0: 39:8c:14:ce:2f:08:68:8d:32:27:c3:ce:5d:b6:24:a8:05:c1: a8:91:31:1b:c5:7a:61:a9:ea:9d:74:f4:e7:9e:83:19:f3:dd: 10:cb:54:7e:ed:88:66:f1:f5:c2:46:cc:cd:bb:f6:36:4d:b9: 1f:d2:7e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1wOvsW4b39pVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDMxMjA0MDAwMFowLzEtMCsGA1UEAxMk N2NjY2QxYWMtODgwMy00MGM4LWIwMTgtOThlNmEwZjIwZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPLduhiCAkWDuSSV6yAHJT2MCBdzysCLElQ8 FfOGyXSWnsm8Fs+X3ac13d/PwnFQMH0n0LT2xSpN58iR0gDVGzcaD6jttphu1o2x EIsy8X9ObRUkZlUZwZP1HcedJ8Z8kqB+v2IAnCOB1gYR9sNfc2CqA6x1Mhcr2BND Ns0nXeNwVAj+n2W2i7EjxmQGzjNInZyZVrLjsZbpx+iTtVMRyOY+D7r3XNKIGUIs oH+eLhgVaVJzpzt26SdZvT/5jMU361bcZHsXs+ybEXQ9p5wx70THa2JqTQtZ8EMP ZfNgKvCNkTQi7rZK5N+p6XfpjWbspb7/GZYLa/lzd1V2fsmrvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAf9VMjYIG+0QYSXMG9JghNvA8l6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjk1MjA2ZDMtY2FmZS0z N2ExLWJmOTgtZjUzYmQ4ZThhNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFnk74+VoJ7C9Wk0QRuH8EQsIL70Wy+/dpqW1YIiEJ8lTQ6+nVSj2IY /YhelfLdBSK+lSXHNOiiy0oClY/Y8i8LnYNQJ0SmlMt3q/9vESZ3F5drjdFEVN4s Pq6hvWZznvz2shWRt0I4KXef1HKPdqApyj/Mu7SOtHfUrqP3U0+D5WKMciSPgsK6 ktAIVuR0oHMvkSL2+iwDVZW1zhmbyYGRNDbqeYSzAhco8MYN46zASW+6bMaqXXeB MTT/hGqlZvGfxAtLwDmMFM4vCGiNMifDzl22JKgFwaiRMRvFemGp6p109Oeegxnz 3RDLVH7tiGbx9cJGzM279jZNuR/Sfn8= -----END CERTIFICATE-----Generated at Fri Sep 4 22:29:14 2026 by rpki-client