$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa File: 35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa (raw, json) Hash identifier: icSCECdHlvKBMjLiAMTPD9VycGxguVKwEsa6ZT/yVBQ= Subject key identifier: 5F:24:B7:20:D9:48:17:8E:06:95:51:56:F7:65:00:53:3C:EB:71:AC Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42359B244CF9477305CED68 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa Signing time: Wed 19 Aug 2026 18:04:03 +0000 ROA not before: Wed 19 Aug 2026 18:04:03 +0000 ROA not after: Sun 17 Mar 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.125.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:59:b2:44:cf:94:77:30:5c:ed:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:03 2026 GMT Not After : Mar 17 04:00:00 2030 GMT Subject: CN=002b0d4b-8dda-4eed-866b-e9d08378bd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:70:f1:2e:36:86:26:77:63:03:e7:19:f5:1a: 9d:69:2c:46:bc:ef:09:39:df:c9:f7:06:d7:87:c1: 37:fb:9c:d5:1d:34:b5:bc:ed:a3:e4:dc:a5:be:12: d6:3e:ea:b4:87:0c:d7:6a:ba:f1:bf:43:cd:7d:3c: 15:89:61:76:ac:56:38:46:31:5c:33:07:f2:9c:03: a5:fa:ea:d7:aa:29:7d:3b:ed:b1:19:61:40:d3:2b: ea:87:58:15:25:fe:49:87:46:b7:72:d1:38:b7:3c: 3d:c6:7e:c5:0c:a6:da:12:dc:a5:62:db:ec:b8:7b: d0:94:d0:7c:a3:db:af:44:4a:51:f7:b7:5d:d3:c1: 7a:a9:fc:96:c3:76:a8:8b:0f:c5:0c:ab:fc:c2:3c: 4c:c7:eb:d9:b1:66:e4:7c:03:3b:cf:dd:5c:57:69: a5:61:8d:10:92:cb:34:08:e3:9f:e4:66:c1:83:69: c4:c9:35:cc:75:34:27:52:25:12:ff:89:3a:c0:b7: aa:59:b2:a3:5b:96:dd:d2:11:86:af:ae:09:70:10: 4c:eb:0d:b3:5d:21:8f:36:49:a9:4d:c5:af:4b:6e: fc:d7:3b:01:ad:82:ad:dc:59:33:4b:87:95:fb:4b: 51:4a:d0:f4:21:d2:c0:1f:23:2a:8d:b6:56:1d:48: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:B7:20:D9:48:17:8E:06:95:51:56:F7:65:00:53:3C:EB:71:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/35553d69-d3f3-39e3-b949-fcf9b7e9ed7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.125.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e1:9c:0e:69:8d:68:21:7b:5e:db:e7:f9:7c:de:c7:14:00: 8f:b7:22:f1:17:b3:f6:6a:25:93:0e:56:47:75:34:07:d4:6f: 11:49:c6:aa:89:a0:1f:b6:42:fc:5c:f9:42:b5:24:8f:69:7b: 4a:e5:81:bb:fe:87:d9:6c:0b:69:97:61:32:12:fd:9c:f3:53: d7:87:7a:4b:e1:1b:c8:af:11:e1:b3:62:d7:62:68:eb:71:a0: 93:c2:ad:08:28:e9:9f:76:83:b6:b5:5c:59:aa:60:1b:9d:a2: e1:1f:d3:51:f5:11:b0:b4:a5:aa:65:47:ad:7b:74:fe:57:bd: 4a:09:4e:b9:56:6e:70:23:01:a0:c8:c4:ba:ca:55:d5:70:7f: c1:0d:d4:d9:48:70:b6:ab:95:3f:f6:b5:7f:ca:f9:f3:f9:dc: 58:94:23:9c:e4:4b:cd:6e:de:ae:cd:12:84:6c:7d:38:66:97: 56:2e:66:6d:0f:65:82:be:d8:09:f4:b3:b5:47:d5:88:36:aa: 5c:b5:c6:a2:31:3b:ca:46:bf:e4:ec:10:52:69:85:a0:18:47: c9:71:72:7f:9c:fe:73:76:e6:c2:97:b1:75:d5:7b:6e:72:db: 14:ce:b0:f3:dc:18:ea:b0:64:a0:9a:23:76:16:85:29:07:22: fd:a0:03:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1myRM+UdzBc7WgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwM1oXDTMwMDMxNzA0MDAwMFowLzEtMCsGA1UEAxMk MDAyYjBkNGItOGRkYS00ZWVkLTg2NmItZTlkMDgzNzhiZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HDxLjaGJndjA+cZ9RqdaSxGvO8JOd/J9wbX h8E3+5zVHTS1vO2j5NylvhLWPuq0hwzXarrxv0PNfTwViWF2rFY4RjFcMwfynAOl +urXqil9O+2xGWFA0yvqh1gVJf5Jh0a3ctE4tzw9xn7FDKbaEtylYtvsuHvQlNB8 o9uvREpR97dd08F6qfyWw3aoiw/FDKv8wjxMx+vZsWbkfAM7z91cV2mlYY0Qkss0 COOf5GbBg2nEyTXMdTQnUiUS/4k6wLeqWbKjW5bd0hGGr64JcBBM6w2zXSGPNkmp TcWvS2781zsBrYKt3FkzS4eV+0tRStD0IdLAHyMqjbZWHUh8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8ktyDZSBeOBpVRVvdlAFM863GsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzU1NTNkNjktZDNmMy0z OWUzLWI5NDktZmNmOWI3ZTllZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKH0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPhnA5pjWghe17b5/l83scUAI+3IvEXs/ZqJZMOVkd1NAfUbxFJxqqJ oB+2Qvxc+UK1JI9pe0rlgbv+h9lsC2mXYTIS/ZzzU9eHekvhG8ivEeGzYtdiaOtx oJPCrQgo6Z92g7a1XFmqYBudouEf01H1EbC0paplR617dP5XvUoJTrlWbnAjAaDI xLrKVdVwf8EN1NlIcLarlT/2tX/K+fP53FiUI5zkS81u3q7NEoRsfThml1YuZm0P ZYK+2An0s7VH1Yg2qly1xqIxO8pGv+TsEFJphaAYR8lxcn+c/nN25sKXsXXVe25y 2xTOsPPcGOqwZKCaI3YWhSkHIv2gA9c= -----END CERTIFICATE-----Generated at Fri Sep 4 22:29:43 2026 by rpki-client