$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3fea5a22-c25c-359b-a73b-88f90761c927.roa File: 3fea5a22-c25c-359b-a73b-88f90761c927.roa (raw, json) Hash identifier: lrKj9zffMlaFlg3s3xIb3Sf6iKbkeNMfRpiTYBN/Ys8= Subject key identifier: E8:11:D0:C2:63:E8:8C:8A:80:89:B8:2C:07:9F:3E:68:F7:A6:49:12 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4236001C45F969284165500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3fea5a22-c25c-359b-a73b-88f90761c927.roa Signing time: Wed 19 Aug 2026 18:04:06 +0000 ROA not before: Wed 19 Aug 2026 18:04:06 +0000 ROA not after: Sat 09 Mar 2030 05:00:00 +0000 asID: 3598 IP address blocks: 131.107.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:60:01:c4:5f:96:92:84:16:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:06 2026 GMT Not After : Mar 9 05:00:00 2030 GMT Subject: CN=d150302d-17a7-4446-92d4-c00f3ecce027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:f7:84:6e:7f:73:65:43:f1:68:4c:f7:8c: 50:1f:6a:f9:7d:c8:25:f7:c0:fd:9f:6c:86:bc:af: e4:62:76:73:4f:67:b7:43:c3:3e:a8:56:f8:28:4c: c5:12:57:b5:84:93:19:39:98:dd:59:92:3b:19:55: 8a:0f:41:a2:05:c1:f0:59:53:5c:2c:14:d8:28:36: be:d0:8e:60:ca:45:42:fc:eb:cb:84:5b:de:54:77: 16:9b:1e:bf:3a:81:4e:c0:5d:e8:d0:7d:2b:d1:20: 81:ce:66:94:b1:3a:0d:cd:0d:a4:64:f5:48:56:03: 2d:bb:a3:cf:28:fb:fd:e7:54:00:50:0e:8e:5d:78: 1c:d2:09:65:61:94:eb:38:ae:81:86:5c:26:f6:c8: e0:43:b3:27:94:a4:5e:1d:d4:30:8a:a8:db:81:48: 9d:f0:f7:b2:8c:d8:8d:b7:d2:ef:4e:74:02:f5:63: fc:9a:c9:42:ec:26:0b:36:26:b5:72:b3:ba:13:eb: 28:93:c2:90:05:cf:33:46:ff:10:13:05:c3:52:5a: ba:b8:b6:a1:02:2c:25:26:c3:93:24:6a:d5:96:c4: 67:bb:bc:ce:1e:b5:cf:8e:b4:72:3c:25:7e:1b:6b: 39:57:61:58:a7:9b:b3:1f:66:2e:79:59:cf:fb:b1: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:D0:C2:63:E8:8C:8A:80:89:B8:2C:07:9F:3E:68:F7:A6:49:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3fea5a22-c25c-359b-a73b-88f90761c927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 131.107.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:49:13:cb:5d:18:82:a7:a2:2d:7f:7d:89:6d:55:71:88:0b: 1d:a2:96:f2:a5:e9:b6:b6:91:5d:9d:80:8f:d9:19:36:48:1d: 5d:00:4d:43:f4:3a:c3:65:13:40:21:10:69:bd:6e:c8:45:8c: cf:fd:88:24:15:b4:6f:3c:bb:69:1a:85:8d:8d:75:15:66:d7: 49:01:08:89:c3:68:79:fb:f6:b0:e3:b4:18:c2:97:6a:a1:36: 32:24:be:de:b9:0f:05:07:c8:77:5e:58:b8:e9:70:51:3c:aa: d5:2c:3f:ac:c0:af:da:cc:f7:c0:ac:7e:08:b5:03:df:b9:56: 41:f8:fb:80:ed:b9:7c:4e:07:ff:f5:2a:df:dc:42:2c:03:51: 75:20:51:5f:4d:a8:c6:d3:a1:dc:1a:ef:9f:c2:22:6c:b8:26: e1:a4:db:f8:01:d2:aa:95:9e:32:97:07:21:7e:06:09:e1:b9: ba:fd:5d:ef:73:58:68:47:5e:c0:2d:01:1d:f6:bf:5f:df:2a: e9:ac:ab:fd:f7:f1:d0:b6:6f:87:a9:66:f7:fc:d2:21:82:55: aa:54:37:67:34:d0:4a:a9:af:05:be:a6:0a:a1:ab:88:f7:ed: 0f:92:fc:26:d0:b6:e4:24:34:24:ed:cc:52:17:59:8d:48:43: 06:08:7e:a5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI2ABxF+WkoQWVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNloXDTMwMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk ZDE1MDMwMmQtMTdhNy00NDQ2LTkyZDQtYzAwZjNlY2NlMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAler3hG5/c2VD8WhM94xQH2r5fcgl98D9n2yG vK/kYnZzT2e3Q8M+qFb4KEzFEle1hJMZOZjdWZI7GVWKD0GiBcHwWVNcLBTYKDa+ 0I5gykVC/OvLhFveVHcWmx6/OoFOwF3o0H0r0SCBzmaUsToNzQ2kZPVIVgMtu6PP KPv951QAUA6OXXgc0gllYZTrOK6Bhlwm9sjgQ7MnlKReHdQwiqjbgUid8PeyjNiN t9LvTnQC9WP8mslC7CYLNia1crO6E+sok8KQBc8zRv8QEwXDUlq6uLahAiwlJsOT JGrVlsRnu7zOHrXPjrRyPCV+G2s5V2FYp5uzH2YueVnP+7Fu9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOgR0MJj6IyKgIm4LAefPmj3pkkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2ZlYTVhMjItYzI1Yy0z NTliLWE3M2ItODhmOTA3NjFjOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg2swVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdkkTy10YgqeiLX99iW1VcYgLHaKW8qXptraRXZ2Aj9kZNkgdXQBNQ/Q6 w2UTQCEQab1uyEWMz/2IJBW0bzy7aRqFjY11FWbXSQEIicNoefv2sOO0GMKXaqE2 MiS+3rkPBQfId15YuOlwUTyq1Sw/rMCv2sz3wKx+CLUD37lWQfj7gO25fE4H//Uq 39xCLANRdSBRX02oxtOh3Brvn8IibLgm4aTb+AHSqpWeMpcHIX4GCeG5uv1d73NY aEdewC0BHfa/X98q6ayr/ffx0LZvh6lm9/zSIYJVqlQ3ZzTQSqmvBb6mCqGriPft D5L8JtC25CQ0JO3MUhdZjUhDBgh+pQ== -----END CERTIFICATE-----Generated at Sat Sep 5 03:48:16 2026 by rpki-client