$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4cd1673b-9c5e-3e70-8108-96f27025548c.roa File: 4cd1673b-9c5e-3e70-8108-96f27025548c.roa (raw, json) Hash identifier: iDeDWGYdOo1EwekJIqk5LoO6ne98bv2Iu0eHXlGKK10= Subject key identifier: BD:E1:9A:0C:36:86:36:D6:75:8C:21:58:68:DE:AB:DD:BF:D6:50:AA Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42352AB160C267C108E3100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4cd1673b-9c5e-3e70-8108-96f27025548c.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Thu 11 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 104.44.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:ab:16:0c:26:7c:10:8e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Apr 11 04:00:00 2030 GMT Subject: CN=dcb4aa5f-6704-45ae-95eb-94929ebc5b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:f0:72:fa:ea:fd:8e:23:36:82:09:35:c4: a9:1d:a1:94:b4:45:a5:8f:db:65:48:8a:1e:89:27: 8d:31:65:8f:cc:41:03:5c:65:b2:01:f5:7e:8e:b9: e5:0b:c3:bc:c4:1a:15:b8:29:df:f7:08:80:25:c2: d2:bb:54:46:74:1c:b5:d5:17:c5:bc:36:9f:59:61: 8e:ba:e3:e3:95:05:c7:54:19:0e:55:59:ef:25:70: 9a:10:55:87:82:56:d8:07:a4:34:8e:bf:2e:ff:9a: 4a:f8:41:46:99:98:a3:fd:10:c4:d7:66:68:52:2e: 1e:a6:0a:4d:89:2e:67:f0:66:f9:d5:85:6d:a3:f0: ae:8f:7d:76:17:2e:fe:f4:d2:dd:6b:69:62:fc:9e: ae:12:e3:38:ad:45:7e:5e:2b:78:b2:37:bd:5d:11: e9:a8:1e:5c:1e:d6:86:fa:0e:61:45:5a:b4:ff:4b: 13:75:64:cc:01:80:56:78:9f:d8:02:62:81:ba:8a: 03:55:c8:f4:d6:fd:81:ee:31:f9:31:52:7a:4b:a4: e5:d3:ed:2c:08:c8:d0:31:84:5c:49:a9:09:fb:64: 2f:cb:bf:c0:2a:f5:e9:28:2d:c7:66:36:28:dc:af: 60:c0:57:b5:47:89:09:2d:50:80:f6:65:2f:9d:b0: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:9A:0C:36:86:36:D6:75:8C:21:58:68:DE:AB:DD:BF:D6:50:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4cd1673b-9c5e-3e70-8108-96f27025548c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 104.44.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:44:5d:c9:68:2b:6e:8d:52:d0:ee:cc:7c:c0:00:14:3c:f7: d3:1e:0b:b4:97:1d:1b:90:95:aa:23:d5:78:ff:12:3c:89:02: e0:15:d5:59:c1:6d:99:3f:e5:1e:09:d4:d6:40:5b:ce:86:2e: 25:43:30:56:c1:9d:e1:06:ff:40:34:bc:37:9f:78:7b:f1:f7: e3:0d:5a:53:4b:df:4e:0f:f6:79:a4:43:65:9f:96:b7:1b:bb: 6c:02:e3:83:54:3b:26:63:fd:09:6b:16:16:c6:6f:e8:8b:eb: d6:50:be:ab:25:d6:a0:7a:0e:b8:d8:78:e5:d8:f9:86:60:68: 20:93:26:67:af:f9:a6:ec:c3:73:0a:b7:91:01:fd:cf:57:d6: ef:db:d5:be:64:e6:e8:3c:0a:5e:c4:95:77:ed:dd:74:80:95: a3:14:bd:af:34:84:22:11:d7:c5:5f:4e:33:f9:79:36:0c:cb: 3d:b7:09:e0:32:cf:4d:a7:de:ef:9a:95:b7:5c:51:7f:34:c9: 98:a6:fb:d8:bc:bb:fa:23:67:f0:84:23:66:ba:c8:03:28:63: dd:79:11:9d:59:d7:64:2f:c9:16:85:c9:b0:8e:76:e5:a1:1c: 0e:48:98:35:50:80:22:15:83:b6:18:fd:c9:0a:da:ee:7a:3a: a3:cf:95:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1KrFgwmfBCOMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk ZGNiNGFhNWYtNjcwNC00NWFlLTk1ZWItOTQ5MjllYmM1YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJPwcvrq/Y4jNoIJNcSpHaGUtEWlj9tlSIoe iSeNMWWPzEEDXGWyAfV+jrnlC8O8xBoVuCnf9wiAJcLSu1RGdBy11RfFvDafWWGO uuPjlQXHVBkOVVnvJXCaEFWHglbYB6Q0jr8u/5pK+EFGmZij/RDE12ZoUi4epgpN iS5n8Gb51YVto/Cuj312Fy7+9NLda2li/J6uEuM4rUV+Xit4sje9XRHpqB5cHtaG +g5hRVq0/0sTdWTMAYBWeJ/YAmKBuooDVcj01v2B7jH5MVJ6S6Tl0+0sCMjQMYRc SakJ+2Qvy7/AKvXpKC3HZjYo3K9gwFe1R4kJLVCA9mUvnbAq9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3hmgw2hjbWdYwhWGjeq92/1lCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGNkMTY3M2ItOWM1ZS0z ZTcwLTgxMDgtOTZmMjcwMjU1NDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCxNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlEXcloK26NUtDuzHzAABQ899MeC7SXHRuQlaoj1Xj/EjyJAuAV1VnB bZk/5R4J1NZAW86GLiVDMFbBneEG/0A0vDefeHvx9+MNWlNL304P9nmkQ2Wflrcb u2wC44NUOyZj/QlrFhbGb+iL69ZQvqsl1qB6DrjYeOXY+YZgaCCTJmev+absw3MK t5EB/c9X1u/b1b5k5ug8Cl7ElXft3XSAlaMUva80hCIR18VfTjP5eTYMyz23CeAy z02n3u+albdcUX80yZim+9i8u/ojZ/CEI2a6yAMoY915EZ1Z12QvyRaFybCOduWh HA5ImDVQgCIVg7YY/ckK2u56OqPPlSE= -----END CERTIFICATE-----Generated at Sat Sep 5 06:51:47 2026 by rpki-client