$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa File: 7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa (raw, json) Hash identifier: /MkPQftWhlTdy/9JDL/eA2xdme2ktvCMB0D4RxaSTaE= Subject key identifier: FC:6E:1B:A0:DD:F4:E7:4F:46:94:12:16:B8:26:95:09:67:85:4E:48 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42357A839423F7D9C3AF594 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Sun 24 Mar 2030 04:00:00 +0000 asID: 3598 IP address blocks: 167.220.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:57:a8:39:42:3f:7d:9c:3a:f5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 24 04:00:00 2030 GMT Subject: CN=98e97461-2add-499f-9c2b-1a461196d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:b2:8b:d5:17:1e:b4:8e:96:5a:ee:ad:8d: 9b:76:9b:e5:e0:01:c9:c6:7c:a6:af:d2:32:74:54: e7:d2:70:48:ed:d4:29:90:36:12:d1:8d:2e:4d:49: aa:cb:8d:7f:c2:40:9a:e1:e9:86:65:ef:56:3c:f2: 68:13:b6:14:91:6e:b3:9e:f5:ce:ca:4b:06:99:e7: 3c:bc:6b:b6:bb:14:ec:98:0e:87:b8:3a:c5:98:a6: 3c:80:e3:90:d2:15:ef:1f:fd:f5:36:9d:70:00:f3: 1f:27:11:c5:82:10:92:e9:96:18:e2:54:33:31:95: b9:fd:9d:97:d9:34:53:f6:5f:ee:23:a6:94:b6:e0: ff:d7:47:c4:bf:98:35:7c:a0:1d:db:68:19:fc:4f: d5:c4:8c:94:69:42:8b:c8:59:b9:fe:9f:7b:e2:77: 36:de:88:80:a3:74:f4:f1:57:07:e4:b5:15:e1:9d: 56:19:5e:43:05:d1:c8:1c:55:8f:91:41:79:ab:3b: b8:d7:d5:9e:8c:91:07:eb:2b:e2:34:24:d5:0a:dc: 76:b5:fd:c1:85:17:08:b0:9f:8e:70:2d:1f:d6:1d: 0e:2b:1a:c8:f2:06:8e:89:74:21:de:1f:48:9f:dd: 30:8a:fa:99:4f:39:f0:fe:63:79:d9:b8:ec:12:88: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6E:1B:A0:DD:F4:E7:4F:46:94:12:16:B8:26:95:09:67:85:4E:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7b39c606-f114-3a3b-b18d-3068a1a9e9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 167.220.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:53:59:43:21:31:49:4a:cb:e1:e3:a8:7f:61:85:77:bb:56: ae:56:fc:26:c2:d7:cf:a6:f6:b2:00:f3:d8:e2:6c:1b:46:02: 0b:3e:7f:5c:43:12:4b:2d:bf:79:c9:31:66:41:ec:44:70:38: 57:ad:bc:31:9e:c4:f3:d7:e8:b7:11:6d:35:43:4c:05:4a:96: 58:7a:8f:f5:50:ed:94:ca:61:af:6e:4a:03:1d:85:42:ac:06: 40:47:bf:7b:0d:c4:b7:2a:bd:93:79:d8:7c:a9:12:85:f1:9e: 81:1b:5a:1b:86:8b:05:27:f7:87:78:53:b9:b1:65:d0:b7:21: 91:f7:b0:84:ba:4c:29:f5:41:2d:f7:04:13:5d:ec:ce:d3:c2: ac:6a:17:e1:ca:0c:61:b2:99:e0:66:1e:84:38:ef:a4:34:3e: 2a:a3:96:d3:a9:59:6f:81:77:58:05:38:a8:d4:6c:7d:d8:31: 1d:23:8c:3f:da:65:3c:d4:4f:56:60:03:70:13:6f:c7:57:4f: 64:0a:90:ac:48:61:8b:64:e5:79:a9:38:c0:08:51:ee:0b:08: dc:dd:ed:03:8f:b8:26:8e:bc:1a:9b:e9:0b:a6:3b:39:20:f8: bd:19:09:1e:fa:d3:e0:72:be:b3:3b:99:6c:48:74:ea:cc:4a: 44:eb:b1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1eoOUI/fZw69ZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMyNDA0MDAwMFowLzEtMCsGA1UEAxMk OThlOTc0NjEtMmFkZC00OTlmLTljMmItMWE0NjExOTZkNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd2yi9UXHrSOllrurY2bdpvl4AHJxnymr9Iy dFTn0nBI7dQpkDYS0Y0uTUmqy41/wkCa4emGZe9WPPJoE7YUkW6znvXOyksGmec8 vGu2uxTsmA6HuDrFmKY8gOOQ0hXvH/31Np1wAPMfJxHFghCS6ZYY4lQzMZW5/Z2X 2TRT9l/uI6aUtuD/10fEv5g1fKAd22gZ/E/VxIyUaUKLyFm5/p974nc23oiAo3T0 8VcH5LUV4Z1WGV5DBdHIHFWPkUF5qzu419WejJEH6yviNCTVCtx2tf3BhRcIsJ+O cC0f1h0OKxrI8gaOiXQh3h9In90wivqZTznw/mN52bjsEoiitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxuG6Dd9OdPRpQSFrgmlQlnhU5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvN2IzOWM2MDYtZjExNC0z YTNiLWIxOGQtMzA2OGExYTllOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp9zQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5TWUMhMUlKy+HjqH9hhXe7Vq5W/CbC18+m9rIA89jibBtGAgs+f1xD Ekstv3nJMWZB7ERwOFetvDGexPPX6LcRbTVDTAVKllh6j/VQ7ZTKYa9uSgMdhUKs BkBHv3sNxLcqvZN52HypEoXxnoEbWhuGiwUn94d4U7mxZdC3IZH3sIS6TCn1QS33 BBNd7M7TwqxqF+HKDGGymeBmHoQ476Q0PiqjltOpWW+Bd1gFOKjUbH3YMR0jjD/a ZTzUT1ZgA3ATb8dXT2QKkKxIYYtk5XmpOMAIUe4LCNzd7QOPuCaOvBqb6QumOzkg +L0ZCR760+ByvrM7mWxIdOrMSkTrsS0= -----END CERTIFICATE-----Generated at Sat Sep 5 03:48:43 2026 by rpki-client