$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/873e73f1-f793-3997-bd77-7afac82fd22b.roa File: 873e73f1-f793-3997-bd77-7afac82fd22b.roa (raw, json) Hash identifier: WjsDhVZZlHu2n8DxwHfvt5DxrtHOM0taF2kb/Yba+Z0= Subject key identifier: 67:47:77:6B:5D:FD:9B:9C:53:3A:65:A8:52:2B:A1:26:92:3E:EA:07 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234F7B2C79B3CF23901188 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/873e73f1-f793-3997-bd77-7afac82fd22b.roa Signing time: Wed 19 Aug 2026 18:03:58 +0000 ROA not before: Wed 19 Aug 2026 18:03:58 +0000 ROA not after: Sat 13 Apr 2030 04:00:00 +0000 asID: 8068 IP address blocks: 65.54.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4f:7b:2c:79:b3:cf:23:90:11:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:58 2026 GMT Not After : Apr 13 04:00:00 2030 GMT Subject: CN=838bda8b-06c9-4ec9-864b-5e4942c48fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:5a:97:2d:b1:79:84:b7:37:b9:f5:b4:c7: b7:e3:3d:70:8b:3e:6f:3c:a0:a1:b8:e3:5a:12:11: 66:86:76:bd:ae:9c:84:14:82:f8:d5:54:e8:cf:61: 56:bc:31:6c:8b:23:7c:4d:4e:cb:26:0c:ee:7e:2b: 6e:61:ef:67:1e:b1:a0:f7:0b:36:47:d1:e7:e7:45: 05:c6:ab:e9:5d:2d:60:c6:87:fb:b6:db:28:91:fb: 68:4b:34:dc:34:1a:7a:c3:12:f7:4e:72:8c:09:f1: 1e:b9:f2:ac:19:13:e1:59:29:16:84:53:6b:e4:93: b5:82:bd:d0:c3:d8:5c:00:59:0d:36:8f:8d:d5:5d: 2a:19:0d:be:83:03:e3:09:15:d1:1c:ca:eb:c4:86: 1a:ff:d1:98:23:60:a0:e6:68:f7:d6:f0:cf:06:fb: c0:30:ed:0a:7c:97:55:f0:c4:89:3e:f3:06:a0:f2: d0:dd:e0:50:20:ad:12:61:e2:8a:84:64:f2:ab:e0: 65:7a:bb:bc:87:53:4d:4c:a8:d0:4e:b1:12:e7:cc: 30:82:94:71:33:5f:eb:11:7d:a0:3c:b0:72:5e:f7: 5e:1b:b3:f8:d3:08:e3:70:b6:4f:a1:89:d9:fb:32: f1:f4:25:a9:36:dc:ec:a0:1e:28:30:ce:ea:51:22: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:77:6B:5D:FD:9B:9C:53:3A:65:A8:52:2B:A1:26:92:3E:EA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/873e73f1-f793-3997-bd77-7afac82fd22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 65.54.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2e:bc:95:0c:6c:6c:6c:1f:67:fd:ac:c0:bd:cf:66:85:73: 02:9c:f6:40:3c:79:d3:8d:00:ed:4f:ec:30:b1:5f:92:a4:c4: 6f:f0:33:61:30:a1:7e:07:df:f0:ef:a3:2d:b9:28:74:7e:fb: 41:af:08:eb:81:6d:a3:d5:87:23:78:ad:50:6b:0b:23:2a:53: 04:b3:88:55:c7:0f:df:8d:c4:09:fb:eb:20:aa:7a:e0:32:7a: 2e:49:84:c5:44:30:6d:bd:11:7c:2e:77:f2:44:fb:d9:70:78: 62:58:fd:11:ad:5e:1e:45:6a:56:da:c7:f0:21:b2:7b:81:d9: 72:47:20:2a:d6:d8:e3:be:0f:0a:2d:45:ed:09:23:b9:fe:71: 0f:33:3a:c2:06:8c:bc:55:a4:d2:5b:b6:bb:dc:0e:22:ad:d9: 74:80:94:93:45:f8:6a:8c:67:3a:96:1a:d8:c4:99:27:92:24: 6a:a9:01:a4:f8:d9:de:82:62:ac:23:4b:b9:0f:f3:f7:66:de: 54:62:03:af:28:32:88:2d:a0:e0:72:ff:35:ce:75:17:c0:f6: cd:84:be:f9:8f:a9:28:1c:14:0e:bf:31:29:e2:14:32:ee:1d: 0e:0f:2d:b6:7a:7a:95:71:6a:49:e7:6e:b1:11:6b:67:83:c8: 0f:7a:77:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI097LHmzzyOQEYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OFoXDTMwMDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk ODM4YmRhOGItMDZjOS00ZWM5LTg2NGItNWU0OTQyYzQ4ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCValy2xeYS3N7n1tMe34z1wiz5vPKChuONa EhFmhna9rpyEFIL41VToz2FWvDFsiyN8TU7LJgzufituYe9nHrGg9ws2R9Hn50UF xqvpXS1gxof7ttsokftoSzTcNBp6wxL3TnKMCfEeufKsGRPhWSkWhFNr5JO1gr3Q w9hcAFkNNo+N1V0qGQ2+gwPjCRXRHMrrxIYa/9GYI2Cg5mj31vDPBvvAMO0KfJdV 8MSJPvMGoPLQ3eBQIK0SYeKKhGTyq+Bleru8h1NNTKjQTrES58wwgpRxM1/rEX2g PLByXvdeG7P40wjjcLZPoYnZ+zLx9CWpNtzsoB4oMM7qUSKSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdHd2td/ZucUzplqFIroSaSPuoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODczZTczZjEtZjc5My0z OTk3LWJkNzctN2FmYWM4MmZkMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUuvJUMbGxsH2f9rMC9z2aFcwKc9kA8edONAO1P7DCxX5KkxG/wM2Ew oX4H3/Dvoy25KHR++0GvCOuBbaPVhyN4rVBrCyMqUwSziFXHD9+NxAn76yCqeuAy ei5JhMVEMG29EXwud/JE+9lweGJY/RGtXh5Falbax/AhsnuB2XJHICrW2OO+Dwot Re0JI7n+cQ8zOsIGjLxVpNJbtrvcDiKt2XSAlJNF+GqMZzqWGtjEmSeSJGqpAaT4 2d6CYqwjS7kP8/dm3lRiA68oMogtoOBy/zXOdRfA9s2EvvmPqSgcFA6/MSniFDLu HQ4PLbZ6epVxaknnbrERa2eDyA96d90= -----END CERTIFICATE-----Generated at Sat Sep 5 06:10:55 2026 by rpki-client