$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/878bb8e9-0d3e-309e-84b5-6904ae88d136.roa File: 878bb8e9-0d3e-309e-84b5-6904ae88d136.roa (raw, json) Hash identifier: A6FnW1Ddw2GldQAl5Q216/MLx5NAjVnvnITDTJNV/uY= Subject key identifier: 1B:D4:3B:65:26:4B:C2:86:B4:A5:2F:5B:9B:9F:9F:69:71:65:7D:9E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235958473E96C57D8E5770 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/878bb8e9-0d3e-309e-84b5-6904ae88d136.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Sun 07 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 40.104.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:59:58:47:3e:96:c5:7d:8e:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Apr 7 04:00:00 2030 GMT Subject: CN=9db340bc-e6c3-479f-8408-957bed01efad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:77:15:62:d9:ba:05:eb:7b:89:54:b8:5b: b7:be:0e:71:52:05:94:e9:01:ca:96:b7:7c:af:97: b0:39:30:79:f3:56:47:5a:b2:f9:d1:c0:42:96:2d: 04:21:03:56:f5:bf:ab:6c:fa:cc:ed:bf:12:08:5b: 01:eb:e3:d3:ea:99:dc:7c:6d:81:63:19:0e:cf:95: 5b:31:93:80:65:48:2c:ee:4a:26:92:12:6a:49:cf: 3b:e4:63:18:f6:2c:fb:fa:46:5f:d8:ba:77:8d:12: fb:45:51:b7:de:2b:65:bb:f1:02:d6:0d:fb:dd:c8: d6:0f:e5:6c:ca:91:89:5c:a6:cb:37:aa:48:26:61: ec:6e:f6:ee:7c:0a:56:f0:e7:b0:a7:c7:78:c6:dc: 54:e4:56:25:3c:95:5e:e7:98:d2:f2:a1:50:bc:e4: 7c:97:72:c0:c1:65:58:8d:22:51:be:4b:af:be:e8: 44:21:d9:b5:25:6c:a8:9d:e8:a9:3d:33:b7:51:f0: 3b:ea:46:45:f0:a6:33:0c:2c:6d:e4:0a:c9:4e:2d: f1:c0:ff:31:e1:a7:64:57:dd:2f:44:d0:71:9c:3e: 47:c3:f7:7d:54:ca:c2:65:33:a3:45:de:06:09:07: 7f:c1:e8:a8:28:25:49:61:c0:d8:04:3b:e3:fc:56: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D4:3B:65:26:4B:C2:86:B4:A5:2F:5B:9B:9F:9F:69:71:65:7D:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/878bb8e9-0d3e-309e-84b5-6904ae88d136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.104.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:aa:e8:87:86:bf:e7:ab:90:0f:a9:ab:f1:99:42:40:d5:0b: 3e:93:b6:e6:e2:0c:cd:f3:1d:a1:56:eb:ec:85:dc:c2:87:ca: 53:6e:35:3b:15:a1:32:6e:27:78:3f:cf:6f:f5:a5:43:06:e3: 20:af:f0:14:45:aa:f3:6c:67:36:f4:57:0e:52:54:9d:5d:f6: 1e:b7:b9:dd:f0:86:96:8c:c4:a4:c3:a0:98:2f:31:61:a6:52: 3a:8a:0a:80:ac:db:ba:98:a3:9e:1f:fa:9f:c4:8d:ef:65:c0: 72:60:d6:38:66:c3:3a:07:7f:9d:22:8f:0b:1d:b0:53:21:04: 8c:a1:54:bc:e8:65:72:d3:8d:3a:b8:4d:65:63:3a:ac:39:ee: cf:6c:b5:42:8a:ab:05:bd:a4:9b:24:d0:40:ca:45:29:4b:81: 91:fc:a3:eb:d2:ee:62:4d:a7:d8:13:7a:d4:8b:e9:ba:fc:3f: c8:cc:a3:bb:bb:7e:a6:64:96:42:67:ca:a5:50:88:15:fc:e9: a5:75:a1:b8:5a:66:ad:40:8d:55:d8:6f:c3:85:cb:34:ad:5c: 27:63:e3:f4:21:64:31:c5:f3:ef:20:66:70:c5:7b:a0:a5:a8: 11:3e:8a:5a:ac:d6:f2:75:f0:61:a0:03:43:2e:00:45:09:81: f6:85:0e:6a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1lYRz6WxX2OV3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDQwNzA0MDAwMFowLzEtMCsGA1UEAxMk OWRiMzQwYmMtZTZjMy00NzlmLTg0MDgtOTU3YmVkMDFlZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldh3FWLZugXre4lUuFu3vg5xUgWU6QHKlrd8 r5ewOTB581ZHWrL50cBCli0EIQNW9b+rbPrM7b8SCFsB6+PT6pncfG2BYxkOz5Vb MZOAZUgs7komkhJqSc875GMY9iz7+kZf2Lp3jRL7RVG33itlu/EC1g373cjWD+Vs ypGJXKbLN6pIJmHsbvbufApW8Oewp8d4xtxU5FYlPJVe55jS8qFQvOR8l3LAwWVY jSJRvkuvvuhEIdm1JWyoneipPTO3UfA76kZF8KYzDCxt5ArJTi3xwP8x4adkV90v RNBxnD5Hw/d9VMrCZTOjRd4GCQd/weioKCVJYcDYBDvj/FY0tQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBvUO2UmS8KGtKUvW5ufn2lxZX2eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvODc4YmI4ZTktMGQzZS0z MDllLTg0YjUtNjkwNGFlODhkMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOaroh4a/56uQD6mr8ZlCQNULPpO25uIMzfMdoVbr7IXcwofKU241OxWh Mm4neD/Pb/WlQwbjIK/wFEWq82xnNvRXDlJUnV32Hre53fCGlozEpMOgmC8xYaZS OooKgKzbupijnh/6n8SN72XAcmDWOGbDOgd/nSKPCx2wUyEEjKFUvOhlctONOrhN ZWM6rDnuz2y1QoqrBb2kmyTQQMpFKUuBkfyj69LuYk2n2BN61Ivpuvw/yMyju7t+ pmSWQmfKpVCIFfzppXWhuFpmrUCNVdhvw4XLNK1cJ2Pj9CFkMcXz7yBmcMV7oKWo ET6KWqzW8nXwYaADQy4ARQmB9oUOag== -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:49 2026 by rpki-client