$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa File: af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa (raw, json) Hash identifier: ewEAo0TUGFhoSSIzjvcUgRkt5urJJzzF86J/+rVQPe4= Subject key identifier: A2:D1:9A:85:01:80:BF:21:80:27:C6:2E:17:16:65:60:DD:AE:20:3E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42355654FD54B10FB811100 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa Signing time: Wed 19 Aug 2026 18:04:01 +0000 ROA not before: Wed 19 Aug 2026 18:04:01 +0000 ROA not after: Thu 11 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 74.240.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:55:65:4f:d5:4b:10:fb:81:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:01 2026 GMT Not After : Apr 11 04:00:00 2030 GMT Subject: CN=cc7c4d4f-6da5-4032-89b3-6f82370d7488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:1d:45:e3:e5:f7:d4:67:34:07:80:e9:fe: e1:eb:f8:44:29:2e:e3:c0:d8:46:d1:7f:6f:f8:3d: 41:3d:a2:d6:f2:18:94:37:8f:8d:09:82:99:70:3e: 87:1c:69:57:4a:d5:b3:45:1e:ca:dc:6d:93:d8:60: 10:f4:e5:5f:4a:8e:5d:41:99:0b:28:79:fc:ae:65: 62:cd:0c:bf:fa:c3:ed:5c:56:ad:da:dc:23:50:a0: b5:94:04:b7:ea:28:62:f1:ec:c6:39:63:08:6b:e6: db:71:24:4c:f0:4d:b8:9b:61:e3:91:4c:6d:98:c7: 36:36:a8:62:50:10:24:2c:9f:70:e1:9c:0b:41:f4: 08:9c:29:7f:63:de:ee:03:82:6e:d8:c3:eb:7c:99: e7:34:01:a4:0e:a0:04:71:35:78:36:e2:3b:2e:f9: 1f:53:97:86:23:df:86:36:90:c2:64:4d:ca:0f:9f: 56:48:f1:a5:ce:83:4f:da:0c:c4:92:17:35:e1:f3: d5:6b:1d:4b:8b:2d:74:74:88:ed:57:57:c1:c5:22: ed:6c:f7:c2:d0:30:e4:a3:59:b2:6f:69:3f:75:86: 44:9f:19:cd:08:d2:92:48:97:08:5b:6c:b4:c8:89: 2a:b5:e8:89:f7:47:48:0e:bf:e4:40:b7:a3:c7:d5: a8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:9A:85:01:80:BF:21:80:27:C6:2E:17:16:65:60:DD:AE:20:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/af8a1728-81e1-3ca9-ad3a-6cd106e94c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 74.240.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:16:6f:f5:d3:59:1f:ca:b9:bb:b2:ec:49:fb:5b:8d:44:f3: 48:bd:5d:ff:88:28:a7:97:92:43:94:20:99:8b:c5:3d:d0:16: 8b:4b:4f:87:77:b9:2f:26:0e:56:80:61:8f:2e:49:40:90:64: 7b:4a:28:0c:cd:ca:f9:02:02:12:b3:9f:ca:57:11:a0:1e:ee: fd:24:7d:12:8d:93:70:e4:25:56:43:0e:59:9f:e6:26:da:b2: 9a:c2:85:1d:e2:99:ff:18:21:b6:20:52:3f:52:9b:4f:35:18: 13:42:9d:e0:15:7d:53:80:e2:5a:36:62:ea:23:49:95:4b:06: 36:30:9e:7e:1e:f1:fb:16:ad:c0:b1:f0:71:a1:cb:eb:a5:1f: a6:7e:8b:90:16:14:69:ae:a6:ea:89:92:42:5d:14:ec:23:54: c4:34:6b:0a:57:00:76:80:8e:c9:9e:42:f7:69:07:78:1b:76: b6:b6:ed:33:e3:0b:1b:2f:06:f9:ba:3f:c0:13:49:bf:d9:00: 72:38:1c:7e:4d:57:48:95:00:43:0f:7f:4b:7e:65:ed:5a:42: 6d:bc:13:5f:ca:fd:26:33:15:99:40:5c:aa:f7:88:f6:dc:17: 68:a8:b6:f8:71:de:36:6f:f9:03:18:72:fd:b2:eb:98:f3:6a: 10:86:6e:01 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7kI1VlT9VLEPuBEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMVoXDTMwMDQxMTA0MDAwMFowLzEtMCsGA1UEAxMk Y2M3YzRkNGYtNmRhNS00MDMyLTg5YjMtNmY4MjM3MGQ3NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOodRePl99RnNAeA6f7h6/hEKS7jwNhG0X9v +D1BPaLW8hiUN4+NCYKZcD6HHGlXStWzRR7K3G2T2GAQ9OVfSo5dQZkLKHn8rmVi zQy/+sPtXFat2twjUKC1lAS36ihi8ezGOWMIa+bbcSRM8E24m2HjkUxtmMc2Nqhi UBAkLJ9w4ZwLQfQInCl/Y97uA4Ju2MPrfJnnNAGkDqAEcTV4NuI7LvkfU5eGI9+G NpDCZE3KD59WSPGlzoNP2gzEkhc14fPVax1Liy10dIjtV1fBxSLtbPfC0DDko1my b2k/dYZEnxnNCNKSSJcIW2y0yIkqteiJ90dIDr/kQLejx9WolQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKLRmoUBgL8hgCfGLhcWZWDdriA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYWY4YTE3MjgtODFlMS0z Y2E5LWFkM2EtNmNkMTA2ZTk0YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCSvAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQxZv9dNZH8q5u7LsSftbjUTzSL1d/4gop5eSQ5QgmYvFPdAWi0tPh3e5 LyYOVoBhjy5JQJBke0ooDM3K+QICErOfylcRoB7u/SR9Eo2TcOQlVkMOWZ/mJtqy msKFHeKZ/xghtiBSP1KbTzUYE0Kd4BV9U4DiWjZi6iNJlUsGNjCefh7x+xatwLHw caHL66Ufpn6LkBYUaa6m6omSQl0U7CNUxDRrClcAdoCOyZ5C92kHeBt2trbtM+ML Gy8G+bo/wBNJv9kAcjgcfk1XSJUAQw9/S35l7VpCbbwTX8r9JjMVmUBcqveI9twX aKi2+HHeNm/5Axhy/bLrmPNqEIZuAQ== -----END CERTIFICATE-----Generated at Fri Sep 4 23:04:21 2026 by rpki-client