$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c42508f1-d7e3-39fc-af69-fc2e4f5d7bbd.roa File: c42508f1-d7e3-39fc-af69-fc2e4f5d7bbd.roa (raw, json) Hash identifier: qJH+EWNC8ci/x0bvx2irkyXMFnknY5WlBndbRKzBVh4= Subject key identifier: 40:50:5E:07:E1:EB:35:7A:F9:19:E1:FB:91:9A:81:A9:34:C8:07:53 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42352FD71F020A3DBD379E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c42508f1-d7e3-39fc-af69-fc2e4f5d7bbd.roa Signing time: Wed 19 Aug 2026 18:03:59 +0000 ROA not before: Wed 19 Aug 2026 18:03:59 +0000 ROA not after: Sat 02 Mar 2030 05:00:00 +0000 asID: 8068 IP address blocks: 40.90.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:52:fd:71:f0:20:a3:db:d3:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:59 2026 GMT Not After : Mar 2 05:00:00 2030 GMT Subject: CN=baace380-6595-4bdd-9cf0-00c44775d535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:cf:07:dd:93:dc:b5:a9:22:b5:6e:8c:e1: 91:04:fc:3e:43:7d:da:25:25:76:cd:d9:c3:11:eb: 15:af:16:72:37:f4:75:a1:21:72:e0:a6:86:5c:73: 7b:1a:07:9f:de:09:76:1b:fd:fc:c7:99:2b:d3:77: a6:28:eb:4d:c0:2e:57:27:03:19:64:dc:55:8c:38: 80:f8:fe:d2:f2:3e:f5:1a:2b:5a:fd:fb:c6:08:34: 3e:e7:cc:d7:be:38:24:3a:4e:23:c8:79:34:ba:76: bb:14:75:ab:77:94:30:e5:d9:1e:9b:8c:d7:d5:d2: a3:40:9b:5e:af:d1:b7:93:22:26:d5:af:f9:90:c0: 24:46:6b:07:9a:81:ff:51:05:2f:7b:c6:9d:2e:6f: 32:7b:7f:44:d3:f9:1b:3f:3b:94:7b:5f:dd:37:bb: 13:f3:16:f1:3d:67:38:ab:12:36:ed:fc:45:4c:67: fb:8e:e4:55:f3:41:f2:86:4f:37:0b:44:1d:e7:c2: fb:29:2c:f7:f0:f8:68:a7:93:91:55:af:48:a8:7c: c6:34:17:24:ff:e3:55:a4:e4:2d:cd:ca:40:f2:87: 78:01:31:2e:ed:8d:c4:2b:bf:67:a5:d2:23:4e:67: c4:3f:24:f2:70:b7:96:a1:e3:0d:75:63:6d:96:2f: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:5E:07:E1:EB:35:7A:F9:19:E1:FB:91:9A:81:A9:34:C8:07:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c42508f1-d7e3-39fc-af69-fc2e4f5d7bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.90.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:66:61:cd:41:73:ed:15:25:bc:f8:01:23:34:f9:62:17:f3: 9d:3f:a7:42:08:4c:14:8e:71:94:12:a1:64:83:90:07:ff:2e: 74:bc:29:37:c2:ed:15:7c:e8:96:0f:e4:94:ac:f1:ba:d2:25: 20:11:79:ce:56:7e:14:fc:d3:de:6c:8f:20:7c:c2:a4:ce:7d: 82:2d:e9:a3:ce:70:96:3f:3b:84:bf:44:3b:d6:00:c2:26:bd: 04:61:c5:b7:0c:76:23:4a:c1:d4:b2:11:d9:9c:68:3b:30:eb: d3:b0:60:11:f2:63:f7:b3:0a:57:ee:c3:40:b2:32:42:73:38: 1f:ed:f0:ce:e7:e0:3b:85:7e:77:d5:41:61:ec:fe:ac:84:c8: 0c:d8:47:9d:2a:c0:ce:13:55:41:7e:24:d3:1d:00:2f:1f:5d: e6:dd:6d:80:cd:43:33:7f:98:bf:ad:aa:34:84:88:7a:f6:32: 8d:83:87:b8:57:98:99:19:fb:df:30:91:13:d4:d9:10:93:cb: 05:14:3c:46:cf:ee:f9:66:92:5d:15:9e:c2:f7:b7:05:d9:d4: dc:1d:aa:8f:77:c5:cd:67:64:d6:36:ab:bb:21:eb:11:42:29: e4:a8:0a:bd:82:3f:68:4c:59:c5:32:d7:24:e0:8e:a1:13:d7: e3:2f:4f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1L9cfAgo9vTeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk YmFhY2UzODAtNjU5NS00YmRkLTljZjAtMDBjNDQ3NzVkNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDvPB92T3LWpIrVujOGRBPw+Q33aJSV2zdnD EesVrxZyN/R1oSFy4KaGXHN7Ggef3gl2G/38x5kr03emKOtNwC5XJwMZZNxVjDiA +P7S8j71Gita/fvGCDQ+58zXvjgkOk4jyHk0una7FHWrd5Qw5dkem4zX1dKjQJte r9G3kyIm1a/5kMAkRmsHmoH/UQUve8adLm8ye39E0/kbPzuUe1/dN7sT8xbxPWc4 qxI27fxFTGf7juRV80Hyhk83C0Qd58L7KSz38Phop5ORVa9IqHzGNBck/+NVpOQt zcpA8od4ATEu7Y3EK79npdIjTmfEPyTycLeWoeMNdWNtli8lSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBQXgfh6zV6+Rnh+5Gagak0yAdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzQyNTA4ZjEtZDdlMy0z OWZjLWFmNjktZmMyZTRmNWQ3YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxmYc1Bc+0VJbz4ASM0+WIX850/p0IITBSOcZQSoWSDkAf/LnS8KTfC 7RV86JYP5JSs8brSJSARec5WfhT8095sjyB8wqTOfYIt6aPOcJY/O4S/RDvWAMIm vQRhxbcMdiNKwdSyEdmcaDsw69OwYBHyY/ezClfuw0CyMkJzOB/t8M7n4DuFfnfV QWHs/qyEyAzYR50qwM4TVUF+JNMdAC8fXebdbYDNQzN/mL+tqjSEiHr2Mo2Dh7hX mJkZ+98wkRPU2RCTywUUPEbP7vlmkl0VnsL3twXZ1Nwdqo93xc1nZNY2q7sh6xFC KeSoCr2CP2hMWcUy1yTgjqET1+MvT+k= -----END CERTIFICATE-----Generated at Sat Sep 5 05:02:54 2026 by rpki-client