$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa File: c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa (raw, json) Hash identifier: 3s+I+u2GVp3BkszzIdcSSwMEk19ZMke2XfrzxhnOTE8= Subject key identifier: 77:0C:7F:29:7D:D3:CA:D8:8A:35:20:38:E3:98:0F:1B:F7:DF:66:9D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE42357B3A83113AE0E792500 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Thu 21 Mar 2030 04:00:00 +0000 asID: 3598 IP address blocks: 167.220.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:57:b3:a8:31:13:ae:0e:79:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 21 04:00:00 2030 GMT Subject: CN=f461a8ed-bf46-41fe-9f32-9295444080de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:9b:6d:56:72:60:41:e5:67:d5:ca:23:4f: 7e:97:fc:59:5a:bd:56:38:9a:a9:d8:82:77:6a:4c: 7a:1b:40:63:66:0d:32:64:a9:e7:b9:ed:b0:32:f2: a2:a3:ff:95:cb:24:41:db:93:24:7e:d4:00:57:56: 30:36:18:8c:f7:48:2c:9e:55:e3:f9:34:eb:42:f5: 35:db:04:dd:a0:2e:29:ed:71:dc:1b:a4:5f:46:56: be:30:01:39:2d:42:ca:ad:d3:bf:0a:58:9d:12:5b: 3b:67:15:9b:52:74:fb:41:18:0f:95:ad:73:e6:56: b4:76:75:df:76:3b:c5:b6:a3:25:52:4b:6f:fc:85: 57:98:91:8d:fc:38:cb:b3:67:c5:29:45:df:48:d2: 1f:53:04:9e:34:0c:f6:84:4c:a3:6c:3e:a2:5e:ea: ea:b5:18:24:2c:29:10:2b:18:c6:20:a2:0b:89:da: 2e:5f:f5:cc:a2:db:37:f9:3d:4b:54:fc:39:b0:66: 75:25:3b:cc:f0:34:52:25:21:35:e0:99:f0:b1:9f: 0c:9e:9d:23:56:09:cb:da:8b:85:06:b5:77:c0:2a: 52:54:20:b9:a4:da:b1:bc:f0:b3:e6:e8:b9:3f:ba: d7:8b:83:2b:19:36:44:bc:73:c0:94:4d:6b:ae:22: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0C:7F:29:7D:D3:CA:D8:8A:35:20:38:E3:98:0F:1B:F7:DF:66:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8e094b9-f63d-3f6f-bdd1-65b7f476051c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 167.220.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:19:58:f2:a2:f8:3d:42:11:af:7b:c5:7a:36:da:0a:cd:88: 27:c3:c9:e1:88:ff:cc:f1:20:0a:ba:d9:57:a7:e8:ff:21:ba: 7b:23:dc:ec:f9:f4:3d:c5:ef:27:a1:01:35:3c:8b:dd:0b:0c: f2:78:69:41:75:30:8b:25:fb:36:80:8b:67:8d:e6:12:a5:d3: 6a:e6:90:5e:9a:c4:40:66:4f:bc:3a:41:0a:84:af:8a:ec:7f: 2b:d7:51:fd:8f:d9:05:ce:de:12:29:76:d3:1a:e0:b3:1f:2a: 2d:23:60:74:72:b1:88:3f:f0:b5:2a:e3:7f:e3:5b:fd:11:3c: 38:5f:05:98:9c:fa:0c:86:e9:21:ae:71:0f:8e:82:67:7f:0c: cb:5e:f6:ba:8c:d9:9e:0e:4e:df:02:5e:9c:04:51:6c:11:b1: 98:98:cd:ad:d6:44:66:e8:18:4a:7a:f0:96:86:af:14:e5:7d: 38:dd:ca:54:b5:69:70:22:7d:52:d0:69:55:9f:f7:53:dd:a5: 50:a0:39:51:c3:ad:ce:3e:56:52:bb:6e:1c:cc:62:f6:ea:71: 56:5e:3b:07:cf:6b:de:25:3e:fe:30:6b:3a:ee:0a:7e:7f:bf: 00:4d:5d:5e:0b:c5:91:38:80:d6:b1:d7:cd:78:8c:59:aa:4c: cf:f4:58:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1ezqDETrg55JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk ZjQ2MWE4ZWQtYmY0Ni00MWZlLTlmMzItOTI5NTQ0NDA4MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S+bbVZyYEHlZ9XKI09+l/xZWr1WOJqp2IJ3 akx6G0BjZg0yZKnnue2wMvKio/+VyyRB25MkftQAV1YwNhiM90gsnlXj+TTrQvU1 2wTdoC4p7XHcG6RfRla+MAE5LULKrdO/ClidEls7ZxWbUnT7QRgPla1z5la0dnXf djvFtqMlUktv/IVXmJGN/DjLs2fFKUXfSNIfUwSeNAz2hEyjbD6iXurqtRgkLCkQ KxjGIKILidouX/XMots3+T1LVPw5sGZ1JTvM8DRSJSE14JnwsZ8Mnp0jVgnL2ouF BrV3wCpSVCC5pNqxvPCz5ui5P7rXi4MrGTZEvHPAlE1rriL8zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcMfyl908rYijUgOOOYDxv332adMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzhlMDk0YjktZjYzZC0z ZjZmLWJkZDEtNjViN2Y0NzYwNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp9zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsZWPKi+D1CEa97xXo22grNiCfDyeGI/8zxIAq62Ven6P8hunsj3Oz5 9D3F7yehATU8i90LDPJ4aUF1MIsl+zaAi2eN5hKl02rmkF6axEBmT7w6QQqEr4rs fyvXUf2P2QXO3hIpdtMa4LMfKi0jYHRysYg/8LUq43/jW/0RPDhfBZic+gyG6SGu cQ+Ogmd/DMte9rqM2Z4OTt8CXpwEUWwRsZiYza3WRGboGEp68JaGrxTlfTjdylS1 aXAifVLQaVWf91PdpVCgOVHDrc4+VlK7bhzMYvbqcVZeOwfPa94lPv4wazruCn5/ vwBNXV4LxZE4gNax1814jFmqTM/0WP0= -----END CERTIFICATE-----Generated at Sat Sep 5 03:48:19 2026 by rpki-client