$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff0f875b-bc85-3883-84c0-63583152443e.roa File: ff0f875b-bc85-3883-84c0-63583152443e.roa (raw, json) Hash identifier: bMfxJM9SN+iFa8JW5dOcTyY+BdIoHvzJ5sHqxsERNRs= Subject key identifier: 1E:94:72:20:AB:94:75:CB:05:AE:84:60:81:64:29:A1:0A:41:F4:9B Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE423596E8B67FE79C4E22A00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff0f875b-bc85-3883-84c0-63583152443e.roa Signing time: Wed 19 Aug 2026 18:04:02 +0000 ROA not before: Wed 19 Aug 2026 18:04:02 +0000 ROA not after: Fri 08 Mar 2030 05:00:00 +0000 asID: 8075 IP address blocks: 40.108.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:59:6e:8b:67:fe:79:c4:e2:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:02 2026 GMT Not After : Mar 8 05:00:00 2030 GMT Subject: CN=6280baf4-2188-4d48-a9e6-ae0a304ab7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:83:95:48:58:36:c6:f9:e4:b0:9e:e8:32: 18:cb:ce:83:44:d4:f2:c8:1a:2d:6e:7c:3d:8e:3d: 6f:73:42:20:02:f4:b3:cb:ab:3b:05:c9:01:1b:cb: cc:87:56:e0:cc:13:c0:2d:42:43:4e:a4:37:cb:48: ea:0b:04:47:75:49:93:7c:fb:0e:f3:bd:f4:f5:af: ba:92:2e:bb:86:cf:55:72:55:22:9e:7a:15:96:b8: 1b:c7:27:5a:fd:41:d8:af:8d:b1:8d:d4:0b:97:e8: 28:fe:b7:1a:78:42:44:55:79:1b:8a:2f:3d:ac:17: 4f:8a:0b:bb:27:f2:fa:dd:32:46:a6:38:cd:0e:23: 57:bd:ff:70:87:66:b7:e7:88:33:dc:03:06:84:69: ea:13:c5:26:2c:80:4d:c8:aa:50:47:fe:4e:28:96: 37:67:69:27:7a:e2:f0:78:52:eb:73:6a:cd:26:ed: 86:7a:78:43:80:df:60:dc:aa:0e:48:0f:0f:3c:4f: 29:a4:5f:54:ed:d4:c8:45:53:f6:a7:5c:47:ab:80: 09:e4:f3:9c:fa:d1:95:be:ac:27:54:4e:72:75:b5: 9a:84:c8:ae:46:3a:cc:4c:db:17:86:c4:78:68:d8: 29:95:e0:ea:bc:82:f0:6b:ce:77:50:fc:ca:c0:51: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:72:20:AB:94:75:CB:05:AE:84:60:81:64:29:A1:0A:41:F4:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ff0f875b-bc85-3883-84c0-63583152443e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.108.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:33:d3:de:2e:63:d7:01:5b:c9:ff:d8:84:4c:6d:ba:c0:d6: 5e:a2:dc:24:72:9b:78:5d:2a:90:60:d7:68:0f:45:df:b2:7a: 6c:a8:7d:99:02:0d:c8:3b:ac:9e:f1:21:64:7f:73:88:2c:08: dc:ea:b2:52:57:47:fa:c9:2b:a3:ff:23:22:19:32:0d:c0:26: 89:01:9d:bf:3c:e6:af:cc:51:d6:88:1e:d4:ec:c4:76:6e:06: e1:37:1c:4c:0c:fd:9a:90:1a:df:1c:49:26:ad:a2:1c:ad:4f: 40:d0:57:9a:a9:34:38:6d:d6:1d:06:33:15:b0:27:a4:63:62: 64:85:e6:2e:76:a8:0f:82:01:ab:89:41:4c:e1:8c:81:ed:99: a3:42:b3:9b:31:b8:32:d2:8d:b9:d1:6b:dc:4b:bc:41:09:38: 9b:9b:23:af:45:47:ac:5f:c1:f4:72:f3:db:85:a2:ac:97:ae: b4:f6:83:09:a5:47:2f:6c:e2:8d:c1:15:03:a6:63:4e:11:7c: aa:97:6e:2a:f2:78:5b:56:25:96:65:44:b6:0d:79:ac:0c:82: 71:35:23:82:59:1c:00:5e:f0:c5:5b:83:a3:88:35:ed:cf:84: d2:e5:db:a7:70:c5:63:95:2f:94:4a:63:51:2f:26:4c:3a:97: 9a:d3:46:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1lui2f+ecTiKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwMloXDTMwMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk NjI4MGJhZjQtMjE4OC00ZDQ4LWE5ZTYtYWUwYTMwNGFiN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTKDlUhYNsb55LCe6DIYy86DRNTyyBotbnw9 jj1vc0IgAvSzy6s7BckBG8vMh1bgzBPALUJDTqQ3y0jqCwRHdUmTfPsO87309a+6 ki67hs9VclUinnoVlrgbxyda/UHYr42xjdQLl+go/rcaeEJEVXkbii89rBdPigu7 J/L63TJGpjjNDiNXvf9wh2a354gz3AMGhGnqE8UmLIBNyKpQR/5OKJY3Z2kneuLw eFLrc2rNJu2GenhDgN9g3KoOSA8PPE8ppF9U7dTIRVP2p1xHq4AJ5POc+tGVvqwn VE5ydbWahMiuRjrMTNsXhsR4aNgpleDqvILwa853UPzKwFGlYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6UciCrlHXLBa6EYIFkKaEKQfSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZmYwZjg3NWItYmM4NS0z ODgzLTg0YzAtNjM1ODMxNTI0NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKGyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMz094uY9cBW8n/2IRMbbrA1l6i3CRym3hdKpBg12gPRd+yemyofZkC Dcg7rJ7xIWR/c4gsCNzqslJXR/rJK6P/IyIZMg3AJokBnb885q/MUdaIHtTsxHZu BuE3HEwM/ZqQGt8cSSatohytT0DQV5qpNDht1h0GMxWwJ6RjYmSF5i52qA+CAauJ QUzhjIHtmaNCs5sxuDLSjbnRa9xLvEEJOJubI69FR6xfwfRy89uFoqyXrrT2gwml Ry9s4o3BFQOmY04RfKqXbiryeFtWJZZlRLYNeawMgnE1I4JZHABe8MVbg6OINe3P hNLl26dwxWOVL5RKY1EvJkw6l5rTRnM= -----END CERTIFICATE-----Generated at Fri Sep 4 22:29:26 2026 by rpki-client