$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa File: d521f734-db06-319b-86f6-7e5aa43f218e.roa (raw, json) Hash identifier: ++B2ZmwP0zPewtg3JXAhq3hCioB6zDw6qCH0eX+XDrg= Subject key identifier: F7:95:C8:60:1A:C3:21:7A:66:0F:D6:F1:33:A1:1C:15:E0:EA:90:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB76AC919766A6E27821500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:6a:c9:19:76:6a:6e:27:82:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=9968ac15-5645-4545-ad16-0ae1816685cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:eb:0b:aa:2d:99:3f:ad:d5:58:01:46:50: ac:b8:38:fb:aa:11:fc:c9:69:8c:f6:36:11:e0:18: e7:68:24:af:97:d0:fe:4c:0d:9d:b4:0b:1d:fa:b2: f6:92:64:da:44:97:35:02:b9:bf:06:ee:bf:1c:21: c8:f6:84:e4:7b:6c:84:d0:1f:05:76:d7:28:02:50: 91:77:17:3c:df:44:e9:60:39:15:39:75:73:57:6e: 65:83:4c:bd:09:e4:b1:c7:3e:54:99:f5:59:89:70: bf:39:fe:a2:12:d2:a7:91:e6:1d:b1:77:69:cd:49: 15:43:f8:0b:6d:b1:00:c7:0a:61:0d:40:ce:7e:6f: 80:02:27:f6:a9:fb:ec:30:42:0b:95:b2:4c:56:7d: 32:e1:f1:89:44:5b:50:d9:7c:1a:b7:f8:15:4e:27: db:e8:ed:3b:24:3e:b5:f7:3a:ef:d6:37:79:44:a3: 95:2e:0c:54:c7:ff:b4:9a:81:58:31:11:a7:c3:ff: e7:4a:ae:8b:54:d4:6a:db:10:2d:51:17:d4:b5:f1: f5:ad:55:5a:13:08:29:b6:c2:55:c9:a9:33:4f:eb: 27:80:36:60:af:fe:d3:6b:1f:40:93:32:52:17:13: 7a:c2:19:5e:2e:48:a5:20:0e:e5:67:d9:0f:53:6c: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:C8:60:1A:C3:21:7A:66:0F:D6:F1:33:A1:1C:15:E0:EA:90:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d521f734-db06-319b-86f6-7e5aa43f218e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.131.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:99:e0:62:45:8a:d6:a4:b3:99:70:b1:a2:99:dd:98:0b:a4: ef:c9:45:04:e2:02:4c:82:87:73:55:70:59:01:7b:90:89:1b: f8:81:fe:df:f2:e1:36:55:4b:6d:c9:8c:7d:24:05:d1:42:18: 9b:ea:cb:ff:1e:db:11:bd:df:06:d8:30:32:1e:8c:d9:39:03: 2b:2b:f9:a0:fb:65:b8:bf:18:85:86:20:cc:57:f5:04:64:77: 91:c0:0a:aa:64:ab:56:0b:a4:f4:f7:19:66:af:16:eb:9e:da: 29:c0:42:3f:75:fd:4e:95:85:30:30:7e:43:41:16:60:30:19: 7c:66:1b:9c:e6:ae:13:1d:e2:af:64:8d:7b:b5:f2:d3:a0:40: 10:4a:c4:12:83:ee:b5:0d:cc:9f:29:b9:20:d6:a4:f2:12:40: b6:45:ff:f1:b1:fb:88:77:e5:15:a0:84:43:77:27:d5:08:6c: 44:e1:e4:cc:cd:1a:14:32:3f:50:b7:e2:29:db:24:59:bb:82: 90:5c:e6:ef:63:12:26:da:a5:9e:21:55:36:8a:e4:51:7b:6d: 8f:81:36:4f:79:1b:3c:83:80:60:78:da:36:99:66:50:9b:e6: 74:e6:43:ce:22:47:d5:61:5e:7d:47:ed:cb:64:33:57:40:9d: 06:1f:65:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7ut2rJGXZqbieCFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTk2OGFjMTUtNTY0NS00NTQ1LWFkMTYtMGFlMTgxNjY4NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+DrC6otmT+t1VgBRlCsuDj7qhH8yWmM9jYR 4BjnaCSvl9D+TA2dtAsd+rL2kmTaRJc1Arm/Bu6/HCHI9oTke2yE0B8FdtcoAlCR dxc830TpYDkVOXVzV25lg0y9CeSxxz5UmfVZiXC/Of6iEtKnkeYdsXdpzUkVQ/gL bbEAxwphDUDOfm+AAif2qfvsMEILlbJMVn0y4fGJRFtQ2Xwat/gVTifb6O07JD61 9zrv1jd5RKOVLgxUx/+0moFYMRGnw//nSq6LVNRq2xAtURfUtfH1rVVaEwgptsJV yakzT+sngDZgr/7Tax9AkzJSFxN6whleLkilIA7lZ9kPU2zCqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPeVyGAawyF6Zg/W8TOhHBXg6pBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDUyMWY3MzQtZGIwNi0z MTliLTg2ZjYtN2U1YWE0M2YyMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARIMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfpngYkWK1qSzmXCxopndmAuk78lFBOICTIKHc1VwWQF7kIkb+IH+3/Lh NlVLbcmMfSQF0UIYm+rL/x7bEb3fBtgwMh6M2TkDKyv5oPtluL8YhYYgzFf1BGR3 kcAKqmSrVguk9PcZZq8W657aKcBCP3X9TpWFMDB+Q0EWYDAZfGYbnOauEx3ir2SN e7Xy06BAEErEEoPutQ3Mnym5INak8hJAtkX/8bH7iHflFaCEQ3cn1QhsROHkzM0a FDI/ULfiKdskWbuCkFzm72MSJtqlniFVNorkUXttj4E2T3kbPIOAYHjaNplmUJvm dOZDziJH1WFefUfty2QzV0CdBh9lBQ== -----END CERTIFICATE-----Generated at Sun Sep 13 19:43:24 2026 by rpki-client