$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: Q0DPMplke/0lx6a9sTF5wkqiFDen+m7OpNr57HWlZlI= Subject key identifier: A9:EF:8F:9C:55:8D:99:E8:8C:AD:61:71:B8:E7:68:BA:12:72:2E:68 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB76AB1BDB36EA346BB8D28 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:6a:b1:bd:b3:6e:a3:46:bb:8d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=a5bd1fb9-e370-4ab7-bb1e-84a47ddfa8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:f4:a2:05:6e:f0:b9:a0:d9:5c:e9:f5:c5: 51:b1:af:5f:14:b4:a3:86:95:d7:8f:db:a1:a6:e2: cc:2f:e7:d5:24:e8:ff:3f:45:5a:34:68:a5:34:b9: 29:b7:3d:08:69:12:f0:f4:87:d2:03:f0:79:35:b6: 3c:11:e3:e3:a4:69:f0:36:fa:a1:0b:7d:a8:15:c8: c3:f9:02:05:3f:e7:c9:96:ac:f4:47:b9:6e:e0:78: d2:76:dc:83:b8:25:ac:0c:76:5d:2b:ee:c0:af:b1: 36:0d:a5:f0:cf:c4:a4:28:39:e0:a0:f0:4a:9a:9b: 2f:69:f1:3b:d2:2f:3d:c5:35:0e:15:66:d3:d4:d0: c4:c3:f9:6e:75:a3:71:8a:db:ef:f4:65:e5:de:f5: 0d:8d:4d:20:33:55:bd:05:d0:68:96:ab:76:06:95: c3:c4:5b:a9:c6:c9:91:85:09:84:be:29:8c:f2:b3: 39:c0:c6:ea:5c:6b:5c:c8:a1:12:1e:28:b1:c2:0d: d6:49:b1:29:4e:80:b6:a2:71:75:d3:18:d1:dc:90: a4:83:da:7b:96:a0:d8:4e:8d:8b:07:c5:ef:2d:66: c0:e4:48:fe:12:0f:45:40:bb:47:8c:f7:3f:d1:96: 0a:01:ea:ed:08:ad:fd:a7:39:72:ed:72:3d:db:04: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EF:8F:9C:55:8D:99:E8:8C:AD:61:71:B8:E7:68:BA:12:72:2E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f4:83:92:99:ba:ce:6b:26:6c:e8:56:cf:b6:ef:c3:08:7b: d2:63:cb:7a:90:2a:e0:f7:1c:56:b3:f9:ac:5e:d8:35:3f:68: 9d:24:91:fb:e2:92:30:ba:0e:a2:f8:b1:45:6d:72:2b:50:10: 25:52:f1:00:57:74:ca:a2:aa:16:7d:61:25:67:1f:8e:9c:0f: a2:e9:8f:19:50:92:fa:d2:4a:cb:b6:a7:97:e5:0e:f4:75:e0: 24:d0:dc:4f:6c:8c:d2:9b:69:05:85:b3:83:12:3a:22:31:ab: fb:3e:d0:00:53:e1:81:df:71:55:7d:e1:4e:c2:f3:45:f8:96: b1:e2:2b:40:a0:c8:01:ed:90:97:45:f0:6b:53:a7:3a:d6:77: 61:a5:1f:c5:91:ad:06:89:e0:10:ec:f1:5a:c7:f7:e9:bf:52: 68:2c:90:29:0c:57:9c:e7:2e:97:fa:04:48:87:dc:93:12:33: 35:2f:e3:0a:a2:f5:50:9f:42:31:d5:c3:de:24:30:0d:b8:01: 18:51:dd:a9:88:f2:6b:0d:14:22:2f:c1:5f:72:3c:e7:2c:87: fa:22:13:78:ce:eb:23:f3:33:70:c6:91:2a:9a:b4:72:33:1c: 85:0b:b8:cd:5b:f2:12:00:3b:93:67:55:f6:49:29:58:f2:dc: 8d:f9:17:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2qxvbNuo0a7jSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk YTViZDFmYjktZTM3MC00YWI3LWJiMWUtODRhNDdkZGZhOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4f0ogVu8Lmg2Vzp9cVRsa9fFLSjhpXXj9uh puLML+fVJOj/P0VaNGilNLkptz0IaRLw9IfSA/B5NbY8EePjpGnwNvqhC32oFcjD +QIFP+fJlqz0R7lu4HjSdtyDuCWsDHZdK+7Ar7E2DaXwz8SkKDngoPBKmpsvafE7 0i89xTUOFWbT1NDEw/ludaNxitvv9GXl3vUNjU0gM1W9BdBolqt2BpXDxFupxsmR hQmEvimM8rM5wMbqXGtcyKESHiixwg3WSbEpToC2onF10xjR3JCkg9p7lqDYTo2L B8XvLWbA5Ej+Eg9FQLtHjPc/0ZYKAertCK39pzly7XI92wRSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnvj5xVjZnojK1hcbjnaLoSci5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf0g5KZus5rJmzoVs+278MIe9Jjy3qQKuD3HFaz+axe2DU/aJ0kkfvi kjC6DqL4sUVtcitQECVS8QBXdMqiqhZ9YSVnH46cD6LpjxlQkvrSSsu2p5flDvR1 4CTQ3E9sjNKbaQWFs4MSOiIxq/s+0ABT4YHfcVV94U7C80X4lrHiK0CgyAHtkJdF 8GtTpzrWd2GlH8WRrQaJ4BDs8VrH9+m/UmgskCkMV5znLpf6BEiH3JMSMzUv4wqi 9VCfQjHVw94kMA24ARhR3amI8msNFCIvwV9yPOcsh/oiE3jO6yPzM3DGkSqatHIz HIULuM1b8hIAO5NnVfZJKVjy3I35FyA= -----END CERTIFICATE-----Generated at Sun Sep 13 16:40:26 2026 by rpki-client