$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa File: 98414261-a9c5-331c-907b-334e7923dd0d.roa (raw, json) Hash identifier: 6JYO+1wzA3VXTxG46qXqjDincyF+CWBeP30rY5pBoMk= Subject key identifier: 5B:FA:99:D4:24:80:3B:B1:A9:BA:B3:63:92:24:25:AE:AC:F1:05:11 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584F9A686195A678E78024E49EB0 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 3356 IP address blocks: 68.67.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:61:95:a6:78:e7:80:24:e4:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=dad6812e-1b66-4bc0-8a27-8d8ea24edd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:48:d0:e5:a1:5f:46:20:6a:fd:b0:d4:4e: 00:15:9e:df:0f:96:46:21:8c:24:7e:c6:8c:da:fa: 14:9c:66:66:06:63:43:b1:fc:97:e8:28:22:84:84: 94:e0:26:3e:e1:10:71:96:b3:f1:ea:27:81:3d:b1: 26:f7:c5:da:ea:28:73:7f:d4:93:af:12:9e:74:2b: 9f:80:31:eb:29:6e:60:8e:9c:9d:f8:13:0b:f5:d9: 42:c7:75:62:3b:29:03:89:88:26:82:42:e4:77:ec: 48:8a:a9:3e:e5:c9:a9:95:85:b6:ae:62:c0:2c:0f: 58:de:f9:13:ac:26:73:58:07:4b:5e:88:72:56:d0: 5d:1a:8a:2c:31:23:00:1e:6d:19:e6:73:93:f1:ca: 46:7d:41:78:14:ce:25:e4:95:d6:52:27:ea:f6:c6: 6b:ef:75:06:30:ed:b9:5c:38:cc:c8:d3:5c:87:a1: 76:eb:fe:80:04:46:5a:c1:96:75:b8:68:f5:20:bd: f0:2e:a8:45:42:0f:f6:ce:2e:ee:c7:98:83:70:bf: c3:0b:45:0a:5d:8f:5f:63:ad:46:56:05:4c:2c:ef: f0:66:22:ed:70:36:2e:d0:e4:97:7a:e1:d5:ce:0c: 4e:6b:87:48:ad:6c:5a:81:5b:8b:5f:c1:4d:86:47: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:99:D4:24:80:3B:B1:A9:BA:B3:63:92:24:25:AE:AC:F1:05:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 68.67.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c0:b0:e4:b1:ed:4e:b1:fa:b0:17:d4:fd:b3:71:7a:33:d2: 32:8a:e6:f7:22:1b:9e:fd:64:81:28:48:0d:89:45:4a:de:35: 4e:50:2e:24:4f:00:26:0f:e4:7a:00:0c:1e:df:d9:c5:2c:bd: 43:5a:48:7d:30:e0:e8:01:a5:6b:ae:46:a9:24:d5:45:46:14: b6:a2:b6:e7:bf:a7:3e:6b:4a:d0:80:03:f3:ca:24:4a:ec:c8: 17:25:66:9d:ef:04:5c:45:48:5b:c3:e5:b7:0f:97:ed:3e:ad: 23:e7:74:12:dc:64:f7:37:62:38:5b:cc:aa:59:6e:f4:57:38: 25:49:e5:0e:b0:ff:34:ce:0c:4d:47:89:94:98:8d:9d:13:33: d9:cd:eb:4f:23:58:83:7c:18:43:20:c2:fe:e3:cc:70:ec:7e: c2:ac:07:c8:04:46:e1:2c:8b:8d:1c:72:bd:73:53:9f:ed:bf: 21:1d:05:19:8d:11:5f:84:20:e2:5c:11:85:fa:35:b0:5b:61: c3:5c:99:8e:21:8f:34:4d:e2:3d:a5:ba:1b:66:b2:43:49:b4: d0:a1:21:9b:0e:79:22:d8:9f:9a:9c:90:ab:ae:a2:40:85:d4: 38:46:be:00:3e:8b:51:f0:fe:8e:79:56:9c:63:f4:28:2c:c2: 44:03:96:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGGVpnjngCTknrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGFkNjgxMmUtMWI2Ni00YmMwLThhMjctOGQ4ZWEyNGVkZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWJI0OWhX0Ygav2w1E4AFZ7fD5ZGIYwkfsaM 2voUnGZmBmNDsfyX6CgihISU4CY+4RBxlrPx6ieBPbEm98Xa6ihzf9STrxKedCuf gDHrKW5gjpyd+BML9dlCx3ViOykDiYgmgkLkd+xIiqk+5cmplYW2rmLALA9Y3vkT rCZzWAdLXohyVtBdGoosMSMAHm0Z5nOT8cpGfUF4FM4l5JXWUifq9sZr73UGMO25 XDjMyNNch6F26/6ABEZawZZ1uGj1IL3wLqhFQg/2zi7ux5iDcL/DC0UKXY9fY61G VgVMLO/wZiLtcDYu0OSXeuHVzgxOa4dIrWxagVuLX8FNhke9pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv6mdQkgDuxqbqzY5IkJa6s8QURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvOTg0MTQyNjEtYTljNS0z MzFjLTkwN2ItMzM0ZTc5MjNkZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXAsOSx7U6x+rAX1P2zcXoz0jKK5vciG579ZIEoSA2JRUreNU5QLiRP ACYP5HoADB7f2cUsvUNaSH0w4OgBpWuuRqkk1UVGFLaitue/pz5rStCAA/PKJErs yBclZp3vBFxFSFvD5bcPl+0+rSPndBLcZPc3YjhbzKpZbvRXOCVJ5Q6w/zTODE1H iZSYjZ0TM9nN608jWIN8GEMgwv7jzHDsfsKsB8gERuEsi40ccr1zU5/tvyEdBRmN EV+EIOJcEYX6NbBbYcNcmY4hjzRN4j2luhtmskNJtNChIZsOeSLYn5qckKuuokCF 1DhGvgA+i1Hw/o55Vpxj9CgswkQDlvY= -----END CERTIFICATE-----Generated at Mon Nov 2 11:52:24 2026 by rpki-client