$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4b6e2c77-a2c6-3ca9-9410-106e3e676395.roa File: 4b6e2c77-a2c6-3ca9-9410-106e3e676395.roa (raw, json) Hash identifier: mrii9HRif/DE8FDCy9dko6ZDWRh2rZGcnb0q1Hnq19U= Subject key identifier: C9:02:B0:19:85:8D:19:65:37:33:9C:52:F5:F4:3E:1C:F3:9A:1F:92 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F04AEB0A3B446F2A31F2ACF00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4b6e2c77-a2c6-3ca9-9410-106e3e676395.roa Signing time: Mon 31 Aug 2026 09:50:40 +0000 ROA not before: Mon 31 Aug 2026 09:50:40 +0000 ROA not after: Sun 29 Nov 2026 10:50:40 +0000 asID: 16509 IP address blocks: 68.64.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:04:ae:b0:a3:b4:46:f2:a3:1f:2a:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 31 09:50:40 2026 GMT Not After : Nov 29 10:50:40 2026 GMT Subject: CN=7e8c5627-afc3-4f83-806d-3c7a967ba9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fd:2f:9b:b8:a4:82:e8:19:8f:f2:ed:e3:e1: 10:36:a1:ba:50:f7:1b:2d:b8:6c:34:02:73:63:50: fa:9a:c7:e8:82:91:fa:75:cb:bc:22:1c:02:b2:62: ef:ab:d9:ea:e2:3d:07:20:31:ee:8e:cf:09:5b:8d: 95:64:92:be:3d:ef:82:2e:09:d1:15:f9:49:14:72: be:3a:d3:e6:76:10:9d:92:6f:56:eb:4b:85:60:24: 75:3f:30:78:96:c6:3d:50:ca:6e:e0:86:34:d6:64: c4:7e:5a:85:f0:30:86:5f:ca:06:b1:63:21:72:e7: ea:fa:ec:eb:b7:18:ef:aa:e3:49:0b:b1:e2:f5:10: 4e:c6:be:52:da:f3:45:04:dc:0c:e7:35:e2:43:6b: db:1f:bb:0e:bb:38:c8:84:1c:19:56:1f:cd:c7:b7: 1e:a3:3f:42:c0:8c:24:fe:19:40:96:4c:69:da:ba: a4:83:57:81:24:74:d5:57:a1:23:51:78:02:82:67: 38:a4:c3:66:b2:b6:2c:74:50:12:7f:5a:c0:1b:ff: 0d:20:1e:43:c5:b2:7c:4e:a8:79:11:9d:d7:f4:56: 63:d0:ef:6d:95:df:42:95:8f:bd:79:f2:11:23:c7: 46:4e:13:7a:56:eb:62:45:fe:f5:99:16:4c:7a:04: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:B0:19:85:8D:19:65:37:33:9C:52:F5:F4:3E:1C:F3:9A:1F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4b6e2c77-a2c6-3ca9-9410-106e3e676395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:74:3a:82:70:cf:9e:86:c7:a7:08:cc:1c:2b:5e:a9:6c:80: 44:11:da:34:2f:05:a9:51:0a:a2:fc:e3:fb:9c:f2:4a:1b:65: e4:95:9b:0b:58:b5:fc:a3:ce:78:19:fb:5f:f2:0f:b1:7f:4e: 58:58:10:44:1c:23:f3:f3:b4:c2:4c:d3:bd:53:a6:5c:5e:db: f0:0f:b9:fd:96:6e:76:83:58:2c:15:ba:d5:9f:66:69:d4:9e: 4c:7e:4d:69:89:d4:24:06:61:fe:34:64:19:96:cd:68:ef:2a: 95:c3:b4:51:a6:63:b8:03:2c:0f:76:fb:5c:00:95:39:0b:77: 79:e9:2f:2c:07:d4:00:29:9e:77:7e:26:3f:59:e2:16:52:d9: fc:89:99:ac:6e:70:86:6e:4a:89:65:1b:33:14:ec:66:83:43: 57:0c:a0:b7:c2:01:fc:a8:33:d0:c1:19:69:c9:b2:08:5a:b5: 0e:57:5d:98:08:02:09:37:84:d7:5e:2f:e5:ce:f4:aa:b1:74: 6b:75:f5:9a:2c:eb:ef:3b:fa:cc:fc:d8:9e:98:9a:ac:05:82: 40:9c:fd:bb:6d:6c:19:09:7a:e6:08:e2:34:fd:aa:66:23:a1: f0:ba:54:c9:1b:d1:ff:24:aa:6d:1c:81:7d:f4:f9:89:f9:35: 1c:62:ae:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ErrCjtEbyox8qzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgzMTA5NTA0MFoXDTI2MTEyOTEwNTA0MFowLzEtMCsGA1UEAxMk N2U4YzU2MjctYWZjMy00ZjgzLTgwNmQtM2M3YTk2N2JhOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/0vm7ikgugZj/Lt4+EQNqG6UPcbLbhsNAJz Y1D6msfogpH6dcu8IhwCsmLvq9nq4j0HIDHujs8JW42VZJK+Pe+CLgnRFflJFHK+ OtPmdhCdkm9W60uFYCR1PzB4lsY9UMpu4IY01mTEflqF8DCGX8oGsWMhcufq+uzr txjvquNJC7Hi9RBOxr5S2vNFBNwM5zXiQ2vbH7sOuzjIhBwZVh/Nx7ceoz9CwIwk /hlAlkxp2rqkg1eBJHTVV6EjUXgCgmc4pMNmsrYsdFASf1rAG/8NIB5DxbJ8Tqh5 EZ3X9FZj0O9tld9ClY+9efIRI8dGThN6VutiRf71mRZMegTl1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkCsBmFjRllNzOcUvX0Phzzmh+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNGI2ZTJjNzctYTJjNi0z Y2E5LTk0MTAtMTA2ZTNlNjc2Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI50OoJwz56Gx6cIzBwrXqlsgEQR2jQvBalRCqL84/uc8kobZeSVmwtY tfyjzngZ+1/yD7F/TlhYEEQcI/PztMJM071Tplxe2/APuf2WbnaDWCwVutWfZmnU nkx+TWmJ1CQGYf40ZBmWzWjvKpXDtFGmY7gDLA92+1wAlTkLd3npLywH1AApnnd+ Jj9Z4hZS2fyJmaxucIZuSollGzMU7GaDQ1cMoLfCAfyoM9DBGWnJsghatQ5XXZgI Agk3hNdeL+XO9KqxdGt19Zos6+87+sz82J6YmqwFgkCc/bttbBkJeuYI4jT9qmYj ofC6VMkb0f8kqm0cgX30+Yn5NRxirqs= -----END CERTIFICATE-----Generated at Tue Sep 1 12:42:46 2026 by rpki-client