$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa File: 892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa (raw, json) Hash identifier: TYRzu2MB8JD5bk67rkkQ+voHc8HVo2vI7zZ3QCl0hNw= Subject key identifier: C3:AA:A8:6C:D3:E2:60:58:38:D5:6B:40:DE:44:64:4A:B1:77:6B:AC Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584EE38C999B5FCA96730953C280 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 68.64.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:99:9b:5f:ca:96:73:09:53:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=c423391b-5b4c-4873-8748-33668eb9ed6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:92:25:d7:67:cc:d7:ac:21:d4:b1:38:df: 8d:99:ea:fb:42:72:f5:25:bb:4c:b0:70:b3:0f:de: b6:e2:17:98:11:cb:84:9d:f6:02:d1:ff:95:70:fd: a9:87:ab:3b:3e:ea:35:41:9a:65:b7:0d:13:a6:52: 71:f3:b1:a4:41:9f:51:f4:40:1a:00:ab:7b:20:3d: 83:e5:44:1c:f5:92:79:82:5f:83:a4:c5:f5:58:94: 0b:93:6e:54:69:74:c4:39:08:5b:d3:9b:c3:d4:2e: d6:a5:59:74:44:f6:bb:a0:9d:64:64:39:d6:db:2d: 4b:3f:3b:61:7c:57:94:c8:e4:e1:bc:27:1e:6d:23: 71:40:39:0d:de:0e:83:ad:e8:11:58:68:2e:d9:9a: f5:48:b4:2e:1a:b9:9b:e9:66:52:fe:2b:b3:61:09: 2b:a1:f6:98:72:ff:49:01:d4:33:bc:7b:c5:75:d8: 03:e7:19:80:66:07:72:8d:aa:d8:a7:a0:5d:d7:1e: ea:59:c6:90:22:c4:9c:7d:cb:29:ee:58:b9:98:22: b8:41:26:75:cf:60:6c:97:8e:35:02:56:92:04:15: 2a:5e:ee:0e:7c:8c:5c:7c:51:ac:32:19:d9:7f:ed: e0:e4:d0:d1:15:21:e1:0d:0a:2b:0d:58:18:aa:af: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:A8:6C:D3:E2:60:58:38:D5:6B:40:DE:44:64:4A:B1:77:6B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/892c7153-6ef1-3d90-8a3b-81eec8ec8815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e0:aa:1c:29:17:5f:fd:76:53:d8:e3:8a:ca:5a:72:79:6b: a4:e4:e7:3b:5f:1a:8d:37:2b:4e:78:3a:e2:29:90:68:de:10: 94:d2:25:fb:bd:78:f5:31:42:90:52:41:b7:6d:8f:96:55:7a: fd:b1:82:f9:1e:36:09:79:20:50:bd:1f:69:89:e9:d3:0d:e5: 46:1f:20:0f:98:e3:68:a6:51:e2:2d:2b:4b:5d:28:e0:4a:6d: 82:09:08:4d:aa:be:97:c1:13:21:1e:50:42:91:c0:8d:8e:e0: 16:e9:e8:17:ae:f9:15:93:9e:90:8e:57:5e:77:c3:e9:32:83: 5c:64:14:f5:b2:3e:dc:9e:ad:8f:71:e1:92:01:41:b0:fc:c3: 96:9f:af:20:dd:74:46:d2:b9:f9:ad:cb:ae:ba:4e:83:10:d1: 8e:09:76:50:77:56:e4:18:7d:e4:a8:fc:64:69:fb:a0:92:3f: bd:af:28:39:c6:6a:13:83:05:2f:49:1e:d0:09:fd:6c:41:c8: 60:ec:52:77:ca:65:39:db:4b:2c:9d:24:54:00:19:49:49:4c: 9a:b3:c5:d4:5b:85:53:b8:4c:ed:7f:00:bf:55:71:88:14:e2: 3b:59:26:34:85:27:78:76:e3:34:88:79:08:c1:af:1a:e1:5a: a1:b8:11:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJmbX8qWcwlTwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk YzQyMzM5MWItNWI0Yy00ODczLTg3NDgtMzM2NjhlYjllZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWSJddnzNesIdSxON+Nmer7QnL1JbtMsHCz D9624heYEcuEnfYC0f+VcP2ph6s7Puo1QZpltw0TplJx87GkQZ9R9EAaAKt7ID2D 5UQc9ZJ5gl+DpMX1WJQLk25UaXTEOQhb05vD1C7WpVl0RPa7oJ1kZDnW2y1LPzth fFeUyOThvCcebSNxQDkN3g6DregRWGgu2Zr1SLQuGrmb6WZS/iuzYQkrofaYcv9J AdQzvHvFddgD5xmAZgdyjarYp6Bd1x7qWcaQIsScfcsp7li5mCK4QSZ1z2Bsl441 AlaSBBUqXu4OfIxcfFGsMhnZf+3g5NDRFSHhDQorDVgYqq/WwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOqqGzT4mBYONVrQN5EZEqxd2usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODkyYzcxNTMtNmVmMS0z ZDkwLThhM2ItODFlZWM4ZWM4ODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvgqhwpF1/9dlPY44rKWnJ5a6Tk5ztfGo03K054OuIpkGjeEJTSJfu9 ePUxQpBSQbdtj5ZVev2xgvkeNgl5IFC9H2mJ6dMN5UYfIA+Y42imUeItK0tdKOBK bYIJCE2qvpfBEyEeUEKRwI2O4Bbp6Beu+RWTnpCOV153w+kyg1xkFPWyPtyerY9x 4ZIBQbD8w5afryDddEbSufmty666ToMQ0Y4JdlB3VuQYfeSo/GRp+6CSP72vKDnG ahODBS9JHtAJ/WxByGDsUnfKZTnbSyydJFQAGUlJTJqzxdRbhVO4TO1/AL9VcYgU 4jtZJjSFJ3h24zSIeQjBrxrhWqG4Eak= -----END CERTIFICATE-----Generated at Thu Aug 20 21:58:02 2026 by rpki-client