$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa File: e68b221b-741d-34a1-b72f-7ae3905f31f5.roa (raw, json) Hash identifier: grCG3hzFY3c7pwLpJ53CKwmEI0RBRqKHwq+2ZJzjln0= Subject key identifier: 18:5C:87:92:2B:01:4C:CD:2A:A4:22:58:A6:2C:C2:33:9E:63:93:2C Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F093CD8A88AB6CDD33D813EE8 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 23.239.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d8:a8:8a:b6:cd:d3:3d:81:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7db902fa-0c35-459a-a98b-ec6342681f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:52:f8:52:88:fa:09:66:c6:c1:83:50:8a:11: 13:76:22:95:27:62:02:c4:f2:fe:fc:c6:09:38:bf: 56:5a:c3:74:92:a1:97:e5:7f:78:82:ff:72:07:b5: 92:c4:f8:fa:51:95:12:2e:e9:3a:9a:c6:cb:d9:7b: 66:95:55:c2:47:b1:c0:c0:39:39:15:6b:27:dd:32: 8f:39:13:38:53:22:f7:b1:43:15:21:af:3e:00:52: a1:ab:a9:b9:ea:97:75:80:63:44:a1:d5:93:1b:f6: 97:5d:9b:50:f9:2b:0a:e8:f5:67:7e:4c:36:7c:64: 4a:2e:3e:d4:89:32:22:62:99:ab:f2:f2:bb:11:2d: 01:c9:f4:99:d2:7e:d5:6d:c5:53:15:c3:44:8b:56: 1c:b7:87:d1:74:a5:c4:e1:b4:02:98:4a:b0:4c:20: 19:ff:dd:9a:5a:29:79:30:01:f3:7d:fe:c3:38:14: 80:5f:fd:70:4a:b8:62:e1:1a:d1:68:ab:d6:be:cd: fd:80:03:31:cd:02:3d:83:8a:a9:d4:d3:13:04:a9: 5e:97:d6:97:9e:13:e0:50:34:53:85:2c:f7:3d:0a: 19:5c:10:73:ad:cc:94:cd:57:de:c8:8c:93:04:5b: e9:3b:ad:8a:e8:c1:21:a1:aa:8f:7c:16:f6:a3:bb: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:87:92:2B:01:4C:CD:2A:A4:22:58:A6:2C:C2:33:9E:63:93:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/e68b221b-741d-34a1-b72f-7ae3905f31f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:55:ea:e2:78:da:85:6b:67:9d:a5:ce:2e:e4:4e:b5:78:98: e2:af:28:fa:3c:8f:3c:50:1b:9d:1e:79:18:84:96:d3:23:a3: ba:9b:67:15:9a:72:ed:0c:65:99:d3:0c:27:59:8e:05:b5:9b: 49:8b:8d:ae:fa:2b:76:83:36:d9:ba:bf:1c:25:a3:2b:60:43: 0b:c4:29:59:32:db:31:a4:f4:14:0f:6d:ca:e4:40:b3:52:de: 5e:8d:ab:fa:c4:c3:f3:a0:dc:73:55:e2:12:03:c6:9a:ed:69: 29:7d:e3:c1:b6:8b:b9:19:81:ce:30:d1:36:eb:01:4b:03:f2: 5e:b8:72:0d:3d:e7:51:f2:ad:6d:d2:05:6b:6e:3e:98:9a:d9: 0b:71:33:96:3a:e3:e9:75:5f:d4:17:a7:30:1b:e6:e4:37:5a: 16:ea:22:04:59:20:14:46:a6:dd:a8:c8:be:68:b4:04:fd:60: ae:18:26:d8:e9:31:97:d6:9a:a5:7d:1f:b4:7e:07:ab:7d:69: 8c:2c:43:4a:83:4b:94:b4:ac:a5:b8:5d:2a:73:00:52:04:23: f4:66:2d:c9:28:e8:97:1b:d1:ea:c1:7b:e0:03:b5:3b:40:52: 6d:60:2b:66:bf:5d:eb:eb:db:2b:43:5d:ce:f4:a5:4b:0a:32: bf:ee:5b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNioirbN0z2BPugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2RiOTAyZmEtMGMzNS00NTlhLWE5OGItZWM2MzQyNjgxZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71L4Uoj6CWbGwYNQihETdiKVJ2ICxPL+/MYJ OL9WWsN0kqGX5X94gv9yB7WSxPj6UZUSLuk6msbL2XtmlVXCR7HAwDk5FWsn3TKP ORM4UyL3sUMVIa8+AFKhq6m56pd1gGNEodWTG/aXXZtQ+SsK6PVnfkw2fGRKLj7U iTIiYpmr8vK7ES0ByfSZ0n7VbcVTFcNEi1Yct4fRdKXE4bQCmEqwTCAZ/92aWil5 MAHzff7DOBSAX/1wSrhi4RrRaKvWvs39gAMxzQI9g4qp1NMTBKlel9aXnhPgUDRT hSz3PQoZXBBzrcyUzVfeyIyTBFvpO62K6MEhoaqPfBb2o7stKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhch5IrAUzNKqQiWKYswjOeY5MsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZTY4YjIyMWItNzQxZC0z NGExLWI3MmYtN2FlMzkwNWYzMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1V6uJ42oVrZ52lzi7kTrV4mOKvKPo8jzxQG50eeRiEltMjo7qbZxWa cu0MZZnTDCdZjgW1m0mLja76K3aDNtm6vxwloytgQwvEKVky2zGk9BQPbcrkQLNS 3l6Nq/rEw/Og3HNV4hIDxprtaSl948G2i7kZgc4w0TbrAUsD8l64cg0951HyrW3S BWtuPpia2QtxM5Y64+l1X9QXpzAb5uQ3WhbqIgRZIBRGpt2oyL5otAT9YK4YJtjp MZfWmqV9H7R+B6t9aYwsQ0qDS5S0rKW4XSpzAFIEI/RmLcko6Jcb0erBe+ADtTtA Um1gK2a/Xevr2ytDXc70pUsKMr/uWxw= -----END CERTIFICATE-----Generated at Sat Sep 19 22:39:32 2026 by rpki-client