$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa File: 312a9b01-284f-3e9a-b0b7-7b02008fb992.roa (raw, json) Hash identifier: 5nQCZDOeMQuBu0pHAdawBrYW5ZLTkxap4BT73c1Za2Q= Subject key identifier: 10:DE:B8:07:BA:5C:9C:80:92:E8:FC:7E:70:0A:13:4E:5E:7F:04:D8 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584ECD371930C9EA6C6987F0C600 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 6079 IP address blocks: 68.209.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:19:30:c9:ea:6c:69:87:f0:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=2f8b7e05-d8bd-404d-8d7a-38a9f18ede46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:24:9f:32:63:7b:da:51:93:b0:9f:53:03: 38:5c:e2:39:78:be:98:56:fa:23:44:3e:37:0e:b1: 5f:ef:f2:e3:50:fb:77:6b:b7:64:06:1e:4c:0e:d2: f0:eb:f3:47:f7:b1:36:e7:5f:77:f0:fd:cf:a3:89: b1:6e:2f:a3:24:fb:87:84:09:a1:0d:0a:a6:45:9b: 57:0f:44:f2:62:b6:98:85:95:a2:9c:dd:2e:b6:1e: e5:49:a3:a0:89:53:ca:05:5f:82:6f:72:78:00:18: d5:2b:5a:58:17:dc:6e:0d:e9:75:b2:71:b4:53:03: 31:ff:dc:c4:66:72:3d:c6:6c:ae:60:6e:d0:2c:26: ad:b7:d8:5c:e0:8e:9a:8d:8b:79:dc:97:6b:79:a6: 09:33:38:0f:ff:5b:d3:6f:02:a1:0c:85:9d:57:07: 7f:8c:1e:48:c3:41:35:25:df:97:c4:e8:49:b9:b4: 03:f8:fe:b9:53:a1:76:fd:af:19:d5:a7:e8:a7:18: f6:c3:41:a4:c5:a6:59:a7:95:d9:d0:a6:59:5e:6c: 05:f0:c8:1b:17:d2:23:0f:3e:53:49:12:83:ba:aa: 2a:89:46:52:1c:d0:3d:89:f4:24:e0:6b:3b:56:bf: 22:34:e1:3f:48:6b:99:63:e6:c8:2b:55:c2:65:39: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:B8:07:BA:5C:9C:80:92:E8:FC:7E:70:0A:13:4E:5E:7F:04:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/312a9b01-284f-3e9a-b0b7-7b02008fb992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 68.209.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:72:57:81:fc:4c:9e:b4:bf:71:e2:91:25:52:ef:a6:f1:49: 59:0d:99:85:81:79:65:76:3c:ba:11:89:ac:0c:67:df:94:ab: 5e:eb:e4:25:0a:e9:2c:31:69:5e:2a:9e:f7:01:41:ed:7f:4c: 23:82:c9:20:6d:e4:f4:bb:aa:3e:2c:62:b2:de:f6:3e:f9:81: 9a:86:94:6b:ec:e8:5d:50:94:b1:9d:42:10:60:b9:61:6d:6f: e4:c6:db:81:30:3b:1b:81:09:05:f3:1e:49:36:a6:5d:0a:1e: 9a:29:e1:92:99:60:0b:eb:78:42:96:69:01:ed:6f:6e:28:a8: 56:36:73:89:48:96:1e:0d:5a:a5:ea:7e:be:58:b1:b5:26:be: b2:af:75:58:5c:ae:f0:b6:13:e4:42:c7:af:20:82:b1:6e:38: 54:0d:b3:bf:7f:d4:e9:1a:75:80:ec:70:e8:01:71:ba:45:ea: ff:e4:59:79:66:6b:cb:95:88:0e:fa:61:51:82:33:be:95:21: f3:04:8f:fd:76:47:1d:c1:a0:f7:78:02:bd:fe:65:d7:cd:35: ab:e1:9e:06:67:25:69:5c:e0:27:ab:4b:63:c6:84:fd:18:5f: 67:ea:f4:6d:4b:aa:2f:47:61:5f:d6:b2:de:2d:6b:1c:47:0c: 42:8b:70:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxkwyepsaYfwxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MmY4YjdlMDUtZDhiZC00MDRkLThkN2EtMzhhOWYxOGVkZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6cknzJje9pRk7CfUwM4XOI5eL6YVvojRD43 DrFf7/LjUPt3a7dkBh5MDtLw6/NH97E251938P3Po4mxbi+jJPuHhAmhDQqmRZtX D0TyYraYhZWinN0uth7lSaOgiVPKBV+Cb3J4ABjVK1pYF9xuDel1snG0UwMx/9zE ZnI9xmyuYG7QLCatt9hc4I6ajYt53JdreaYJMzgP/1vTbwKhDIWdVwd/jB5Iw0E1 Jd+XxOhJubQD+P65U6F2/a8Z1afopxj2w0GkxaZZp5XZ0KZZXmwF8MgbF9IjDz5T SRKDuqoqiUZSHNA9ifQk4Gs7Vr8iNOE/SGuZY+bIK1XCZTkAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDeuAe6XJyAkuj8fnAKE05efwTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMzEyYTliMDEtMjg0Zi0z ZTlhLWIwYjctN2IwMjAwOGZiOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRNEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRyV4H8TJ60v3HikSVS76bxSVkNmYWBeWV2PLoRiawMZ9+Uq17r5CUK 6SwxaV4qnvcBQe1/TCOCySBt5PS7qj4sYrLe9j75gZqGlGvs6F1QlLGdQhBguWFt b+TG24EwOxuBCQXzHkk2pl0KHpop4ZKZYAvreEKWaQHtb24oqFY2c4lIlh4NWqXq fr5YsbUmvrKvdVhcrvC2E+RCx68ggrFuOFQNs79/1OkadYDscOgBcbpF6v/kWXlm a8uViA76YVGCM76VIfMEj/12Rx3BoPd4Ar3+ZdfNNavhngZnJWlc4CerS2PGhP0Y X2fq9G1Lqi9HYV/Wst4taxxHDEKLcKc= -----END CERTIFICATE-----Generated at Fri Aug 28 17:41:22 2026 by rpki-client