$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa File: 6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa (raw, json) Hash identifier: oNnsN7Jrj0yFs/TgJU/sUctdm7e2sdM5Rsy2rd94cFY= Subject key identifier: C0:F2:90:F0:EE:C0:75:B7:DA:3C:E2:A9:84:4C:80:FC:6E:5D:50:89 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584EC7A1E7B3ACB2DE16F8425900 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 192.30.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e7:b3:ac:b2:de:16:f8:42:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=7394eb7f-d12f-4756-a4f4-b1d7c57755ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:da:0a:07:33:f8:89:a8:b5:ef:78:6b:77:14: d1:22:dc:17:08:09:69:82:ab:3b:c2:8c:09:da:83: e4:04:99:39:e8:50:1d:ae:8d:5c:df:0f:1c:bb:fb: 09:68:e3:a0:ef:e1:24:e3:12:8c:12:84:e2:5d:74: 55:3c:13:b8:da:14:29:07:83:a7:84:eb:01:75:37: 4f:a9:6d:8f:6f:40:d8:ab:28:9d:5b:8a:7d:19:bf: 43:24:aa:b9:99:a5:a4:a3:a4:ef:50:bb:c2:2a:ba: d9:41:72:00:39:1a:bb:12:b2:ed:9c:12:d3:15:4f: 08:3a:77:de:78:25:59:a4:62:86:89:d8:7d:ef:e3: 83:fa:c5:7d:26:88:71:a4:2f:d4:e8:0a:f2:6f:32: 27:c5:1b:01:53:28:45:3a:b8:06:5d:e9:54:d0:63: 81:4b:78:6e:a6:cb:ea:a1:62:b9:9b:f3:e0:2e:d1: c6:5c:8a:b9:d1:74:e5:96:4a:c0:90:8f:90:ab:32: 18:ea:8b:f5:a6:2d:10:c1:1e:da:29:64:c0:44:d2: ef:32:c9:e6:93:39:2d:d8:af:9b:de:b5:59:a2:17: 27:07:db:d2:f8:83:d1:18:53:b9:1a:61:91:40:d8: 61:1a:c5:c0:a6:e3:79:a0:ef:bc:72:e5:28:b7:cb: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:90:F0:EE:C0:75:B7:DA:3C:E2:A9:84:4C:80:FC:6E:5D:50:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/6f2cfc87-d93c-3f6f-85d2-293762f6916d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f0:17:d1:0f:80:43:b7:d9:12:66:09:13:83:fa:e6:f8:92: 30:0c:f2:45:b9:ca:52:d3:64:bf:1a:e9:c6:75:58:28:39:58: 31:c3:cb:45:5b:4f:e8:8c:3a:c6:46:f7:1d:1e:d3:47:86:6a: ef:92:b6:e1:f5:cd:64:9c:65:07:8a:eb:ee:a9:3d:3e:76:46: 2c:04:35:21:01:1f:eb:22:d9:18:86:0c:a9:5a:c9:3a:57:d4: b8:35:b7:ec:4c:ec:f2:d8:c0:79:1b:eb:8a:e8:84:40:7a:d0: 2a:fd:0d:e8:bd:1b:78:18:0b:a1:90:e5:68:e1:a7:94:be:a2: 4a:cf:74:9e:4b:37:0b:a6:61:1f:88:5e:03:35:4e:d6:a1:7e: a6:f6:f4:dd:c2:62:22:61:58:9d:c1:78:06:84:d3:52:7c:5f: b3:47:a6:5d:a9:4a:7f:6b:1b:78:be:3c:fe:e8:c7:6f:03:37: 5d:e7:51:1d:01:1a:b3:9d:2b:47:82:9c:60:e3:3c:2a:14:e1: 7f:c6:7d:6c:38:66:e6:9e:83:67:c6:59:98:04:de:75:fd:74: 1d:0d:0a:8c:a5:8d:9b:ce:98:fe:1f:e0:6e:3a:09:de:14:d0: 8c:e9:65:ab:a1:af:07:e2:32:4a:17:ee:ab:af:17:f2:27:51: 0a:7c:2c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoeezrLLeFvhCWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NzM5NGViN2YtZDEyZi00NzU2LWE0ZjQtYjFkN2M1Nzc1NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9oKBzP4iai173hrdxTRItwXCAlpgqs7wowJ 2oPkBJk56FAdro1c3w8cu/sJaOOg7+Ek4xKMEoTiXXRVPBO42hQpB4OnhOsBdTdP qW2Pb0DYqyidW4p9Gb9DJKq5maWko6TvULvCKrrZQXIAORq7ErLtnBLTFU8IOnfe eCVZpGKGidh97+OD+sV9JohxpC/U6ArybzInxRsBUyhFOrgGXelU0GOBS3hupsvq oWK5m/PgLtHGXIq50XTllkrAkI+QqzIY6ov1pi0QwR7aKWTARNLvMsnmkzkt2K+b 3rVZohcnB9vS+IPRGFO5GmGRQNhhGsXApuN5oO+8cuUot8u4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDykPDuwHW32jziqYRMgPxuXVCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvNmYyY2ZjODctZDkzYy0z ZjZmLTg1ZDItMjkzNzYyZjY5MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXwF9EPgEO32RJmCROD+ub4kjAM8kW5ylLTZL8a6cZ1WCg5WDHDy0Vb T+iMOsZG9x0e00eGau+StuH1zWScZQeK6+6pPT52RiwENSEBH+si2RiGDKlayTpX 1Lg1t+xM7PLYwHkb64rohEB60Cr9Dei9G3gYC6GQ5Wjhp5S+okrPdJ5LNwumYR+I XgM1Ttahfqb29N3CYiJhWJ3BeAaE01J8X7NHpl2pSn9rG3i+PP7ox28DN13nUR0B GrOdK0eCnGDjPCoU4X/GfWw4Zuaeg2fGWZgE3nX9dB0NCoyljZvOmP4f4G46Cd4U 0IzpZauhrwfiMkoX7quvF/InUQp8LJY= -----END CERTIFICATE-----Generated at Fri Aug 21 01:13:54 2026 by rpki-client