$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa File: 1df4824f-cad9-3e2d-885e-82b97814e305.roa (raw, json) Hash identifier: OJSUmHX8SLsPN4WbJ/5bYw8CQKag8IfAoM/67EjN2wU= Subject key identifier: 4A:D3:3A:2B:C8:2A:AA:08:A2:DA:64:50:43:AF:E9:A3:F6:21:A3:DA Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E9A7FBFADF288FAD2A06C4F40 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 22781 IP address blocks: 68.68.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bf:ad:f2:88:fa:d2:a0:6c:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=02c09cf7-b1b7-4fdd-b1db-5652ddca22d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:a3:a8:0c:f0:a5:51:54:79:40:a4:58:d9: 27:53:d1:23:ee:22:35:a1:3e:48:86:ab:c1:69:c7: f0:84:26:13:59:6f:a6:6e:fa:b0:b6:e3:a8:b1:e4: 67:56:72:a6:4e:98:cb:8b:1e:e6:62:09:da:0f:4f: 1e:8b:1b:ff:e9:53:20:b5:a1:f3:12:90:48:47:49: e9:e6:83:a7:7d:64:12:a0:df:09:f6:f1:4c:90:8a: ba:92:55:a1:02:9f:b7:91:ec:d0:ca:cf:38:56:17: 39:23:db:81:88:99:47:d9:99:a8:0d:fe:fd:6f:f6: 91:d9:b2:83:f0:32:06:94:fd:d6:fd:36:71:e0:24: ed:e3:1b:5f:13:41:ce:18:5a:c4:9a:00:a5:40:b5: 41:d5:34:d9:81:5f:56:4a:41:b5:25:47:42:6b:3c: 71:84:c3:f4:8c:c5:f2:68:d3:da:98:8f:c6:4e:9d: 8f:2e:4d:2d:c9:75:ea:02:66:be:17:44:e4:e4:e1: 6c:7c:29:a8:0b:7a:41:34:a6:82:38:56:f6:46:d7: 33:d6:d5:d8:d4:91:a2:3d:f1:0a:5e:df:54:5c:2b: d3:c5:77:18:e9:46:ac:e1:ee:dd:42:98:77:bf:6e: 2a:1a:13:10:4e:a8:c1:a8:b3:1f:0c:c0:4b:47:ef: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D3:3A:2B:C8:2A:AA:08:A2:DA:64:50:43:AF:E9:A3:F6:21:A3:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 68.68.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:d0:0d:46:82:8e:98:a6:7c:d7:f3:49:39:04:0e:a4:1b: 52:29:42:ac:db:dd:9f:08:67:ac:77:b5:db:31:6f:65:c6:85: c6:c0:25:18:e8:38:8c:f8:41:04:d9:ef:e5:3f:91:b4:6d:b3: e7:da:a5:72:e0:1c:13:ec:c2:3d:bb:48:df:c8:30:72:2e:9e: bf:a1:9d:d3:fa:38:0d:09:46:72:ee:69:3b:25:d9:c6:a0:42: 1f:c6:a8:b7:ac:6a:b1:19:3a:9f:22:37:97:ae:2b:ef:1c:06: 34:d8:18:84:c5:f0:4b:8d:01:5b:6c:35:7d:6c:74:4f:3d:d4: 16:36:4e:ff:33:47:e4:a3:f1:dc:1b:ca:b8:8a:b8:ac:5c:a1: b4:e2:df:66:da:93:5d:45:43:53:1b:bf:85:01:8f:fb:2b:4e: 09:45:3e:67:6c:5c:03:ea:46:c5:aa:b6:9e:03:97:c2:b1:a4: d2:ff:ad:14:2a:15:64:b8:90:b5:9b:99:7d:88:29:36:58:0b: 4b:86:b4:04:b4:5b:70:81:37:0c:a3:86:5b:cf:48:2f:9d:11: e6:18:90:cc:de:5e:15:2b:31:46:b3:ef:cf:49:a0:77:13:65: 5f:2b:a9:7c:25:4d:e0:00:b4:6c:28:ac:63:89:45:00:d8:15: 49:19:f8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7+t8oj60qBsT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MDJjMDljZjctYjFiNy00ZmRkLWIxZGItNTY1MmRkY2EyMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4OjqAzwpVFUeUCkWNknU9Ej7iI1oT5IhqvB acfwhCYTWW+mbvqwtuOoseRnVnKmTpjLix7mYgnaD08eixv/6VMgtaHzEpBIR0np 5oOnfWQSoN8J9vFMkIq6klWhAp+3kezQys84Vhc5I9uBiJlH2ZmoDf79b/aR2bKD 8DIGlP3W/TZx4CTt4xtfE0HOGFrEmgClQLVB1TTZgV9WSkG1JUdCazxxhMP0jMXy aNPamI/GTp2PLk0tyXXqAma+F0Tk5OFsfCmoC3pBNKaCOFb2Rtcz1tXY1JGiPfEK Xt9UXCvTxXcY6Uas4e7dQph3v24qGhMQTqjBqLMfDMBLR+/wTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErTOivIKqoIotpkUEOv6aP2IaPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWRmNDgyNGYtY2FkOS0z ZTJkLTg4NWUtODJiOTc4MTRlMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATu0A1Ggo6YpnzX80k5BA6kG1IpQqzb3Z8IZ6x3tdsxb2XGhcbAJRjo OIz4QQTZ7+U/kbRts+fapXLgHBPswj27SN/IMHIunr+hndP6OA0JRnLuaTsl2cag Qh/GqLesarEZOp8iN5euK+8cBjTYGITF8EuNAVtsNX1sdE891BY2Tv8zR+Sj8dwb yriKuKxcobTi32bak11FQ1Mbv4UBj/srTglFPmdsXAPqRsWqtp4Dl8KxpNL/rRQq FWS4kLWbmX2IKTZYC0uGtAS0W3CBNwyjhlvPSC+dEeYYkMzeXhUrMUaz789JoHcT ZV8rqXwlTeAAtGworGOJRQDYFUkZ+Io= -----END CERTIFICATE-----Generated at Fri Jul 24 21:33:58 2026 by rpki-client