$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa File: 35f29218-f963-3644-9a2b-4ab3af6f8f79.roa (raw, json) Hash identifier: j0I8DHCqkWxXnEh3TPvkZFJRwJUYTjKDSAWQif+4Gk8= Subject key identifier: 88:7F:9B:A1:6C:C1:55:84:31:0F:55:62:9D:E5:EB:D6:44:15:4B:67 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4974491C6603F41CE0133080 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 68.67.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:49:1c:66:03:f4:1c:e0:13:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4429d0a-be77-46f6-8ba9-52dea0e32b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:44:db:39:3b:b3:37:4f:64:a6:ce:96:0c: 04:47:a4:f2:a3:6d:89:8b:cd:72:24:09:c5:fa:38: 5c:05:d9:5d:57:9d:6a:6b:6d:6a:35:be:a2:6e:80: e9:2b:0e:f5:56:48:8a:75:0f:6d:c4:cc:f9:2c:a9: a5:3a:07:48:5c:ab:df:1a:8e:65:0d:3f:ad:c6:13: d7:3b:4a:b6:c9:fe:14:35:83:7d:c4:30:ec:e4:4f: a2:10:49:a8:47:2f:5d:f4:5a:41:8c:a0:73:4a:72: 8e:bf:74:8d:ee:d2:3b:9f:cb:03:fd:bc:af:12:a8: 21:ff:51:d4:29:05:5e:5f:cc:3c:78:1a:99:f3:c4: d3:e3:7a:58:01:55:08:cc:20:4d:fc:26:86:22:dc: eb:f7:f5:66:74:30:dc:f0:32:20:1e:36:c5:48:2c: f0:91:9d:ca:54:5f:ef:31:b2:a9:8d:8b:b1:9e:ed: 46:6f:92:b2:23:87:27:fb:3b:66:5e:9b:0d:32:63: 73:ac:5b:2e:03:c0:0f:4d:14:a9:16:4b:7e:e7:52: 50:74:09:64:39:1a:ff:e0:9c:6c:8f:06:be:7b:82: aa:3f:74:30:63:5f:b5:23:91:ae:12:3c:77:2f:75: 8d:59:0f:b2:3a:f5:70:eb:7b:fd:d3:00:b4:94:6b: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7F:9B:A1:6C:C1:55:84:31:0F:55:62:9D:E5:EB:D6:44:15:4B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35f29218-f963-3644-9a2b-4ab3af6f8f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:54:2f:b6:8c:05:09:98:d4:d2:a4:a2:17:e4:53:52:9c:78: fe:21:f1:93:0e:6a:04:e7:e8:14:11:40:ad:b5:6c:50:cf:86: 35:5e:00:c5:94:14:98:8b:6a:3b:1a:80:f2:05:12:96:40:3f: a3:7a:7a:e7:af:47:bc:a7:b6:49:9a:88:33:0a:97:01:c5:b0: f1:23:50:28:0b:79:e7:5e:25:c5:ca:c6:cc:31:d2:f1:3c:c9: eb:2b:16:7d:a5:bc:f2:89:2c:57:2a:3b:09:90:9f:99:28:83: cb:bc:a3:ea:56:c1:f9:42:d8:a8:24:da:98:25:89:d4:5b:8d: da:1a:07:d0:46:4e:bb:96:6e:49:19:d7:d5:ab:97:81:7b:9a: 3c:51:dc:a4:76:5e:f2:f3:aa:aa:4f:00:1e:8d:cb:33:05:1b: d9:b8:f7:fe:63:63:23:c1:74:b9:76:73:7a:08:c6:be:e8:66: 3f:75:19:9a:bd:a1:98:30:df:e2:90:d2:2b:d3:32:1f:73:6e: 2f:69:f1:b7:1b:a2:64:42:bb:1f:65:82:1b:c2:49:ff:21:b1: 53:8f:44:1b:4f:4d:34:24:e6:82:2b:c1:84:57:6a:c4:14:ba: 9a:0f:a7:b7:91:2e:dc:78:33:90:8a:99:83:b8:23:cc:8c:6f: 01:b8:5f:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEkcZgP0HOATMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ0MjlkMGEtYmU3Ny00NmY2LThiYTktNTJkZWEwZTMyYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/tE2zk7szdPZKbOlgwER6Tyo22Ji81yJAnF +jhcBdldV51qa21qNb6iboDpKw71VkiKdQ9txMz5LKmlOgdIXKvfGo5lDT+txhPX O0q2yf4UNYN9xDDs5E+iEEmoRy9d9FpBjKBzSnKOv3SN7tI7n8sD/byvEqgh/1HU KQVeX8w8eBqZ88TT43pYAVUIzCBN/CaGItzr9/VmdDDc8DIgHjbFSCzwkZ3KVF/v MbKpjYuxnu1Gb5KyI4cn+ztmXpsNMmNzrFsuA8APTRSpFkt+51JQdAlkORr/4Jxs jwa+e4KqP3QwY1+1I5GuEjx3L3WNWQ+yOvVw63v90wC0lGvikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh/m6FswVWEMQ9VYp3l69ZEFUtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzVmMjkyMTgtZjk2My0z NjQ0LTlhMmItNGFiM2FmNmY4Zjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpUL7aMBQmY1NKkohfkU1KceP4h8ZMOagTn6BQRQK21bFDPhjVeAMWU FJiLajsagPIFEpZAP6N6euevR7yntkmaiDMKlwHFsPEjUCgLeedeJcXKxswx0vE8 yesrFn2lvPKJLFcqOwmQn5kog8u8o+pWwflC2Kgk2pglidRbjdoaB9BGTruWbkkZ 19Wrl4F7mjxR3KR2XvLzqqpPAB6NyzMFG9m49/5jYyPBdLl2c3oIxr7oZj91GZq9 oZgw3+KQ0ivTMh9zbi9p8bcbomRCux9lghvCSf8hsVOPRBtPTTQk5oIrwYRXasQU upoPp7eRLtx4M5CKmYO4I8yMbwG4X6I= -----END CERTIFICATE-----Generated at Wed Sep 30 21:07:20 2026 by rpki-client