$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa File: 09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa (raw, json) Hash identifier: ao6Ij6zaCKArIj84n3Uuix7FmAba1O8MEkfVWw2fN+Y= Subject key identifier: 1A:A9:A0:0D:09:F6:D7:44:53:86:4C:AC:AC:CA:93:F6:44:C5:7D:F4 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584E8C8A47FD8297296059D82740 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 394285 IP address blocks: 68.68.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:47:fd:82:97:29:60:59:d8:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=f551aa2d-5021-460a-905c-58a50f85f303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:90:0a:b3:6d:fb:cb:8a:50:46:5b:6e:01: 47:38:73:01:f1:fd:e1:65:6c:5c:b4:e3:bc:81:13: d5:39:cb:40:07:ba:9d:fc:bc:a0:aa:37:ab:26:07: 30:63:a2:8e:9c:7e:98:fa:09:21:bf:cd:e4:c7:23: 0a:18:70:68:61:a2:f5:5f:46:cf:b0:15:6c:53:fa: ee:59:61:48:22:76:27:58:21:2d:63:1d:48:49:59: 1b:b1:b3:65:78:9c:74:0f:73:4d:94:05:99:03:58: fa:c7:a6:41:d5:75:05:4a:91:6c:4c:82:98:ac:20: 64:0d:f7:5d:33:d8:a2:e5:48:4a:a7:c8:7a:a0:53: 5b:da:8a:7b:df:b3:8f:0b:0d:88:75:ec:37:49:ef: 1d:9a:84:c3:dc:ad:5a:27:50:cb:56:8b:08:41:92: 28:40:1b:55:75:b4:25:30:74:96:f7:b9:bd:61:56: b1:09:07:03:9b:32:50:e4:f1:a9:5c:92:da:0e:ce: 6c:9d:ee:39:39:1e:69:db:c9:75:0c:8a:d3:54:c9: df:4d:30:c8:67:66:69:73:38:e7:81:45:b4:19:0d: 0e:af:8b:19:16:aa:a8:3d:33:e6:f7:ff:e0:e2:ca: 93:13:d8:c6:66:f5:fd:ae:5b:5e:52:e8:6b:82:ea: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:A0:0D:09:F6:D7:44:53:86:4C:AC:AC:CA:93:F6:44:C5:7D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/09aaf2cd-3a69-321f-9da1-f83d72d9a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:48:ee:8a:3c:e2:fe:ab:b1:4a:ca:80:ab:54:e6:aa:bd:51: 17:b7:58:f9:e3:ea:72:e0:c0:77:ed:3f:60:70:2f:b3:c4:f3: 69:09:c9:a3:80:38:e7:31:67:a2:5d:5e:fb:f7:14:8a:3d:16: a4:fb:51:c6:37:da:32:d1:1b:29:84:6c:1c:1f:1c:a8:fd:99: e4:4b:94:3a:98:19:4f:ae:a6:61:d6:73:8f:68:a8:da:90:0a: d6:e8:21:38:d9:7d:24:0a:3c:ab:36:0d:51:45:95:e4:0c:4f: e6:7a:0d:05:b0:a9:4b:90:48:e3:38:f7:be:b8:d1:22:cb:c4: 74:6a:69:bd:2f:d9:7b:30:22:a2:e6:53:6f:2d:79:e5:47:92: 63:68:cf:67:19:36:12:e2:9d:02:bb:73:aa:5e:59:aa:e6:c5: c7:ad:97:ec:35:2d:ec:32:a0:d5:dc:2e:66:bd:05:66:11:ef: 0b:f1:fd:db:5d:d5:77:b3:9c:74:1d:28:da:2b:38:20:70:a9: 48:09:b4:f1:70:dc:e6:8e:5d:b0:0d:a7:f0:7b:8b:0e:61:71: a2:b2:e7:70:81:48:3b:c7:54:7c:99:3e:40:92:1a:f8:c5:85: 1d:1c:aa:2c:98:91:98:2c:66:56:44:25:fb:29:f6:5e:d9:34: 13:aa:ca:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mikf9gpcpYFnYJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk ZjU1MWFhMmQtNTAyMS00NjBhLTkwNWMtNThhNTBmODVmMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jOQCrNt+8uKUEZbbgFHOHMB8f3hZWxctOO8 gRPVOctAB7qd/LygqjerJgcwY6KOnH6Y+gkhv83kxyMKGHBoYaL1X0bPsBVsU/ru WWFIInYnWCEtYx1ISVkbsbNleJx0D3NNlAWZA1j6x6ZB1XUFSpFsTIKYrCBkDfdd M9ii5UhKp8h6oFNb2op737OPCw2Idew3Se8dmoTD3K1aJ1DLVosIQZIoQBtVdbQl MHSW97m9YVaxCQcDmzJQ5PGpXJLaDs5sne45OR5p28l1DIrTVMnfTTDIZ2Zpczjn gUW0GQ0Or4sZFqqoPTPm9//g4sqTE9jGZvX9rlteUuhrguqNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqpoA0J9tdEU4ZMrKzKk/ZExX30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMDlhYWYyY2QtM2E2OS0z MjFmLTlkYTEtZjgzZDcyZDlhNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApI7oo84v6rsUrKgKtU5qq9URe3WPnj6nLgwHftP2BwL7PE82kJyaOA OOcxZ6JdXvv3FIo9FqT7UcY32jLRGymEbBwfHKj9meRLlDqYGU+upmHWc49oqNqQ CtboITjZfSQKPKs2DVFFleQMT+Z6DQWwqUuQSOM497640SLLxHRqab0v2XswIqLm U28teeVHkmNoz2cZNhLinQK7c6peWarmxcetl+w1LewyoNXcLma9BWYR7wvx/dtd 1XeznHQdKNorOCBwqUgJtPFw3OaOXbANp/B7iw5hcaKy53CBSDvHVHyZPkCSGvjF hR0cqiyYkZgsZlZEJfsp9l7ZNBOqypc= -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:23 2026 by rpki-client