$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/29fdac5a-94ba-38be-94b1-b204e762cf65.roa File: 29fdac5a-94ba-38be-94b1-b204e762cf65.roa (raw, json) Hash identifier: 93ijTlW1m2kTx+pIOxf7QHoJ+A2V8l3T3pgu4vhiWJA= Subject key identifier: 09:F4:27:D1:1F:65:C2:84:22:52:60:8A:2C:A8:B4:3D:DC:2C:32:65 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E5E79FC18DB3E2DB91BE04560 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/29fdac5a-94ba-38be-94b1-b204e762cf65.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 23473 IP address blocks: 68.234.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:79:fc:18:db:3e:2d:b9:1b:e0:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=db3a7380-fd0c-42b2-a299-987cc43c50f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:ee:f1:69:f6:95:18:ed:3f:be:0a:90:47: 2f:b1:02:45:e5:76:45:66:ff:88:12:cb:fa:72:a1: 49:98:d7:87:34:bf:bb:07:97:00:9c:43:0e:0b:9d: a2:86:81:2c:60:56:42:1b:59:6e:8c:c6:60:3d:28: 9e:1e:98:fc:3b:b1:d2:3b:16:8c:20:a4:28:c4:bf: 25:6a:ba:14:19:14:24:9c:a3:7c:98:5b:69:bc:22: 39:cf:67:70:ab:2d:e5:7b:43:c2:9e:c0:e8:06:9d: d4:1e:1d:68:5f:dd:7a:13:8b:a7:86:4c:18:f7:6c: f4:b1:d4:2c:71:78:fa:ba:36:de:3d:04:8c:97:23: e1:e4:a5:8d:08:f6:1d:b8:90:a4:65:c1:7f:85:2a: 32:cc:d2:0b:4c:82:6a:05:ca:c3:e3:be:94:b0:c7: 94:a9:3f:d9:c3:ea:32:25:56:3d:64:70:73:a4:4b: 3d:01:4c:13:6e:6e:d1:89:2c:ce:96:3c:f9:5e:97: 8d:84:ec:63:93:8b:55:cd:4f:98:ec:0b:30:d7:b5: 1d:34:dc:fe:c3:f1:98:3f:d9:d4:08:d3:c7:4c:8b: 79:0a:36:1c:8d:40:cb:01:c7:bc:17:c1:73:b6:03: 55:72:29:a6:bd:a8:81:fc:36:ca:ae:7a:5f:12:a1: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:27:D1:1F:65:C2:84:22:52:60:8A:2C:A8:B4:3D:DC:2C:32:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/29fdac5a-94ba-38be-94b1-b204e762cf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9f:51:31:99:4b:01:b6:29:b7:bf:06:a4:a0:39:8d:4f:28: e2:c6:0a:5d:5a:d8:c3:d1:a0:6d:3d:61:d3:0b:0f:16:b9:3c: 99:fc:c6:c1:a0:6a:f6:4f:9c:d4:fa:b5:45:de:00:e7:d7:fa: 11:cd:82:0a:a9:33:52:ae:4c:9b:1d:e0:91:72:85:47:de:a7: b7:70:99:d5:16:70:0d:30:2b:0f:c6:32:e8:3a:4a:bb:86:4c: 02:68:b7:a2:45:34:5d:07:fc:0c:be:d2:e5:84:d3:60:96:2b: 71:34:24:aa:24:2a:60:7a:87:a4:8a:60:48:df:5e:50:9e:e0: 0c:4f:10:38:01:db:ff:75:d9:b9:a9:3f:d5:16:17:2b:6d:6b: fb:f4:2d:df:6b:5e:be:a3:59:d2:41:35:49:b8:d6:de:76:fe: 53:08:f6:c9:02:ce:24:a1:8e:85:cb:d4:c8:4f:e8:ff:85:ec: 74:e2:91:d9:2d:2b:c4:0b:80:15:40:0a:cd:c4:35:d1:55:21: 3e:c5:ab:c1:db:b7:2b:25:02:a6:96:f3:ad:1c:58:99:a0:4f: 6f:ec:36:b5:d3:0e:ac:29:c5:5b:56:43:8a:4f:b5:65:fb:16: c2:3b:93:3d:41:4f:e3:3d:ce:6d:e5:fd:13:3c:1b:72:f4:09: 6e:ee:4c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eefwY2z4tuRvgRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk ZGIzYTczODAtZmQwYy00MmIyLWEyOTktOTg3Y2M0M2M1MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin3u8Wn2lRjtP74KkEcvsQJF5XZFZv+IEsv6 cqFJmNeHNL+7B5cAnEMOC52ihoEsYFZCG1lujMZgPSieHpj8O7HSOxaMIKQoxL8l aroUGRQknKN8mFtpvCI5z2dwqy3le0PCnsDoBp3UHh1oX916E4unhkwY92z0sdQs cXj6ujbePQSMlyPh5KWNCPYduJCkZcF/hSoyzNILTIJqBcrD476UsMeUqT/Zw+oy JVY9ZHBzpEs9AUwTbm7RiSzOljz5XpeNhOxjk4tVzU+Y7Asw17UdNNz+w/GYP9nU CNPHTIt5CjYcjUDLAce8F8FztgNVcimmvaiB/DbKrnpfEqEL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn0J9EfZcKEIlJgiiyotD3cLDJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjlmZGFjNWEtOTRiYS0z OGJlLTk0YjEtYjIwNGU3NjJjZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6fUTGZSwG2Kbe/BqSgOY1PKOLGCl1a2MPRoG09YdMLDxa5PJn8xsGg avZPnNT6tUXeAOfX+hHNggqpM1KuTJsd4JFyhUfep7dwmdUWcA0wKw/GMug6SruG TAJot6JFNF0H/Ay+0uWE02CWK3E0JKokKmB6h6SKYEjfXlCe4AxPEDgB2/912bmp P9UWFytta/v0Ld9rXr6jWdJBNUm41t52/lMI9skCziShjoXL1MhP6P+F7HTikdkt K8QLgBVACs3ENdFVIT7Fq8HbtyslAqaW860cWJmgT2/sNrXTDqwpxVtWQ4pPtWX7 FsI7kz1BT+M9zm3l/RM8G3L0CW7uTEI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:14:28 2026 by rpki-client