$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa File: 9b513f9d-f758-3993-b0d1-85f2305add2d.roa (raw, json) Hash identifier: cr6gkV4J/cNqjpyEDtbbfKWC3LB65N4UM1mMPu8jjGM= Subject key identifier: 30:F0:D8:44:4E:57:61:D5:CD:20:89:18:0A:AA:52:D0:E7:03:DF:C2 Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584F46A7E5E40B671F1407B1D9E0 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 53486 IP address blocks: 68.71.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e5:e4:0b:67:1f:14:07:b1:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=4184546e-4deb-402c-bc56-6ebb4e919e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:5d:5f:e0:f0:fd:e7:e5:bd:d6:56:22:e3: a0:d4:c5:1c:9d:fa:fa:59:c6:06:fc:e0:6d:57:f1: 14:b5:41:bf:7c:81:c6:d7:66:fd:49:10:2d:24:67: dd:bb:a1:30:5b:0c:b4:bb:e0:f1:1e:a4:94:67:1c: 49:eb:be:2a:d5:3e:ba:91:95:aa:93:74:a2:45:e7: 6f:c8:3a:a4:f9:e9:15:52:65:69:a6:d1:72:ad:45: 57:4f:94:c1:16:8d:08:6d:47:ed:8c:1c:7a:11:bd: f1:2b:0e:e1:59:86:3a:fe:62:80:e8:50:89:67:e8: bf:0d:bd:f0:7e:8e:2a:6c:53:56:a5:ad:f2:53:0b: 8d:ef:51:06:93:a9:0b:26:3b:43:f7:13:7c:06:9a: 80:be:28:29:5d:32:2e:d6:f4:6e:86:76:77:ef:6a: 59:25:ca:a6:ec:ee:73:cf:0c:b5:89:3e:20:06:e7: eb:cb:c8:c5:a5:92:ce:e1:48:67:69:5a:f5:9e:cb: bf:44:2f:7c:00:4b:c0:11:1e:15:74:15:fa:72:46: 91:8a:e4:db:23:a7:2e:5e:18:dd:25:67:da:4d:ef: 72:e9:04:df:1f:1f:ed:02:c1:67:51:2c:28:b2:44: 7f:cc:60:d2:ee:41:ae:4e:77:ff:0b:d6:5e:2f:a5: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:D8:44:4E:57:61:D5:CD:20:89:18:0A:AA:52:D0:E7:03:DF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/9b513f9d-f758-3993-b0d1-85f2305add2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 68.71.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5d:2f:37:03:dd:44:38:18:13:81:d0:79:3a:29:a7:1e:d5: 5d:97:63:f6:33:f0:bd:dd:04:e4:e1:16:8c:41:f4:f3:04:ab: 60:88:91:ba:f5:7f:73:11:4f:c5:10:6d:08:4b:93:9b:80:ec: 1f:10:a2:61:2c:76:67:1c:fd:68:c0:32:d6:35:59:0b:21:73: bc:62:02:96:94:6a:e9:3c:16:9c:79:17:7f:cd:e6:b5:71:be: 84:6c:2d:aa:14:0b:3d:95:43:5f:6c:3f:4c:85:9a:0c:f2:82: 96:cb:3e:77:d1:41:ba:4b:6e:5c:ef:33:9f:60:7b:7e:5f:be: fc:18:ca:3e:c7:7e:40:a7:b5:ea:b0:05:0f:c6:b8:12:97:e2: 29:b2:89:d5:74:54:d3:00:80:20:4e:4c:38:32:15:68:ab:3f: be:36:32:b5:20:47:c8:66:f1:28:a9:fc:e3:5c:04:77:0c:47: cf:b0:72:29:26:51:b9:49:7b:3b:59:20:9c:51:ea:ed:dc:75: 03:00:ee:f7:a7:57:97:aa:57:2a:33:2e:5b:92:d8:d1:6e:d4: 35:3f:d5:1f:51:15:b9:d4:42:ba:67:58:a1:24:82:b3:cb:41: 94:0b:0d:75:73:0c:88:1d:87:2d:33:20:ca:37:d1:f1:d9:19: cb:6f:25:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+XkC2cfFAex2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NDE4NDU0NmUtNGRlYi00MDJjLWJjNTYtNmViYjRlOTE5ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs35dX+Dw/eflvdZWIuOg1MUcnfr6WcYG/OBt V/EUtUG/fIHG12b9SRAtJGfdu6EwWwy0u+DxHqSUZxxJ674q1T66kZWqk3SiRedv yDqk+ekVUmVpptFyrUVXT5TBFo0IbUftjBx6Eb3xKw7hWYY6/mKA6FCJZ+i/Db3w fo4qbFNWpa3yUwuN71EGk6kLJjtD9xN8BpqAvigpXTIu1vRuhnZ372pZJcqm7O5z zwy1iT4gBufry8jFpZLO4UhnaVr1nsu/RC98AEvAER4VdBX6ckaRiuTbI6cuXhjd JWfaTe9y6QTfHx/tAsFnUSwoskR/zGDS7kGuTnf/C9ZeL6WQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDw2EROV2HVzSCJGAqqUtDnA9/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvOWI1MTNmOWQtZjc1OC0z OTkzLWIwZDEtODVmMjMwNWFkZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFREcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZdLzcD3UQ4GBOB0Hk6Kace1V2XY/Yz8L3dBOThFoxB9PMEq2CIkbr1 f3MRT8UQbQhLk5uA7B8QomEsdmcc/WjAMtY1WQshc7xiApaUauk8Fpx5F3/N5rVx voRsLaoUCz2VQ19sP0yFmgzygpbLPnfRQbpLblzvM59ge35fvvwYyj7HfkCnteqw BQ/GuBKX4imyidV0VNMAgCBOTDgyFWirP742MrUgR8hm8Sip/ONcBHcMR8+wcikm UblJeztZIJxR6u3cdQMA7venV5eqVyozLluS2NFu1DU/1R9RFbnUQrpnWKEkgrPL QZQLDXVzDIgdhy0zIMo30fHZGctvJSA= -----END CERTIFICATE-----Generated at Tue Oct 13 23:37:06 2026 by rpki-client