$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d028d538-d081-3294-9ace-de57de6e8163.roa File: d028d538-d081-3294-9ace-de57de6e8163.roa (raw, json) Hash identifier: emxQxetXygDsaVyXfXyZ4b7P5tyK9M2VWL2mU7JAS8M= Subject key identifier: 78:E0:27:89:67:CD:92:AA:A9:10:E8:12:F9:FE:FC:04:EF:C0:70:B9 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584EF9E223736266EC172A6748D0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d028d538-d081-3294-9ace-de57de6e8163.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 10753 IP address blocks: 68.68.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:23:73:62:66:ec:17:2a:67:48:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=d3219018-3575-4a4d-9e30-01c4d6494a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:ad:a3:9e:3e:58:94:ef:04:46:b8:73:f5: 60:77:a9:4f:01:37:3e:8a:f7:f9:63:1a:89:cf:47: 3b:d3:c7:07:b8:00:4a:c5:6a:af:2a:39:2a:fe:26: 0c:4b:81:12:75:ee:61:64:ae:61:23:84:f3:32:71: 8e:3d:1c:79:c6:6e:06:1e:60:5b:70:0e:1f:72:79: 08:ec:b5:fd:e8:66:75:9d:a0:db:8a:8f:a9:f6:7c: c7:ac:c4:fc:fc:dc:17:39:f1:58:c4:99:72:a5:8d: 77:38:42:4f:63:f8:8e:96:95:ed:7b:8f:9d:52:14: 3f:b8:cd:88:4c:35:89:49:48:c2:ab:24:3b:47:77: d6:d1:3d:c6:c9:f6:d7:52:f9:cc:d4:21:ec:ba:7d: cd:16:34:76:49:d8:b4:63:5b:03:f8:83:f2:24:a2: d7:fa:e3:7d:39:26:25:2d:6e:32:79:01:6b:5f:12: 5b:81:c9:1b:7f:fa:59:66:80:3d:74:35:16:6f:2f: 0e:86:78:bd:9d:e7:7b:e6:fc:72:65:c7:f5:23:60: df:0d:b1:d2:30:11:14:d0:9a:99:b2:f7:06:8c:6c: ab:6d:97:6c:1c:ff:b7:17:43:b7:80:9c:8b:36:b5: c3:6a:a4:d4:bf:1d:d3:8f:3a:af:2d:be:fc:48:07: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:27:89:67:CD:92:AA:A9:10:E8:12:F9:FE:FC:04:EF:C0:70:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d028d538-d081-3294-9ace-de57de6e8163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 68.68.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:7d:a0:40:2b:da:6b:77:6a:56:e3:53:6a:a0:a3:50:d0: ba:fe:5c:92:9c:d9:c2:c7:81:52:2a:ff:61:a8:4e:72:2d:40: 98:7c:5e:16:15:da:54:c8:6e:0d:b1:8d:16:5a:47:4b:31:fd: d4:ff:2e:09:b9:43:6b:89:43:14:22:47:ca:1f:94:73:53:32: f8:4e:50:66:6c:71:01:d0:0c:dd:f5:90:3a:1c:7e:f4:16:1a: 24:dd:26:14:83:07:77:50:1a:ca:e2:f4:06:f8:bd:ee:2a:ca: 95:e6:06:09:f4:b0:62:ad:75:ad:44:2c:10:5a:6f:c3:72:5e: b2:55:85:4d:aa:ae:7a:b5:1a:28:f9:b1:7e:52:03:5a:7d:ed: cf:03:fa:ee:d4:ac:6b:0e:21:32:53:c4:4f:5a:4d:95:2d:b9: b1:1f:e2:a5:b7:86:0f:9a:32:fa:95:af:b4:40:6e:c8:27:ae: 3a:9b:ba:e7:b5:46:d5:f4:c3:6f:2e:cb:cc:3d:72:91:97:d4: 3b:23:b5:de:f6:a6:26:18:f1:71:f4:cc:e7:0a:77:59:22:a3: c4:dc:93:74:03:6c:5b:6d:ce:92:fb:8d:00:81:a4:f8:ac:65: e9:dd:c1:76:2c:06:84:46:0f:f3:72:91:a2:74:28:b7:58:cc: f6:04:49:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754iNzYmbsFypnSNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDMyMTkwMTgtMzU3NS00YTRkLTllMzAtMDFjNGQ2NDk0YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wGto54+WJTvBEa4c/Vgd6lPATc+ivf5YxqJ z0c708cHuABKxWqvKjkq/iYMS4ESde5hZK5hI4TzMnGOPRx5xm4GHmBbcA4fcnkI 7LX96GZ1naDbio+p9nzHrMT8/NwXOfFYxJlypY13OEJPY/iOlpXte4+dUhQ/uM2I TDWJSUjCqyQ7R3fW0T3GyfbXUvnM1CHsun3NFjR2Sdi0Y1sD+IPyJKLX+uN9OSYl LW4yeQFrXxJbgckbf/pZZoA9dDUWby8Ohni9ned75vxyZcf1I2DfDbHSMBEU0JqZ svcGjGyrbZdsHP+3F0O3gJyLNrXDaqTUvx3TjzqvLb78SAdLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjgJ4lnzZKqqRDoEvn+/ATvwHC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDAyOGQ1MzgtZDA4MS0z Mjk0LTlhY2UtZGU1N2RlNmU4MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARERiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvrfaBAK9prd2pW41NqoKNQ0Lr+XJKc2cLHgVIq/2GoTnItQJh8XhYV 2lTIbg2xjRZaR0sx/dT/Lgm5Q2uJQxQiR8oflHNTMvhOUGZscQHQDN31kDocfvQW GiTdJhSDB3dQGsri9Ab4ve4qypXmBgn0sGKtda1ELBBab8NyXrJVhU2qrnq1Gij5 sX5SA1p97c8D+u7UrGsOITJTxE9aTZUtubEf4qW3hg+aMvqVr7RAbsgnrjqbuue1 RtX0w28uy8w9cpGX1Dsjtd72piYY8XH0zOcKd1kio8Tck3QDbFttzpL7jQCBpPis ZendwXYsBoRGD/NykaJ0KLdYzPYESSE= -----END CERTIFICATE-----Generated at Mon Sep 28 10:33:58 2026 by rpki-client