$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa File: 5c98cdaf-5127-33d6-825c-2ee7692727b6.roa (raw, json) Hash identifier: rPFLKcWW1erI9axFc324jWDmaKqVWsIWqVnYU7/cfHw= Subject key identifier: 02:97:EE:20:51:6B:30:B2:8A:4B:8A:9F:0A:C5:E4:C1:9D:08:79:D9 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584F1897918E9C5673E56F8B1280 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 33208 IP address blocks: 68.65.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:91:8e:9c:56:73:e5:6f:8b:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=cab991f9-bef4-413e-a828-4cb462be47ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:ac:84:cb:d1:72:c8:fa:77:2d:93:20:1f: 5e:0f:59:62:62:19:d5:49:7e:c1:b9:26:d0:55:a5: 80:26:a3:51:f2:d4:63:75:19:a3:c6:ae:b2:76:26: ee:82:8e:5e:cb:db:85:4e:a8:23:a5:1b:b1:9b:d7: c2:38:24:f5:7f:05:d2:d9:fe:ef:97:15:ce:67:39: 96:5a:a2:df:86:70:40:b5:f0:17:b7:11:15:b7:16: a9:1f:58:8a:35:5d:20:19:ec:de:d6:37:a3:1b:44: b8:02:07:fd:17:11:75:5c:18:92:67:b0:dc:50:0a: ed:0e:d8:f0:a1:89:60:fc:2f:44:bc:bb:e6:ed:83: d5:8e:19:23:8a:49:f9:2c:99:c1:d4:26:3d:22:cc: f5:b2:97:4b:bd:d7:72:9d:71:7e:99:65:fa:01:53: 0e:87:34:7c:4a:8a:b6:6f:94:27:20:31:40:c1:23: 30:12:c6:87:ec:ae:64:c3:40:d3:83:24:c1:da:ed: c0:e2:95:f7:92:1f:43:29:a3:d4:ff:e5:9f:69:6a: 29:30:97:22:35:01:f6:4b:b9:2d:cd:a2:ff:1d:7c: 83:ae:c4:af:fb:d5:fc:57:e9:73:0f:25:15:c1:db: 7c:64:f0:64:0e:cc:b3:0f:f2:1d:3f:ee:b4:45:fb: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:EE:20:51:6B:30:B2:8A:4B:8A:9F:0A:C5:E4:C1:9D:08:79:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5c98cdaf-5127-33d6-825c-2ee7692727b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 68.65.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:03:8c:1b:5a:24:e4:de:64:cd:b1:42:05:ea:8f:85:c0:8b: 9c:5b:78:b1:3c:63:48:dc:a2:aa:d6:74:d2:16:d1:d1:df:51: 81:2d:35:f7:d8:1b:b9:1d:f7:de:62:fa:12:34:3a:22:4e:c5: 3a:d6:bf:ec:c4:b7:80:cd:ce:b9:de:3b:55:7b:12:23:5c:25: 7c:ad:e4:bc:1c:2d:ea:7c:aa:16:17:fb:9c:90:de:b0:4c:ce: eb:1f:6a:d0:6d:d6:3a:24:38:52:a6:42:a3:66:38:9b:1f:cd: 5f:35:27:c7:88:1b:3f:eb:1c:18:ac:16:24:1f:b5:27:bd:f4: 6f:d3:a1:7b:a9:06:0e:78:19:05:bb:6a:d8:cd:30:11:31:31: 88:9a:4f:5a:ff:44:98:ba:5e:27:cf:ca:80:f7:38:19:9f:de: 97:75:f1:2b:0d:6f:00:16:49:53:7a:a7:f6:e5:30:a5:9a:1d: b4:d3:85:49:9d:2b:2c:ce:4c:c7:0f:d2:be:64:62:03:c1:3b: fe:cf:b2:2b:7b:c5:07:17:9b:e9:05:9a:d4:df:f6:de:b8:1b: df:ca:f5:bc:b1:7a:9b:41:8b:77:e1:32:72:80:46:7c:a8:b1: e9:22:2e:f8:7a:ba:b6:2c:80:35:36:00:4c:1a:e2:6d:21:33: 4f:f6:11:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5GOnFZz5W+LEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2FiOTkxZjktYmVmNC00MTNlLWE4MjgtNGNiNDYyYmU0N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ2shMvRcsj6dy2TIB9eD1liYhnVSX7BuSbQ VaWAJqNR8tRjdRmjxq6ydibugo5ey9uFTqgjpRuxm9fCOCT1fwXS2f7vlxXOZzmW WqLfhnBAtfAXtxEVtxapH1iKNV0gGeze1jejG0S4Agf9FxF1XBiSZ7DcUArtDtjw oYlg/C9EvLvm7YPVjhkjikn5LJnB1CY9Isz1spdLvddynXF+mWX6AVMOhzR8Soq2 b5QnIDFAwSMwEsaH7K5kw0DTgyTB2u3A4pX3kh9DKaPU/+WfaWopMJciNQH2S7kt zaL/HXyDrsSv+9X8V+lzDyUVwdt8ZPBkDsyzD/IdP+60RfsPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKX7iBRazCyikuKnwrF5MGdCHnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNWM5OGNkYWYtNTEyNy0z M2Q2LTgyNWMtMmVlNzY5MjcyN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUDjBtaJOTeZM2xQgXqj4XAi5xbeLE8Y0jcoqrWdNIW0dHfUYEtNffY G7kd995i+hI0OiJOxTrWv+zEt4DNzrneO1V7EiNcJXyt5LwcLep8qhYX+5yQ3rBM zusfatBt1jokOFKmQqNmOJsfzV81J8eIGz/rHBisFiQftSe99G/ToXupBg54GQW7 atjNMBExMYiaT1r/RJi6XifPyoD3OBmf3pd18SsNbwAWSVN6p/blMKWaHbTThUmd KyzOTMcP0r5kYgPBO/7Psit7xQcXm+kFmtTf9t64G9/K9byxeptBi3fhMnKARnyo sekiLvh6urYsgDU2AEwa4m0hM0/2Eeo= -----END CERTIFICATE-----Generated at Mon Sep 28 19:58:24 2026 by rpki-client