$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa File: 79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (raw, json) Hash identifier: HYv7+X73PRflOlpGCAyJm1B/7NLPsH8Z0JHtcTuGW1c= Subject key identifier: 51:AE:A1:26:78:D3:D2:22:A3:30:AE:88:71:3B:06:F0:8E:71:27:4C Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F4328584E5BAF459BFD8EA7C411961C00 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 13649 IP address blocks: 168.245.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:45:9b:fd:8e:a7:c4:11:96:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=f409096a-973a-4e44-8930-f0cbb37266f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:80:7a:6c:f9:a8:c3:1c:4f:26:26:67:e3: 96:9b:7b:ac:cc:c6:7b:65:b0:b9:d3:df:1d:02:b2: da:8b:23:5d:3b:4c:1a:04:1a:05:c4:27:4f:4d:a5: 51:44:71:8e:52:e1:28:a6:1b:5e:1e:22:3a:ff:cd: 4e:d8:19:b5:de:24:ec:ed:a2:ee:00:b2:8a:58:5c: aa:52:9c:a0:1d:bd:d9:21:11:7f:81:23:3c:4b:99: 27:9d:ca:9d:99:b4:fa:be:c8:70:da:ac:70:f9:1c: 93:f3:3f:5b:b6:2e:50:ea:7c:4f:cf:d8:ae:4b:eb: 0f:4a:b6:57:8e:fc:79:4c:21:d1:cb:d9:b6:4a:d7: df:1a:66:fb:b3:c6:79:60:7a:15:5f:48:5b:b4:da: c7:5b:8d:5f:cd:35:e3:0e:c7:97:a1:1f:24:02:48: 5b:d6:b6:63:4f:d9:99:b8:d7:13:84:23:ed:91:fa: a9:1a:bc:c1:ab:c1:1f:60:7b:11:60:26:8c:69:ce: 21:5e:ec:70:8a:62:33:f0:83:f1:81:9b:30:37:99: 42:35:b3:58:07:c7:6b:69:79:00:b6:70:66:9b:6e: 37:fd:83:99:9a:0f:31:92:86:c8:90:05:63:43:bd: 9a:29:09:63:4d:33:d8:66:fe:0c:c3:d9:23:38:5f: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:AE:A1:26:78:D3:D2:22:A3:30:AE:88:71:3B:06:F0:8E:71:27:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7f:1c:22:b0:c4:bb:94:a0:bb:33:f8:e7:55:e9:c6:62:83: 1d:32:e4:36:24:32:90:f0:99:47:96:0e:13:4f:bc:c3:0b:2e: 19:95:0c:f1:97:21:67:d1:a4:24:75:86:ec:89:05:38:15:4d: 00:ac:41:3b:c2:a9:34:c9:ae:79:68:0f:83:6c:ff:3a:d0:0c: 21:c6:9f:eb:4b:85:81:6e:93:e7:c4:73:26:33:6b:d8:ce:ee: 9d:23:d4:53:f4:da:10:d2:d3:9e:ed:99:38:56:d7:cf:0b:08: 80:e8:d5:1e:2b:c6:c6:9f:91:8d:16:66:67:fe:9d:38:26:03: 57:ea:89:00:2b:62:25:ce:8b:9e:9f:d4:25:c6:92:15:9b:c6: 75:74:32:fa:95:ca:bd:de:c6:01:1a:85:9b:11:56:de:30:44: 75:d6:77:17:f3:00:6a:00:13:9c:40:e4:00:8a:66:7b:03:c9: be:da:18:d9:99:7a:b9:45:7a:23:6b:85:5f:61:b0:86:46:48: cc:2d:30:1f:31:e3:73:66:6c:cb:08:bf:f9:41:cd:b5:05:a5: cf:53:47:00:e7:be:37:44:0a:84:16:d4:e7:2b:4b:1a:d8:5c: e9:5a:88:c5:e4:da:6f:8d:f1:cf:57:78:2b:c5:a3:5e:ed:ab: fc:a5:e1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5br0Wb/Y6nxBGWHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk ZjQwOTA5NmEtOTczYS00ZTQ0LTg5MzAtZjBjYmIzNzI2NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOeAemz5qMMcTyYmZ+OWm3uszMZ7ZbC5098d ArLaiyNdO0waBBoFxCdPTaVRRHGOUuEophteHiI6/81O2Bm13iTs7aLuALKKWFyq UpygHb3ZIRF/gSM8S5knncqdmbT6vshw2qxw+RyT8z9bti5Q6nxPz9iuS+sPSrZX jvx5TCHRy9m2StffGmb7s8Z5YHoVX0hbtNrHW41fzTXjDseXoR8kAkhb1rZjT9mZ uNcThCPtkfqpGrzBq8EfYHsRYCaMac4hXuxwimIz8IPxgZswN5lCNbNYB8draXkA tnBmm243/YOZmg8xkobIkAVjQ72aKQljTTPYZv4Mw9kjOF//ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGuoSZ409IiozCuiHE7BvCOcSdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNzk4MDk5NzYtOWRmOS0z ZDkxLWI3ZTgtNmEzYWZhZWFjMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqPXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB/HCKwxLuUoLsz+OdV6cZigx0y5DYkMpDwmUeWDhNPvMMLLhmVDPGX IWfRpCR1huyJBTgVTQCsQTvCqTTJrnloD4Ns/zrQDCHGn+tLhYFuk+fEcyYza9jO 7p0j1FP02hDS057tmThW188LCIDo1R4rxsafkY0WZmf+nTgmA1fqiQArYiXOi56f 1CXGkhWbxnV0MvqVyr3exgEahZsRVt4wRHXWdxfzAGoAE5xA5ACKZnsDyb7aGNmZ erlFeiNrhV9hsIZGSMwtMB8x43NmbMsIv/lBzbUFpc9TRwDnvjdECoQW1OcrSxrY XOlaiMXk2m+N8c9XeCvFo17tq/yl4cc= -----END CERTIFICATE-----Generated at Fri Jul 24 09:12:35 2026 by rpki-client