$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa File: 2cc7e6d7-52d1-305c-a917-da2148e02567.roa (raw, json) Hash identifier: 6rvncLjGfQmkKjTy1+2b6rjN6LxdsLTlxvFSK8Z9kQY= Subject key identifier: 8A:A8:2B:17:B7:50:FE:F1:17:7F:FC:BA:94:28:F0:47:65:91:6B:7C Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584F4973F448E693F8BE794CAD80 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397122 IP address blocks: 68.234.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f4:48:e6:93:f8:be:79:4c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=638d550f-20fd-414c-b7b7-5e1784cf2bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:cb:b3:f6:5b:56:21:4a:b4:5a:cc:ee:4b: 72:dd:62:b4:e1:a0:36:47:7a:3b:d2:f1:70:36:47: 6f:b5:ad:8e:d3:43:d2:be:8d:c6:43:9d:c7:e4:be: 40:da:90:5b:1c:3e:ec:f5:9d:dd:83:94:91:26:65: 98:15:e0:9a:f2:22:87:86:e3:ee:68:54:28:03:4d: a8:11:4e:24:4f:33:36:b1:cc:ca:4e:6d:f9:09:1a: 76:64:67:bf:30:89:23:04:27:3d:6f:9c:7f:6f:bf: f5:4e:95:60:1a:29:fb:e8:1b:d3:8b:a1:08:fd:43: 07:5f:44:ef:f7:e5:68:d7:a8:40:70:9a:22:53:ff: 36:7b:72:a6:63:42:33:65:a9:4a:87:81:8e:ec:4c: 9f:5e:46:9f:8f:f1:c9:a9:25:c1:5a:bc:eb:65:17: b4:a8:81:44:80:1f:ae:ad:65:2a:42:e6:3c:d2:a9: a1:58:2f:d2:c2:7d:6a:17:6d:e7:d5:cf:de:bb:52: 6e:d5:d0:32:33:97:8f:8b:24:e0:c5:2b:1c:a0:96: 5e:54:f2:96:7c:85:cc:0e:c3:1a:44:71:75:12:c0: d8:e6:0e:a9:b9:c7:16:e3:6e:6f:42:07:e7:3e:df: 89:02:65:af:88:26:ff:61:8f:0d:41:76:fd:6b:54: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A8:2B:17:B7:50:FE:F1:17:7F:FC:BA:94:28:F0:47:65:91:6B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 68.234.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:82:88:dc:db:32:6a:b4:63:18:ea:ff:35:4d:06:8f:e3:e4: 17:88:b1:6f:be:a3:68:35:01:31:d4:98:4a:c9:1a:28:79:39: 9f:9d:43:47:b9:6e:b3:d8:08:28:a1:a1:13:27:55:6f:11:74: a0:7d:2d:b1:ab:a0:00:47:79:b0:74:aa:82:d2:05:b3:8b:7d: 17:05:5d:9d:3d:e5:fa:8a:47:36:a4:3e:c1:aa:4b:83:d4:b9: af:38:73:3d:d7:d5:d1:4b:5e:84:83:f0:08:2a:29:74:fd:06: 25:a4:e8:c7:54:ad:d3:84:f1:1b:cc:21:43:44:ae:3f:76:ef: 8f:8c:e3:17:fc:ea:77:5f:01:b6:7a:5c:be:60:7a:14:56:bc: e0:9c:f0:11:e4:bc:93:39:c4:db:98:fa:5f:72:5f:b8:da:31: 83:6f:37:b0:11:79:b1:cf:f9:07:78:02:bb:16:4a:d5:b9:c8: 77:36:32:45:8b:7f:19:66:98:38:22:12:2a:d8:da:ac:1d:e5: 1e:6f:37:41:35:d3:cf:40:77:14:cc:95:77:2f:11:2d:34:14: ba:fa:b9:0c:85:00:ca:e3:7f:a6:2e:31:b0:33:99:97:5a:8e: 6e:7a:72:35:d3:23:03:74:7e:cf:2b:f9:44:f0:5d:65:03:84: 8b:b5:52:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/RI5pP4vnlMrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjM4ZDU1MGYtMjBmZC00MTRjLWI3YjctNWUxNzg0Y2YyYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvLs/ZbViFKtFrM7kty3WK04aA2R3o70vFw Nkdvta2O00PSvo3GQ53H5L5A2pBbHD7s9Z3dg5SRJmWYFeCa8iKHhuPuaFQoA02o EU4kTzM2sczKTm35CRp2ZGe/MIkjBCc9b5x/b7/1TpVgGin76BvTi6EI/UMHX0Tv 9+Vo16hAcJoiU/82e3KmY0IzZalKh4GO7EyfXkafj/HJqSXBWrzrZRe0qIFEgB+u rWUqQuY80qmhWC/Swn1qF23n1c/eu1Ju1dAyM5ePiyTgxSscoJZeVPKWfIXMDsMa RHF1EsDY5g6puccW425vQgfnPt+JAmWviCb/YY8NQXb9a1QF5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqoKxe3UP7xF3/8upQo8EdlkWt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmNjN2U2ZDctNTJkMS0z MDVjLWE5MTctZGEyMTQ4ZTAyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyCiNzbMmq0Yxjq/zVNBo/j5BeIsW++o2g1ATHUmErJGih5OZ+dQ0e5 brPYCCihoRMnVW8RdKB9LbGroABHebB0qoLSBbOLfRcFXZ095fqKRzakPsGqS4PU ua84cz3X1dFLXoSD8AgqKXT9BiWk6MdUrdOE8RvMIUNErj9274+M4xf86ndfAbZ6 XL5gehRWvOCc8BHkvJM5xNuY+l9yX7jaMYNvN7ARebHP+Qd4ArsWStW5yHc2MkWL fxlmmDgiEirY2qwd5R5vN0E1089AdxTMlXcvES00FLr6uQyFAMrjf6YuMbAzmZda jm56cjXTIwN0fs8r+UTwXWUDhIu1Upo= -----END CERTIFICATE-----Generated at Wed Sep 30 19:45:36 2026 by rpki-client