$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa File: 9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa (raw, json) Hash identifier: x/T9wV1uCS4rjXgtIo+zszXgiWvsHjSjGNZhH+zP0Gw= Subject key identifier: B3:90:B5:AE:5B:7A:36:B0:EC:55:0C:34:CA:B0:91:D8:A5:21:30:F4 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584E48247C20AB025EF21DE44E80 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 22709 IP address blocks: 68.67.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:7c:20:ab:02:5e:f2:1d:e4:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=5057752b-d4dc-4c38-9312-2ea3f1d56ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:9a:e3:ef:f1:96:bc:c4:51:e5:c7:50:c9: 0e:a4:e6:0d:dc:3f:a0:31:f5:98:e7:54:75:24:a3: 46:0b:b3:32:cc:e2:ff:8a:56:20:54:01:81:f1:9d: 5d:9f:38:12:82:23:a1:f3:0f:32:83:44:27:ab:49: 29:e4:13:fc:cb:98:36:aa:87:2f:53:67:6b:e0:0b: 06:79:3d:e1:a6:55:9f:e0:1d:f9:3d:c8:95:bc:31: e6:67:21:8a:6e:4b:f5:38:a0:84:87:d5:dd:f8:b5: 01:05:af:14:96:5a:8d:fd:41:fa:d7:b4:17:4a:23: 8c:2e:39:2b:a4:e4:1d:72:da:c2:0f:88:60:d4:d6: dc:fb:f7:95:72:24:5c:00:cf:ef:e5:73:44:9c:0d: 61:df:be:7c:43:68:4b:11:6d:e3:9f:ad:2e:56:3a: 84:48:76:eb:72:6d:2d:6f:10:cc:8d:28:3a:e6:3e: 10:a2:88:e1:f5:64:06:f6:43:64:de:f1:d9:cb:d0: 00:a3:1b:86:1c:0f:55:8b:c0:d5:86:14:d3:58:7d: 99:f5:13:03:08:92:21:28:78:a9:c3:f0:b7:47:e8: f3:48:85:09:50:e6:58:be:e2:83:d8:86:06:9a:41: 6a:d0:25:60:9b:2a:e2:e2:1c:44:a8:65:f8:a1:5e: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:B5:AE:5B:7A:36:B0:EC:55:0C:34:CA:B0:91:D8:A5:21:30:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/9c434eac-9e5d-3b3a-83d9-18e31edd161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 68.67.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3d:7d:1e:5c:eb:2a:f7:b2:46:18:3d:c2:5b:a2:21:71:62: 67:d3:bd:8f:6b:27:e5:ff:8f:fc:7d:c5:df:8f:12:95:fe:de: ae:c8:bf:6a:6b:00:ba:50:d5:cf:d8:71:14:d3:46:79:e2:82: ae:21:a1:e5:72:e3:5c:f3:bb:64:7b:bc:fa:2d:60:78:65:22: 06:de:ca:d8:0e:ae:22:39:80:56:80:b7:d9:d2:36:40:6f:e0: 6a:66:75:7a:91:b2:97:44:23:68:2e:66:3c:d3:a9:e7:bb:e2: 2e:6d:01:0e:a0:4c:1f:9e:bb:29:75:b6:f8:bd:0d:03:95:1b: a1:6d:5b:f4:a7:1d:b5:86:e4:b7:4b:60:1c:97:e2:67:d9:bf: 79:4f:b9:d2:8e:e3:d6:6c:10:cd:1b:43:ae:f9:6b:53:a1:d6: 02:e9:76:39:46:35:51:45:b0:30:2e:7b:68:b1:04:c4:a7:0a: 55:a4:a6:b7:0f:69:28:a4:ed:ff:f2:34:f5:79:85:0c:f2:39: 41:cb:ef:7e:a6:99:ff:fc:f1:af:6a:b7:e0:85:60:cb:bb:4b: cc:94:b4:6b:b5:58:4e:70:c7:dd:8b:85:32:e9:bd:27:2b:86: df:28:16:e5:4d:18:b6:ab:48:75:87:c2:b2:e2:14:dd:17:d2: 69:af:66:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJHwgqwJe8h3kToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NTA1Nzc1MmItZDRkYy00YzM4LTkzMTItMmVhM2YxZDU2ZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDya4+/xlrzEUeXHUMkOpOYN3D+gMfWY51R1 JKNGC7MyzOL/ilYgVAGB8Z1dnzgSgiOh8w8yg0Qnq0kp5BP8y5g2qocvU2dr4AsG eT3hplWf4B35PciVvDHmZyGKbkv1OKCEh9Xd+LUBBa8UllqN/UH617QXSiOMLjkr pOQdctrCD4hg1Nbc+/eVciRcAM/v5XNEnA1h3758Q2hLEW3jn60uVjqESHbrcm0t bxDMjSg65j4Qoojh9WQG9kNk3vHZy9AAoxuGHA9Vi8DVhhTTWH2Z9RMDCJIhKHip w/C3R+jzSIUJUOZYvuKD2IYGmkFq0CVgmyri4hxEqGX4oV7cHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOQta5bejaw7FUMNMqwkdilITD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvOWM0MzRlYWMtOWU1ZC0z YjNhLTgzZDktMThlMzFlZGQxNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs9fR5c6yr3skYYPcJboiFxYmfTvY9rJ+X/j/x9xd+PEpX+3q7Iv2pr ALpQ1c/YcRTTRnnigq4hoeVy41zzu2R7vPotYHhlIgbeytgOriI5gFaAt9nSNkBv 4GpmdXqRspdEI2guZjzTqee74i5tAQ6gTB+euyl1tvi9DQOVG6FtW/SnHbWG5LdL YByX4mfZv3lPudKO49ZsEM0bQ675a1Oh1gLpdjlGNVFFsDAue2ixBMSnClWkprcP aSik7f/yNPV5hQzyOUHL736mmf/88a9qt+CFYMu7S8yUtGu1WE5wx92LhTLpvScr ht8oFuVNGLarSHWHwrLiFN0X0mmvZg0= -----END CERTIFICATE-----Generated at Fri Jul 24 12:19:59 2026 by rpki-client