$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91685390-3e3f-36ed-bfd4-3bb8f88a70a8.roa File: 91685390-3e3f-36ed-bfd4-3bb8f88a70a8.roa (raw, json) Hash identifier: 26iQAGVoXAAOfkq2y0Mzu5wxlecwJZKvDsr/0unyE38= Subject key identifier: C7:2D:6B:53:A1:64:A3:7A:8D:F4:9A:FE:28:FB:D0:D5:3F:21:4D:CA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584E90BA561F949CCF132CC6F480 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91685390-3e3f-36ed-bfd4-3bb8f88a70a8.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 3320 IP address blocks: 68.167.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:56:1f:94:9c:cf:13:2c:c6:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=552e9c2c-010f-4c6c-909d-6f0c97a7ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:2b:17:d1:49:32:ac:ec:0c:1d:24:1e:f7: e2:be:36:30:b9:0e:3c:3b:34:8c:11:15:6e:11:9d: a5:19:6f:55:38:cd:bf:ac:62:37:be:bb:f8:38:67: 36:21:87:49:c4:b7:6f:ed:e3:38:ff:88:c2:ec:65: 2e:34:ed:36:ba:7e:df:92:7b:cc:30:e8:d3:86:29: 35:97:ae:50:1e:c6:04:40:f3:6b:7b:ba:42:9f:f9: 34:12:a7:82:7d:4c:00:c3:b3:7f:e5:47:d2:4b:1c: 68:7b:ad:31:e1:ce:90:65:7b:25:74:5c:20:d9:6f: 95:11:9f:bb:18:fc:f4:e6:95:de:99:f5:8b:d5:15: 81:bc:5a:9a:5e:e9:87:2c:7e:04:a4:84:65:ab:76: 3c:d6:df:17:08:c8:e9:4e:e1:ec:b9:11:ce:85:1e: 8a:e2:6d:0f:92:b9:a5:ec:01:63:a8:e0:a5:fd:44: 7d:d2:5c:a3:93:e7:f6:79:3b:83:cd:9c:e4:ed:30: 02:73:0b:7c:52:d1:0e:1b:6b:99:08:19:7e:b9:d5: 0d:f4:d5:f0:b8:f2:f0:2d:2f:48:80:6b:ac:6e:01: 49:79:56:eb:59:09:74:99:21:62:f0:c3:6e:f9:ab: c2:11:d6:64:be:10:a4:68:3a:93:27:33:c1:93:24: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2D:6B:53:A1:64:A3:7A:8D:F4:9A:FE:28:FB:D0:D5:3F:21:4D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/91685390-3e3f-36ed-bfd4-3bb8f88a70a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e4:a0:2c:0a:e5:13:c6:48:cb:fe:b4:77:0d:38:a3:63:d6: b5:79:4a:27:5a:2e:65:91:92:80:a7:16:01:ec:c9:ed:f4:92: 51:06:84:69:c8:72:e5:a6:e4:3a:21:c8:59:b2:05:54:a4:92: df:81:37:12:ea:6f:e6:bb:38:6a:98:2b:74:d9:d0:63:c7:a3: ed:03:26:73:96:aa:c1:b3:e3:ec:77:d9:58:88:4d:01:de:ce: 18:e5:c6:c2:4a:eb:d2:58:cb:e3:44:e8:2d:86:70:c7:36:85: b2:4c:49:6b:57:7b:6b:38:de:02:b6:65:ae:91:c3:59:90:03: da:c2:c4:42:e9:53:19:1a:cb:d0:f8:ce:18:7d:ad:8f:b1:cc: 7c:0b:53:79:d0:e0:31:62:a8:ef:3f:f9:6b:eb:48:44:16:85: c9:54:e9:71:7c:4b:eb:37:3a:cf:51:7a:25:cb:33:8a:4c:a4: 7a:c7:bc:a3:7d:f4:a5:5d:a6:67:7f:d5:92:ee:5e:42:41:ef: c5:e9:ce:67:d6:d0:3a:fa:36:7e:96:0a:c2:ad:03:14:66:65: 6a:5c:fe:73:f9:e4:8f:2b:d9:48:d0:9d:79:2c:e0:a9:44:86: e4:ef:c2:b5:11:73:e1:3e:f3:fd:4d:62:31:05:fa:f1:42:a0: 8e:f3:bc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulYflJzPEyzG9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk NTUyZTljMmMtMDEwZi00YzZjLTkwOWQtNmYwYzk3YTdhYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsUrF9FJMqzsDB0kHvfivjYwuQ48OzSMERVu EZ2lGW9VOM2/rGI3vrv4OGc2IYdJxLdv7eM4/4jC7GUuNO02un7fknvMMOjThik1 l65QHsYEQPNre7pCn/k0EqeCfUwAw7N/5UfSSxxoe60x4c6QZXsldFwg2W+VEZ+7 GPz05pXemfWL1RWBvFqaXumHLH4EpIRlq3Y81t8XCMjpTuHsuRHOhR6K4m0Pkrml 7AFjqOCl/UR90lyjk+f2eTuDzZzk7TACcwt8UtEOG2uZCBl+udUN9NXwuPLwLS9I gGusbgFJeVbrWQl0mSFi8MNu+avCEdZkvhCkaDqTJzPBkyQ11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcta1OhZKN6jfSa/ij70NU/IU3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTE2ODUzOTAtM2UzZi0z NmVkLWJmZDQtM2JiOGY4OGE3MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTkoCwK5RPGSMv+tHcNOKNj1rV5SidaLmWRkoCnFgHsye30klEGhGnI cuWm5DohyFmyBVSkkt+BNxLqb+a7OGqYK3TZ0GPHo+0DJnOWqsGz4+x32ViITQHe zhjlxsJK69JYy+NE6C2GcMc2hbJMSWtXe2s43gK2Za6Rw1mQA9rCxELpUxkay9D4 zhh9rY+xzHwLU3nQ4DFiqO8/+WvrSEQWhclU6XF8S+s3Os9ReiXLM4pMpHrHvKN9 9KVdpmd/1ZLuXkJB78XpzmfW0Dr6Nn6WCsKtAxRmZWpc/nP55I8r2UjQnXks4KlE huTvwrURc+E+8/1NYjEF+vFCoI7zvA0= -----END CERTIFICATE-----Generated at Thu Jul 23 22:02:53 2026 by rpki-client