$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa File: d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa (raw, json) Hash identifier: D5M7+EoVVKKV6jvJHXo9R0zkv6U5Eem4Kv2LfUCcfX4= Subject key identifier: CD:41:D4:FB:0A:EC:86:FD:A3:26:23:E8:F8:07:43:B3:9B:E7:D2:8E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD4753C1325A618978E900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.238.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:47:53:c1:32:5a:61:89:78:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a1fd8582-c4d0-4dc6-9164-aae85867e50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c4:5b:1f:96:e2:50:66:0b:74:66:27:c2:f6: 3f:03:70:5e:81:03:aa:b1:e0:50:d1:b6:ca:53:43: 5e:84:cf:1d:f4:b8:f6:56:e9:86:84:73:1a:f6:22: 26:05:c5:18:cd:5f:47:c0:ac:c5:e7:56:75:3a:8d: 6d:88:f3:fc:68:1b:81:8a:96:ed:84:a7:82:33:c5: 82:7c:74:9e:71:7a:97:b4:7e:57:34:37:b2:39:ad: 52:ee:4b:04:cc:f9:a2:cc:d8:c5:1f:21:a1:4f:5d: 22:83:3a:46:cc:6e:06:d3:07:58:04:ab:b8:f5:ef: 16:b6:74:9c:31:b8:3e:e6:cd:cf:da:7e:34:35:2a: 4e:36:51:64:b7:d6:f6:9c:dd:54:42:db:72:23:f1: b6:8f:b1:5a:9f:35:1c:24:46:0a:7c:d8:89:fa:ae: 9f:c7:3b:a2:b1:49:a0:5b:ab:28:4f:da:fe:f4:d8: 1e:31:98:29:9e:a0:08:87:49:05:dc:40:a7:6f:1b: d8:9b:29:9f:80:9e:ff:3d:fa:9f:06:24:2e:cb:57: 3b:28:48:97:9d:92:1c:f0:f6:ee:98:bf:e6:1d:9c: 07:aa:5b:ec:85:1f:50:3e:88:ba:94:a7:0e:70:62: 82:15:ab:5a:48:4f:ce:c6:88:50:86:f5:29:be:64: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:D4:FB:0A:EC:86:FD:A3:26:23:E8:F8:07:43:B3:9B:E7:D2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:26:3a:15:45:ed:76:7b:a8:2b:71:1d:56:98:81:a0:79:43: 30:71:4b:95:c7:cb:e1:a9:5d:8e:ef:3c:95:b3:cf:b0:bb:a4: f5:a3:72:a7:85:d1:c1:e3:d9:65:cf:6c:72:9b:ef:09:a8:da: 3d:a5:04:00:03:a8:a2:f1:5b:aa:d2:cc:1f:ff:b7:0d:0a:b4: 39:ed:8c:2c:d8:93:f2:cb:0d:38:f7:87:b7:24:51:5e:1e:96: f6:10:db:bd:94:d7:94:1d:07:c7:35:ca:b0:4f:71:a6:94:01: 80:22:94:44:5c:3c:66:2d:de:12:ef:fa:0c:1c:9d:e4:d8:07: 1f:31:21:e8:68:d0:0f:7a:24:dd:c3:e7:38:04:a4:dd:22:67: f6:00:13:fd:b6:3c:1c:05:bc:97:67:22:a7:fa:a4:51:82:3a: c9:1f:fe:68:82:ab:58:85:79:09:96:82:48:0a:77:ba:1e:8e: 6a:a1:50:6d:ad:20:70:59:3b:ea:f5:37:f4:44:96:17:76:a6: 6e:19:f0:b9:19:0b:60:5f:6c:ee:df:a9:cb:b4:32:2a:ee:69: ad:89:75:9d:0d:a4:9d:ff:46:a1:7c:c1:e6:e3:12:43:d0:cb: b8:c6:1c:4e:83:f8:39:37:f9:0d:0b:26:b1:28:2e:c5:b4:03: 53:74:bc:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUdTwTJaYYl46QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTFmZDg1ODItYzRkMC00ZGM2LTkxNjQtYWFlODU4NjdlNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8RbH5biUGYLdGYnwvY/A3BegQOqseBQ0bbK U0NehM8d9Lj2VumGhHMa9iImBcUYzV9HwKzF51Z1Oo1tiPP8aBuBipbthKeCM8WC fHSecXqXtH5XNDeyOa1S7ksEzPmizNjFHyGhT10igzpGzG4G0wdYBKu49e8WtnSc Mbg+5s3P2n40NSpONlFkt9b2nN1UQttyI/G2j7FanzUcJEYKfNiJ+q6fxzuisUmg W6soT9r+9NgeMZgpnqAIh0kF3ECnbxvYmymfgJ7/PfqfBiQuy1c7KEiXnZIc8Pbu mL/mHZwHqlvshR9QPoi6lKcOcGKCFataSE/OxohQhvUpvmQQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1B1PsK7Ib9oyYj6PgHQ7Ob59KOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDgxMzlkNGUtZjBjMi0z MzAyLTlmNWMtMGFiOGUzODkyZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYmOhVF7XZ7qCtxHVaYgaB5QzBxS5XHy+GpXY7vPJWzz7C7pPWjcqeF 0cHj2WXPbHKb7wmo2j2lBAADqKLxW6rSzB//tw0KtDntjCzYk/LLDTj3h7ckUV4e lvYQ272U15QdB8c1yrBPcaaUAYAilERcPGYt3hLv+gwcneTYBx8xIeho0A96JN3D 5zgEpN0iZ/YAE/22PBwFvJdnIqf6pFGCOskf/miCq1iFeQmWgkgKd7oejmqhUG2t IHBZO+r1N/RElhd2pm4Z8LkZC2BfbO7fqcu0Miruaa2JdZ0NpJ3/RqF8webjEkPQ y7jGHE6D+Dk3+Q0LJrEoLsW0A1N0vNY= -----END CERTIFICATE-----Generated at Sun Sep 27 07:56:20 2026 by rpki-client