$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa File: d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa (raw, json) Hash identifier: Ig0Hc3i9HpWRXUdWXwmtzfJnua8oUnMNTau8f/7s2Cs= Subject key identifier: B4:81:5E:8B:B4:34:8C:1A:84:26:63:6D:B1:1A:2F:CF:6A:38:F3:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD6E7DE50CB1D672567CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.161.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6e:7d:e5:0c:b1:d6:72:56:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=4ed0bb68-30d9-41c8-be25-3d81493bdb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:9f:e8:0c:9e:41:7b:5e:18:4f:59:73:22: 9b:8d:2c:4c:be:f5:4a:7f:5a:81:4f:06:dc:e6:59: 89:57:d6:bb:f8:97:41:78:57:08:d0:cb:b0:ff:96: af:68:e3:a1:c1:b3:29:5c:2f:a1:ce:17:ab:a3:77: f6:e9:8d:88:ef:07:1e:41:9a:73:12:28:ce:d0:d6: 48:25:00:fe:37:92:4a:a1:3b:59:e9:a0:5f:65:a9: cd:f7:9f:d1:ad:a7:65:d9:c0:6b:58:21:3e:7d:27: 3c:dd:fd:d7:51:16:51:73:ff:ec:75:df:41:f4:2d: 50:5a:2a:44:cb:02:b3:a1:0f:28:47:ac:55:ad:66: c9:31:a0:14:ba:ba:68:86:4c:1f:c2:53:52:5d:4a: 7d:a2:7e:bb:7c:84:c6:24:41:4b:e6:94:24:1a:71: cd:0d:95:a3:2a:14:b7:e5:1b:62:f2:81:ba:f5:2e: ef:fa:27:f9:da:f9:7e:13:25:7a:da:8e:e2:d7:bc: e8:36:da:54:fe:01:83:22:39:18:6f:4c:c1:32:85: 31:5c:6c:dd:16:b4:3b:f8:79:43:30:03:85:0e:1e: eb:9e:b3:f3:2c:63:62:1f:6f:e3:ad:ec:2b:ff:ff: 5a:ff:8b:d1:8e:ed:a8:a0:ce:24:b6:64:0b:02:aa: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:81:5E:8B:B4:34:8C:1A:84:26:63:6D:B1:1A:2F:CF:6A:38:F3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d944b207-da0f-3b34-bebd-f9b1f7f14a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:25:b1:cb:74:34:98:c2:36:8b:2f:48:29:06:72:1c:c6:1f: 40:a1:dd:b9:24:0a:a3:f4:a8:c4:23:47:58:ab:4c:6e:80:bd: fc:8b:0f:10:7a:ce:2f:c2:60:52:31:24:f8:46:0d:3f:a6:53: b9:6c:aa:83:e8:6f:e9:cc:20:64:86:61:e7:de:d7:6e:0b:b4: 50:31:7e:37:72:50:a1:83:27:84:c2:3e:26:ef:81:21:f6:14: 5b:26:63:01:77:fb:0f:63:30:35:32:90:11:94:49:20:af:8b: 7f:f8:ec:56:4f:a1:96:fa:2b:a9:18:21:36:91:d9:46:99:dc: 52:20:e6:36:b6:e7:3f:f9:77:d0:1e:4e:49:2f:ce:3c:24:80: 18:40:d9:5d:29:5a:77:cf:09:08:23:4d:7d:63:b2:59:b5:31: 41:34:7e:07:c6:bc:59:0d:bd:dc:65:41:7b:f6:6d:cf:87:f8: e4:cd:a2:45:99:48:62:91:f7:4c:dd:12:47:71:95:b2:90:b0: 9f:95:7b:e5:32:c5:7a:04:4a:f3:da:ca:73:54:28:cb:1d:2a: 14:38:8c:7a:4c:5a:3f:d8:98:2a:66:ee:c1:af:08:ea:76:f9: 2f:1b:60:9a:98:61:2b:72:34:81:bb:d8:ed:9b:32:bf:79:22: 29:21:4e:0c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8/rW595Qyx1nJWfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NGVkMGJiNjgtMzBkOS00MWM4LWJlMjUtM2Q4MTQ5M2JkYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspuf6AyeQXteGE9ZcyKbjSxMvvVKf1qBTwbc 5lmJV9a7+JdBeFcI0Muw/5avaOOhwbMpXC+hzhero3f26Y2I7wceQZpzEijO0NZI JQD+N5JKoTtZ6aBfZanN95/Rradl2cBrWCE+fSc83f3XURZRc//sdd9B9C1QWipE ywKzoQ8oR6xVrWbJMaAUurpohkwfwlNSXUp9on67fITGJEFL5pQkGnHNDZWjKhS3 5Rti8oG69S7v+if52vl+EyV62o7i17zoNtpU/gGDIjkYb0zBMoUxXGzdFrQ7+HlD MAOFDh7rnrPzLGNiH2/jrewr//9a/4vRju2ooM4ktmQLAqoYMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLSBXou0NIwahCZjbbEaL89qOPNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDk0NGIyMDctZGEwZi0z YjM0LWJlYmQtZjliMWY3ZjE0YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARKEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOSWxy3Q0mMI2iy9IKQZyHMYfQKHduSQKo/SoxCNHWKtMboC9/IsPEHrO L8JgUjEk+EYNP6ZTuWyqg+hv6cwgZIZh597Xbgu0UDF+N3JQoYMnhMI+Ju+BIfYU WyZjAXf7D2MwNTKQEZRJIK+Lf/jsVk+hlvorqRghNpHZRpncUiDmNrbnP/l30B5O SS/OPCSAGEDZXSlad88JCCNNfWOyWbUxQTR+B8a8WQ293GVBe/Ztz4f45M2iRZlI YpH3TN0SR3GVspCwn5V75TLFegRK89rKc1Qoyx0qFDiMekxaP9iYKmbuwa8I6nb5 LxtgmphhK3I0gbvY7Zsyv3kiKSFODA== -----END CERTIFICATE-----Generated at Fri Oct 9 21:14:23 2026 by rpki-client