$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: 0AKUD0ZM0RaFWvjjabzojV0/zZOGweAOa6jRu8h27Ss= Subject key identifier: E5:6E:C0:9F:E9:22:53:AA:CB:86:60:1B:7F:C9:85:62:88:CD:D2:2E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4C54A023ACDD3FDC72A4EAA8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:a0:23:ac:dd:3f:dc:72:a4:ea:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=555223b9-afbc-42a4-a97c-403b028d7453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:26:32:88:8e:0f:ab:59:72:94:3c:3c:29: f5:99:7f:13:74:f3:53:95:be:ec:39:15:a9:70:8a: f1:ec:2f:c4:f2:d8:91:96:f3:fd:36:74:c0:6a:6e: 0b:6e:dd:80:a4:e2:7d:2a:a6:64:85:bc:95:7c:d8: c9:0d:a7:43:12:0e:fa:1e:82:82:dc:1e:d0:a7:2c: 86:6d:fa:71:ba:13:a8:82:2d:fe:89:15:1b:aa:01: cf:21:c7:76:e7:2b:97:58:41:d6:65:19:a7:54:5b: 4a:39:5c:34:ce:02:7f:38:6d:06:eb:a0:59:2c:04: 5d:cf:7e:55:cb:4b:41:27:b1:65:49:f0:ad:4e:ba: 56:a3:ea:08:fe:c6:9f:bd:33:16:98:bd:73:78:ab: f1:8f:69:48:56:34:4a:6b:b9:6d:0e:db:ae:c0:4c: da:5b:7b:35:48:93:92:af:a7:19:0a:96:a5:55:70: ea:93:47:19:05:10:be:b9:63:4e:27:37:12:65:d5: a3:a8:0c:78:34:01:ae:27:99:86:c8:9c:9d:6a:f3: 7c:9a:59:e4:21:6f:2b:df:8b:e5:9b:6f:cd:dc:a0: 86:87:65:ee:36:ca:1e:ad:1d:18:e4:81:57:cc:71: 67:6f:28:b8:90:09:be:ad:51:05:56:f2:4d:a7:6b: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6E:C0:9F:E9:22:53:AA:CB:86:60:1B:7F:C9:85:62:88:CD:D2:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:11:5e:63:42:af:3b:46:fb:f5:9c:c1:8a:3f:f3:fe:3d:86: 80:ef:fb:72:9e:ee:d0:9a:bb:ba:56:ab:da:ae:a7:2e:e4:98: 92:0e:f6:c7:aa:15:e7:71:03:38:47:5d:93:4b:c0:15:4f:0a: 13:79:c5:1f:4f:5b:e0:f8:d0:ac:91:74:bc:79:af:44:50:6a: 4f:6b:79:9c:04:51:8f:20:3c:8d:36:f7:79:a5:82:60:67:03: c5:34:37:4d:70:e8:51:3b:9e:ed:88:23:ea:22:58:d6:74:98: 30:6b:cb:db:5b:a4:68:01:22:07:19:49:f6:1b:c3:90:98:50: e8:d1:da:e7:7d:af:a0:a0:3e:e0:9c:89:7a:66:06:4d:c6:03: d8:85:bd:5b:25:4a:69:9d:91:55:19:03:8e:86:64:7f:ff:26: d3:ec:3c:0d:8b:d0:bb:d5:de:da:65:0f:2f:77:9c:00:e0:90: 2b:4e:23:27:5d:9b:58:dd:bb:d8:3b:6f:f2:67:78:ea:29:07: 12:ab:1c:ca:72:fc:be:4a:35:03:41:35:c2:e5:ab:e9:12:31: af:f6:96:74:71:db:a5:35:84:2f:bc:bc:7e:9f:b2:d1:c3:8e: 85:bf:1e:00:1e:20:b2:ac:9f:df:a4:b2:91:9c:f2:c8:d5:f2: 6b:e7:a6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVKAjrN0/3HKk6qgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTU1MjIzYjktYWZiYy00MmE0LWE5N2MtNDAzYjAyOGQ3NDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQomMoiOD6tZcpQ8PCn1mX8TdPNTlb7sORWp cIrx7C/E8tiRlvP9NnTAam4Lbt2ApOJ9KqZkhbyVfNjJDadDEg76HoKC3B7QpyyG bfpxuhOogi3+iRUbqgHPIcd25yuXWEHWZRmnVFtKOVw0zgJ/OG0G66BZLARdz35V y0tBJ7FlSfCtTrpWo+oI/safvTMWmL1zeKvxj2lIVjRKa7ltDtuuwEzaW3s1SJOS r6cZCpalVXDqk0cZBRC+uWNOJzcSZdWjqAx4NAGuJ5mGyJydavN8mlnkIW8r34vl m2/N3KCGh2XuNsoerR0Y5IFXzHFnbyi4kAm+rVEFVvJNp2u2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVuwJ/pIlOqy4ZgG3/JhWKIzdIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsRXmNCrztG+/WcwYo/8/49hoDv+3Ke7tCau7pWq9qupy7kmJIO9seq FedxAzhHXZNLwBVPChN5xR9PW+D40KyRdLx5r0RQak9reZwEUY8gPI0293mlgmBn A8U0N01w6FE7nu2II+oiWNZ0mDBry9tbpGgBIgcZSfYbw5CYUOjR2ud9r6CgPuCc iXpmBk3GA9iFvVslSmmdkVUZA46GZH//JtPsPA2L0LvV3tplDy93nADgkCtOIydd m1jdu9g7b/JneOopBxKrHMpy/L5KNQNBNcLlq+kSMa/2lnRx26U1hC+8vH6fstHD joW/HgAeILKsn9+kspGc8sjV8mvnprQ= -----END CERTIFICATE-----Generated at Fri Jul 24 11:57:04 2026 by rpki-client