$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa File: 720fe758-0773-30cb-9198-89fb2cfd9468.roa (raw, json) Hash identifier: rpw0ZzN0PBP80FpnYMYS0eNLKVIYGgVR7prrMc1yrGw= Subject key identifier: 34:82:3E:EC:3D:8D:F0:66:6E:38:0C:45:D6:0A:BA:CF:2F:FC:0F:FD Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4975826018C95B9A7329D500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 68.64.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:82:60:18:c9:5b:9a:73:29:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=06bb8205-c08a-4dd8-994b-0f3ce072b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:52:57:62:ce:55:f6:dd:5c:cd:5c:da:4e: 83:56:d2:56:5f:97:38:e2:ec:4b:02:3a:2e:82:c4: a6:cd:0f:d5:31:bb:73:9d:e8:1c:01:ba:e0:04:0e: 39:2a:5b:6a:ef:40:c5:0c:47:9f:de:2f:af:c2:ff: 14:98:ea:ab:9e:42:7d:37:24:74:2b:0b:a1:da:25: 04:16:d7:bc:8d:cc:9e:63:34:b5:2a:06:95:79:49: 1a:2d:24:ba:a3:d6:4c:7e:47:73:e8:5f:38:55:56: 21:47:d5:14:2a:42:81:26:c8:90:d6:b5:2a:a3:0c: 8a:92:24:90:e4:1b:58:cd:a2:ba:f0:dd:0e:96:83: d1:71:3a:50:44:e5:18:35:59:3b:d5:7c:14:00:57: 5a:d8:cc:9a:b2:14:9b:ae:df:1d:a7:0e:d9:d7:dc: c4:52:3f:1e:e5:71:d4:a3:d0:34:0f:e0:d3:10:29: 80:37:57:47:8c:99:4e:a7:6e:f7:94:c0:f8:d2:49: ee:c9:09:72:39:98:7e:b7:85:90:f2:06:e6:97:8c: 67:42:00:55:0c:ed:62:a4:fe:be:de:73:c6:ee:eb: 05:91:6d:fb:12:bd:aa:4e:55:6a:cb:49:5d:64:74: 35:a2:cc:28:ff:76:7b:69:09:c7:a5:90:96:e8:2f: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:82:3E:EC:3D:8D:F0:66:6E:38:0C:45:D6:0A:BA:CF:2F:FC:0F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/720fe758-0773-30cb-9198-89fb2cfd9468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b4:de:a6:98:8e:26:d4:3c:58:31:7a:71:73:6a:e3:27:c7: 4d:14:bf:44:27:34:7d:db:26:29:8b:e2:d1:cb:ef:bf:a2:e3: e4:34:33:4d:77:4f:e5:13:5f:f3:77:e0:69:1e:01:58:1e:d7: b6:00:78:7d:90:eb:82:5c:fb:6a:5f:6c:3f:8f:a7:7e:3f:b7: 9d:f9:f1:36:bf:2e:e1:a8:c3:74:26:95:d2:c8:da:5d:78:4c: 0b:09:52:a3:8d:6c:ad:e9:2b:53:06:5c:56:43:97:5b:0e:75: a2:b9:e4:61:37:6c:9f:f4:c0:96:4e:35:40:ea:99:6a:b2:77: cc:4e:7d:01:0b:8b:52:e8:25:cf:07:96:96:d8:df:50:c3:48: 5d:3f:2e:75:99:38:e6:ea:37:01:fa:e6:25:56:55:7f:6b:6a: ff:b7:59:98:6e:f2:5a:94:50:b4:16:2b:cb:7f:70:b7:42:76: 4c:69:a0:d5:76:7a:2d:36:99:8f:ea:0f:e2:6c:c8:50:65:a2: 1e:5b:f5:c5:0e:0b:ee:8b:11:7b:49:d0:7d:8f:c5:d6:50:c3: 42:12:c7:44:84:e2:88:58:ae:78:76:90:71:50:ae:a4:ce:d5: e8:b3:97:76:af:56:1c:40:a4:d4:56:e1:e7:34:5f:90:e6:f3: f2:61:a5:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdYJgGMlbmnMp1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZiYjgyMDUtYzA4YS00ZGQ4LTk5NGItMGYzY2UwNzJiOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDVSV2LOVfbdXM1c2k6DVtJWX5c44uxLAjou gsSmzQ/VMbtznegcAbrgBA45Kltq70DFDEef3i+vwv8UmOqrnkJ9NyR0Kwuh2iUE Fte8jcyeYzS1KgaVeUkaLSS6o9ZMfkdz6F84VVYhR9UUKkKBJsiQ1rUqowyKkiSQ 5BtYzaK68N0OloPRcTpQROUYNVk71XwUAFda2MyashSbrt8dpw7Z19zEUj8e5XHU o9A0D+DTECmAN1dHjJlOp273lMD40knuyQlyOZh+t4WQ8gbml4xnQgBVDO1ipP6+ 3nPG7usFkW37Er2qTlVqy0ldZHQ1oswo/3Z7aQnHpZCW6C8dbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSCPuw9jfBmbjgMRdYKus8v/A/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzIwZmU3NTgtMDc3My0z MGNiLTkxOTgtODlmYjJjZmQ5NDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKC03qaYjibUPFgxenFzauMnx00Uv0QnNH3bJimL4tHL77+i4+Q0M013 T+UTX/N34GkeAVge17YAeH2Q64Jc+2pfbD+Pp34/t5358Ta/LuGow3QmldLI2l14 TAsJUqONbK3pK1MGXFZDl1sOdaK55GE3bJ/0wJZONUDqmWqyd8xOfQELi1LoJc8H lpbY31DDSF0/LnWZOObqNwH65iVWVX9rav+3WZhu8lqUULQWK8t/cLdCdkxpoNV2 ei02mY/qD+JsyFBloh5b9cUOC+6LEXtJ0H2PxdZQw0ISx0SE4ohYrnh2kHFQrqTO 1eizl3avVhxApNRW4ec0X5Dm8/JhpUI= -----END CERTIFICATE-----Generated at Sat Oct 10 23:09:43 2026 by rpki-client