$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa File: b7677b23-569f-3269-882c-0cdb2f1c8cad.roa (raw, json) Hash identifier: JDBbnfRpocVjyWpfBwgZUx2ROYveOeklWyRbTI3HXdo= Subject key identifier: 0A:4F:E4:6A:56:6A:10:01:A0:DF:F6:3D:0C:27:53:8A:10:4D:F5:6D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F3CE2853C1E0ECCD4F37CE5C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 68.64.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:85:3c:1e:0e:cc:d4:f3:7c:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=039ab6f6-4b46-4f43-b682-10934b1c6d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:b4:eb:5f:29:ee:be:ff:90:50:01:94:ef: 28:6f:6b:ce:99:ea:ee:e5:d8:ed:fc:ca:2d:54:67: 39:d3:e7:b3:c7:74:5a:7d:71:77:99:20:a0:b7:39: 25:71:d1:5d:88:60:d9:53:3e:03:79:50:77:2b:80: b8:72:ea:68:0c:83:42:42:33:8d:ca:0d:f4:5a:c1: 23:89:33:bb:86:81:f5:5a:42:fa:93:8b:c1:f5:e3: 02:a4:14:7e:7a:4f:fe:f4:31:e1:95:47:c2:f4:aa: 87:90:ba:ec:b7:fc:e4:9f:b1:d9:07:e5:ef:56:1a: d9:ab:b5:14:0e:5b:d5:35:05:8b:2e:ea:46:56:8a: 5a:fe:ca:1c:88:90:b3:51:21:8a:15:27:03:11:15: cc:f8:fb:1b:86:ba:4d:3f:58:b2:57:0b:ec:9b:15: 15:ca:b3:79:0d:ef:9a:e3:4a:a8:94:d7:a3:02:ff: 87:51:cb:b3:5e:fe:9f:3e:32:76:b4:a3:33:3f:a7: fc:d5:bc:aa:50:06:81:cf:e3:ee:56:a5:58:9d:40: 96:8b:7f:4c:81:33:13:05:b7:79:d3:ea:ba:54:c6: 22:dd:c8:29:9a:75:79:d7:a2:4a:34:ff:94:ff:e3: 21:60:9d:f5:84:39:87:2e:4d:86:27:bd:23:0f:7a: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4F:E4:6A:56:6A:10:01:A0:DF:F6:3D:0C:27:53:8A:10:4D:F5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b7677b23-569f-3269-882c-0cdb2f1c8cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:dc:1c:93:9b:26:79:4b:18:81:66:3b:e5:f2:7d:cd:02:bd: 64:71:7a:6e:f5:5a:e0:61:56:e8:ec:20:63:64:6d:be:90:01: 0f:8e:e1:c5:a0:16:db:2f:0a:c3:ff:c1:2e:a3:3c:2a:b5:fa: 7a:a9:39:8f:af:ec:17:2e:fd:e8:c3:da:f2:c6:d9:74:ea:4c: 2b:9a:49:24:ac:4f:38:f7:f7:89:03:09:56:cb:55:7e:8b:a4: 0a:98:eb:08:87:e5:bc:fc:03:25:56:f0:24:d2:04:8a:74:4e: 6d:7b:80:00:1a:30:3e:2a:b6:aa:47:8c:eb:d6:75:76:82:0d: 51:d0:dd:5e:29:0c:6d:41:54:12:4e:61:86:b0:86:e1:ee:24: f7:13:04:67:cf:90:4f:48:50:c9:36:ba:75:df:73:a1:0a:5d: d2:8f:b0:29:ec:98:16:21:c7:fe:49:28:af:6c:cb:00:2a:29: 92:40:7b:e6:53:94:1a:bd:da:6b:6c:eb:8f:d7:41:6d:b7:4f: 2e:b6:a8:a2:55:36:5e:5f:81:14:ef:30:7a:de:ae:e7:8a:b8: 4f:70:4b:87:90:0d:73:cd:76:60:73:09:b2:85:a7:e1:fb:9a: 4f:b7:7c:f9:5f:57:86:37:71:3c:68:f1:33:04:c3:a2:49:bc: 3f:88:a8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oU8Hg7M1PN85cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDM5YWI2ZjYtNGI0Ni00ZjQzLWI2ODItMTA5MzRiMWM2ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwG0618p7r7/kFABlO8ob2vOmeru5djt/Mot VGc50+ezx3RafXF3mSCgtzklcdFdiGDZUz4DeVB3K4C4cupoDINCQjONyg30WsEj iTO7hoH1WkL6k4vB9eMCpBR+ek/+9DHhlUfC9KqHkLrst/zkn7HZB+XvVhrZq7UU DlvVNQWLLupGVopa/sociJCzUSGKFScDERXM+PsbhrpNP1iyVwvsmxUVyrN5De+a 40qolNejAv+HUcuzXv6fPjJ2tKMzP6f81byqUAaBz+PuVqVYnUCWi39MgTMTBbd5 0+q6VMYi3cgpmnV516JKNP+U/+MhYJ31hDmHLk2GJ70jD3oJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApP5GpWahABoN/2PQwnU4oQTfVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYjc2NzdiMjMtNTY5Zi0z MjY5LTg4MmMtMGNkYjJmMWM4Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDcHJObJnlLGIFmO+Xyfc0CvWRxem71WuBhVujsIGNkbb6QAQ+O4cWg FtsvCsP/wS6jPCq1+nqpOY+v7Bcu/ejD2vLG2XTqTCuaSSSsTzj394kDCVbLVX6L pAqY6wiH5bz8AyVW8CTSBIp0Tm17gAAaMD4qtqpHjOvWdXaCDVHQ3V4pDG1BVBJO YYawhuHuJPcTBGfPkE9IUMk2unXfc6EKXdKPsCnsmBYhx/5JKK9sywAqKZJAe+ZT lBq92mts64/XQW23Ty62qKJVNl5fgRTvMHrerueKuE9wS4eQDXPNdmBzCbKFp+H7 mk+3fPlfV4Y3cTxo8TMEw6JJvD+IqFY= -----END CERTIFICATE-----Generated at Sat Oct 10 14:00:06 2026 by rpki-client