$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa File: d3144be4-dbb0-30da-85fc-0254be5834d1.roa (raw, json) Hash identifier: 5VbE5UmPXpDfPS0Otos0vy05vuC3tQoBmhVdQoLJgU4= Subject key identifier: 3C:C1:4F:50:B8:81:1E:A8:90:69:52:1A:14:8B:6B:07:79:01:C0:19 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F1CC79FD7222318C611A7AA40 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 68.64.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9f:d7:22:23:18:c6:11:a7:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=88739547-5df6-42c1-b5a7-7ab707418c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:e7:07:2f:e3:df:35:63:17:0a:d4:f0:f0: 57:5c:2a:02:f0:e8:dc:07:07:e9:a4:f2:d3:4b:e5: 57:67:13:6a:c6:76:9b:34:c5:32:24:0c:b6:a4:aa: e4:15:cd:01:5d:e3:65:98:60:fd:4d:c6:63:e9:16: b8:37:4b:c9:87:10:af:a1:08:22:c9:9d:2d:39:f8: 14:ab:f4:d0:81:c3:8f:f0:e5:0e:96:85:35:ba:1e: d2:a1:68:e5:23:a3:d6:58:8b:26:7c:39:9f:1f:3b: 0b:31:62:10:82:19:76:b4:f0:69:85:43:85:54:d2: ea:a3:5f:f0:b4:87:bc:e6:61:80:83:04:76:62:78: 01:2a:54:d8:be:64:5e:fe:f0:3d:28:17:d6:64:14: 27:e8:4e:d4:2c:fa:f1:6f:83:89:20:72:c5:02:35: fb:0f:03:22:af:57:7f:53:42:ca:fd:f2:13:0d:b6: e8:ea:66:d4:25:1a:b6:0e:4c:7e:fb:33:83:8d:80: f9:53:47:92:3e:6d:ae:93:b5:89:b7:33:93:61:d8: b6:a8:ac:79:76:f6:85:bf:7c:9b:e3:e1:8e:36:fe: b6:ac:be:ca:07:a7:1f:0f:0e:aa:0d:b5:52:f6:60: df:b5:12:b6:34:07:bc:25:32:86:54:6a:0a:f1:d0: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:4F:50:B8:81:1E:A8:90:69:52:1A:14:8B:6B:07:79:01:C0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/d3144be4-dbb0-30da-85fc-0254be5834d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:48:90:37:ff:3a:cf:37:2b:47:a5:00:a3:df:67:d8:37:27: 32:7d:b1:95:60:b8:4b:ff:30:a1:fe:08:07:5c:44:b7:4d:9d: f9:cf:af:9e:00:43:03:4c:1d:bc:96:15:ba:c2:6a:91:48:a5: 78:5a:14:f2:e8:e9:41:01:17:2b:55:b7:2e:27:46:71:43:c4: 0f:77:08:72:83:d9:83:ee:f6:66:07:6b:50:77:5e:2c:3a:dc: 74:28:eb:0e:8d:cc:ab:8e:be:19:44:f1:ad:ec:57:52:df:be: ad:15:98:dc:40:a9:b0:29:60:0a:15:66:09:05:6d:8d:9a:58: 8f:07:5c:b5:8a:89:dd:47:02:09:13:0b:67:d5:87:43:eb:f5: cb:38:72:1a:b0:e1:d3:bc:04:b9:40:2f:00:79:3b:6d:62:bb: 5b:a9:b5:56:d3:dc:b2:0c:31:23:1a:ec:f1:60:b8:83:8f:b2: 2f:96:35:9e:cb:46:e9:01:dc:b9:38:f8:bb:b5:7f:59:a1:44: cd:ea:df:79:c4:14:35:39:5d:b4:c7:00:f5:ca:46:34:ce:63: b6:d4:fe:81:0a:f5:e9:16:ad:07:41:e5:be:c8:df:81:bd:bc: 27:8f:b1:f6:45:81:43:63:6e:e0:3e:5d:2e:3c:dc:88:92:5f: c4:ca:1d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5/XIiMYxhGnqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ODg3Mzk1NDctNWRmNi00MmMxLWI1YTctN2FiNzA3NDE4YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4HnBy/j3zVjFwrU8PBXXCoC8OjcBwfppPLT S+VXZxNqxnabNMUyJAy2pKrkFc0BXeNlmGD9TcZj6Ra4N0vJhxCvoQgiyZ0tOfgU q/TQgcOP8OUOloU1uh7SoWjlI6PWWIsmfDmfHzsLMWIQghl2tPBphUOFVNLqo1/w tIe85mGAgwR2YngBKlTYvmRe/vA9KBfWZBQn6E7ULPrxb4OJIHLFAjX7DwMir1d/ U0LK/fITDbbo6mbUJRq2Dkx++zODjYD5U0eSPm2uk7WJtzOTYdi2qKx5dvaFv3yb 4+GONv62rL7KB6cfDw6qDbVS9mDftRK2NAe8JTKGVGoK8dDpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzBT1C4gR6okGlSGhSLawd5AcAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZDMxNDRiZTQtZGJiMC0z MGRhLTg1ZmMtMDI1NGJlNTgzNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREAGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlIkDf/Os83K0elAKPfZ9g3JzJ9sZVguEv/MKH+CAdcRLdNnfnPr54A QwNMHbyWFbrCapFIpXhaFPLo6UEBFytVty4nRnFDxA93CHKD2YPu9mYHa1B3Xiw6 3HQo6w6NzKuOvhlE8a3sV1Lfvq0VmNxAqbApYAoVZgkFbY2aWI8HXLWKid1HAgkT C2fVh0Pr9cs4chqw4dO8BLlALwB5O21iu1uptVbT3LIMMSMa7PFguIOPsi+WNZ7L RukB3Lk4+Lu1f1mhRM3q33nEFDU5XbTHAPXKRjTOY7bU/oEK9ekWrQdB5b7I34G9 vCePsfZFgUNjbuA+XS483IiSX8TKHZo= -----END CERTIFICATE-----Generated at Mon Oct 5 05:22:18 2026 by rpki-client