$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa File: f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa (raw, json) Hash identifier: CuPrxn0ZMtDnCmbnhGKpXMK8dNq6E9Ja5j+GYerFRzc= Subject key identifier: 8A:2F:C4:2A:56:8F:9C:02:80:6B:97:9C:BF:B6:3D:BE:95:FE:25:37 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F268D0D09F1FF1060F3DCAC60 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 22652 IP address blocks: 68.209.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0d:09:f1:ff:10:60:f3:dc:ac:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=68ae52db-eb66-4628-adf4-5d357bae2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:8e:9d:8c:b6:e8:42:53:f2:03:e7:ce:b8: 18:27:23:33:9f:d1:fb:72:38:82:2f:e9:20:1c:e4: 34:73:2c:4c:15:ae:7e:83:c7:03:b1:a9:52:ce:43: 9b:96:a0:dc:42:e5:c6:16:b0:e5:f7:65:ed:73:96: 2a:23:ae:84:18:2b:7e:92:f1:4f:b9:fb:36:a7:ca: f7:51:54:cb:f3:ae:94:1b:d2:ef:f7:e8:ed:c5:e3: 78:fe:0f:b8:3c:48:61:3b:95:05:18:37:a3:dd:67: d6:91:7f:e5:68:3d:5e:d2:cb:ac:b4:05:7f:ae:da: c5:55:4a:f9:be:e7:2c:71:47:68:cc:ba:cf:eb:2d: b8:5f:e9:cf:7d:3f:26:04:10:7b:2c:08:6f:d1:97: 34:77:67:22:b5:d2:c4:c8:f4:b0:ea:23:70:df:fa: 81:82:e3:eb:97:cb:6f:6c:f4:33:12:5b:1d:f8:f6: 1b:c6:f6:6e:d7:63:5e:fe:f9:79:0f:ea:2a:58:71: b8:96:9c:2b:bc:58:34:68:fc:5b:c5:e2:e1:ee:c4: b3:db:26:9d:9e:0e:cb:29:69:90:df:70:51:19:c5: 32:49:02:88:e2:60:ee:9e:bc:cc:6f:26:38:55:d8: 4d:a8:7d:48:14:e1:ab:c7:d7:16:b5:1b:36:cb:c4: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:C4:2A:56:8F:9C:02:80:6B:97:9C:BF:B6:3D:BE:95:FE:25:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 68.209.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:21:ba:aa:04:49:f1:04:84:e3:70:af:53:df:7c:d3:24:48: d9:1f:26:78:5a:b4:d2:7b:b8:d6:ba:24:50:73:20:5e:c7:3c: ea:fb:70:79:92:ba:14:ff:99:98:76:7d:92:67:e7:55:3b:f7: e8:03:5c:61:84:97:4c:7d:ab:70:3b:8c:21:c1:12:15:8c:ae: de:50:c0:69:5a:cf:e1:cf:b2:73:f7:7f:57:25:48:c8:2a:6b: 81:46:ce:e6:d8:aa:e9:09:61:48:37:e2:1b:61:db:0f:1c:ba: a8:f8:5e:bf:45:e2:23:75:03:81:30:af:43:a0:a1:26:c1:20: 00:07:dc:4f:46:a8:bc:97:ad:80:7b:6a:c8:31:5a:a7:11:d8: ea:48:4f:c0:29:45:ca:b0:02:b6:16:2f:88:88:58:55:98:91: d6:0f:aa:7b:44:82:59:cc:8d:37:a6:5d:7b:27:8d:5a:bb:61: f0:82:98:fb:50:c4:9f:67:ca:7a:47:8a:4d:bd:aa:e8:2d:ff: dd:86:57:ae:e2:d2:7a:b4:82:44:b5:21:2b:93:2e:45:e0:c5: 90:8d:11:5b:ed:7d:35:6d:a2:25:2b:6b:ab:88:f8:41:b6:78: c1:ec:98:05:16:01:ef:2e:95:3e:ba:b8:18:07:c3:c0:21:32: ed:b5:01:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQ0J8f8QYPPcrGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk NjhhZTUyZGItZWI2Ni00NjI4LWFkZjQtNWQzNTdiYWUyYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2OnYy26EJT8gPnzrgYJyMzn9H7cjiCL+kg HOQ0cyxMFa5+g8cDsalSzkOblqDcQuXGFrDl92Xtc5YqI66EGCt+kvFPufs2p8r3 UVTL866UG9Lv9+jtxeN4/g+4PEhhO5UFGDej3WfWkX/laD1e0sustAV/rtrFVUr5 vucscUdozLrP6y24X+nPfT8mBBB7LAhv0Zc0d2citdLEyPSw6iNw3/qBguPrl8tv bPQzElsd+PYbxvZu12Ne/vl5D+oqWHG4lpwrvFg0aPxbxeLh7sSz2yadng7LKWmQ 33BRGcUySQKI4mDunrzMbyY4VdhNqH1IFOGrx9cWtRs2y8RbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIovxCpWj5wCgGuXnL+2Pb6V/iU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZjY5NjJiOTgtY2U2Yi0z N2VhLWJmMzItZWQ3OTI5ZGM3NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERNEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkhuqoESfEEhONwr1PffNMkSNkfJnhatNJ7uNa6JFBzIF7HPOr7cHmS uhT/mZh2fZJn51U79+gDXGGEl0x9q3A7jCHBEhWMrt5QwGlaz+HPsnP3f1clSMgq a4FGzubYqukJYUg34hth2w8cuqj4Xr9F4iN1A4Ewr0OgoSbBIAAH3E9GqLyXrYB7 asgxWqcR2OpIT8ApRcqwArYWL4iIWFWYkdYPqntEglnMjTemXXsnjVq7YfCCmPtQ xJ9nynpHik29qugt/92GV67i0nq0gkS1ISuTLkXgxZCNEVvtfTVtoiUra6uI+EG2 eMHsmAUWAe8ulT66uBgHw8AhMu21ATI= -----END CERTIFICATE-----Generated at Fri Sep 25 16:39:41 2026 by rpki-client