$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa File: f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa (raw, json) Hash identifier: b58UopT07pH6c03BHgMaJBvBkOPoYp/vdPnxfXUAusc= Subject key identifier: C7:CA:C5:09:35:85:FB:02:A8:9F:0A:86:5F:80:82:B7:C1:64:32:10 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E842A3F061AD8BCF0EABDD880 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 22652 IP address blocks: 68.209.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:3f:06:1a:d8:bc:f0:ea:bd:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=151bc979-2a32-4db7-b325-e9c0b0a9da0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:82:bb:37:9a:6b:55:a8:30:c6:65:02:b0: fb:81:e7:09:8f:d9:df:04:aa:10:16:7b:b4:bc:84: 6b:b7:75:6c:75:7c:5e:d8:f5:30:f1:a7:cd:6c:65: 60:44:aa:36:0b:3d:12:27:a0:5e:cd:31:f5:c5:cf: ea:b0:83:d4:c9:1b:75:02:e5:e6:f2:fb:db:cb:0d: 68:a0:44:46:bc:74:e2:64:a3:98:ad:72:91:84:b7: 00:6b:5d:47:f6:01:d9:e6:6b:03:ad:ee:65:e4:fb: 54:8f:cd:79:c8:5d:d7:c0:88:f5:63:03:69:50:76: 71:f1:b9:6c:65:11:bf:4c:0b:86:e5:45:21:ad:de: 1a:63:10:67:99:91:18:cc:f5:25:a3:64:f2:48:9a: 6f:38:fa:ca:04:a3:2b:73:e4:d2:bf:e9:92:b3:01: 23:ca:f4:d1:54:0d:0b:55:9b:dc:fb:b3:ec:e4:65: d4:04:1e:09:99:55:16:75:09:43:df:40:5f:dc:1a: 13:e6:0d:a1:70:46:4d:0d:28:e8:7c:79:7e:1f:fa: 46:15:ad:fe:b6:20:a5:bd:f0:29:4c:dd:e9:2b:0c: fe:4f:f0:e3:2d:a8:bf:5a:3e:80:04:eb:3d:d3:31: 38:d1:1e:c3:1b:51:02:96:c0:2e:16:da:f4:90:fa: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CA:C5:09:35:85:FB:02:A8:9F:0A:86:5F:80:82:B7:C1:64:32:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f6962b98-ce6b-37ea-bf32-ed7929dc778e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 68.209.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:42:ba:b8:c5:64:d2:ee:f2:29:f6:eb:6f:8c:e5:a5:14:ad: 3e:9f:58:77:47:e8:3e:35:23:f3:49:dc:de:59:1f:fb:6c:cd: a1:ff:02:14:d3:04:17:cc:19:5e:50:a1:fe:c6:bd:a8:aa:5c: 16:2f:22:1d:9f:f8:cb:b8:17:b2:ee:5a:20:50:20:8a:5a:41: 2f:a4:dc:55:83:bf:db:60:c4:51:72:a9:c5:2a:c8:33:c5:fd: 1d:39:dc:1f:4d:b8:9e:e5:a4:9f:be:70:c9:a2:fa:79:85:9d: b4:1b:d5:1b:26:5c:f8:8f:c8:65:d0:d8:1b:6e:14:18:de:d5: 51:e1:ed:42:29:f3:62:f6:1d:03:3d:3c:9d:30:9e:c5:25:c4: 96:51:4a:1e:ce:bf:d8:ed:b8:e2:0a:a9:33:ab:53:30:8d:f1: 55:e4:3f:55:58:05:ff:c1:3b:31:87:86:3a:54:49:18:fe:a1: e6:f9:33:24:20:07:2c:f1:5f:47:96:59:a8:1a:f7:45:c6:02: 94:20:7f:2b:bf:c6:02:b9:a0:21:c7:cd:1f:d2:62:22:33:63: 7b:dc:74:71:8e:1c:73:6e:22:96:14:a9:e0:9c:fe:95:ba:05: e2:6b:ba:27:25:b6:79:62:d7:f0:76:d4:0e:ed:48:0d:d2:de: 63:6e:92:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKj8GGti88Oq92IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk MTUxYmM5NzktMmEzMi00ZGI3LWIzMjUtZTljMGIwYTlkYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62uCuzeaa1WoMMZlArD7gecJj9nfBKoQFnu0 vIRrt3VsdXxe2PUw8afNbGVgRKo2Cz0SJ6BezTH1xc/qsIPUyRt1AuXm8vvbyw1o oERGvHTiZKOYrXKRhLcAa11H9gHZ5msDre5l5PtUj815yF3XwIj1YwNpUHZx8bls ZRG/TAuG5UUhrd4aYxBnmZEYzPUlo2TySJpvOPrKBKMrc+TSv+mSswEjyvTRVA0L VZvc+7Ps5GXUBB4JmVUWdQlD30Bf3BoT5g2hcEZNDSjofHl+H/pGFa3+tiClvfAp TN3pKwz+T/DjLai/Wj6ABOs90zE40R7DG1EClsAuFtr0kPqBJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfKxQk1hfsCqJ8Khl+AgrfBZDIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZjY5NjJiOTgtY2U2Yi0z N2VhLWJmMzItZWQ3OTI5ZGM3NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERNEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhCurjFZNLu8in262+M5aUUrT6fWHdH6D41I/NJ3N5ZH/tszaH/AhTT BBfMGV5Qof7GvaiqXBYvIh2f+Mu4F7LuWiBQIIpaQS+k3FWDv9tgxFFyqcUqyDPF /R053B9NuJ7lpJ++cMmi+nmFnbQb1RsmXPiPyGXQ2BtuFBje1VHh7UIp82L2HQM9 PJ0wnsUlxJZRSh7Ov9jtuOIKqTOrUzCN8VXkP1VYBf/BOzGHhjpUSRj+oeb5MyQg ByzxX0eWWaga90XGApQgfyu/xgK5oCHHzR/SYiIzY3vcdHGOHHNuIpYUqeCc/pW6 BeJruicltnli1/B21A7tSA3S3mNukig= -----END CERTIFICATE-----Generated at Fri Jul 24 03:24:36 2026 by rpki-client