$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa File: 344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa (raw, json) Hash identifier: yaS8ra6Gcpxm5dq9PSIEVPhwcYuEIxGNdvZXy1iwUUI= Subject key identifier: 52:62:21:81:C5:FE:48:46:87:4C:0D:0F:3F:48:13:88:28:4D:79:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA788DF320D5FE8375F5C3F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 68.34.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:df:32:0d:5f:e8:37:5f:5c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9aa73dbe-90e1-4e54-806b-a1554f641b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:0e:09:70:25:39:ed:14:10:bb:9b:96:de: 8d:0a:84:19:64:54:63:77:08:93:62:41:6a:5f:79: 9e:6d:b1:71:21:d8:d5:55:c7:44:ce:d1:e9:c9:a9: cb:a9:91:c9:7f:04:a9:39:7b:a8:31:5e:06:65:e5: a7:53:55:0d:49:6f:79:97:51:4f:e7:22:e0:cb:35: 01:9e:58:b1:f7:45:72:cc:4a:1d:05:72:78:ab:3d: 2b:45:8b:31:8c:18:8a:b4:00:a2:38:02:d5:46:27: 60:f3:1f:99:5b:f8:c0:6f:d5:33:fd:c9:09:c7:2c: 16:4b:73:8d:b5:58:02:3c:14:cc:86:ca:d8:ae:b4: 8c:6f:bf:4e:dd:f9:80:90:f1:6d:76:d7:1f:d5:37: 4c:58:c3:25:02:e6:53:04:7f:b7:f7:34:84:81:aa: 7c:71:79:e8:54:fb:c3:ba:aa:77:66:19:e8:58:32: e3:03:bb:3b:37:7a:95:26:38:89:18:3a:23:0c:80: 4b:7a:4e:e6:98:1c:bf:01:a4:7f:d3:23:2c:e3:20: b3:a4:96:6d:4e:e4:0b:ff:a0:d6:ac:3f:65:1b:73: b7:1f:21:76:d8:bf:02:37:7f:66:86:14:6c:2c:d3: da:2a:8a:c3:91:74:45:6a:56:4a:b7:21:35:4f:0f: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:21:81:C5:FE:48:46:87:4C:0D:0F:3F:48:13:88:28:4D:79:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/344652f8-7f8c-38ad-97cd-bf6d642e27a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6b:af:30:9c:a7:4a:79:2b:7d:4c:8f:cf:3c:28:ad:29:19: 43:5c:2a:7f:2b:b2:08:96:6e:99:50:e3:32:41:9a:1b:4b:c6: e4:04:ed:00:d2:97:c8:4d:63:10:e4:81:38:9a:ca:c9:08:75: d1:9f:c4:10:6c:6a:1d:90:cb:2d:b7:b5:a0:f7:61:95:68:a4: 3f:29:c7:c0:69:87:0f:99:b9:8a:be:03:8b:3f:f5:51:4d:5f: 5c:2a:75:55:15:f8:9f:9a:7a:b7:55:a8:33:22:f7:77:82:01: 94:93:30:11:56:c0:d2:f9:06:1e:af:c4:de:e6:d7:bc:3e:9c: e4:cf:5d:78:91:f9:b0:ca:b3:c1:c9:c9:2d:76:a7:36:37:54: 44:1f:0a:62:9b:84:31:47:cc:2c:e2:ad:ba:c2:95:a5:e0:9d: b4:9e:e4:22:e5:23:d8:39:e8:a8:00:65:c4:2f:43:b9:f6:3a: 23:8d:94:43:92:ee:e5:82:8d:ed:8a:b9:7a:f8:30:6d:18:a9: 38:27:4a:e8:a5:68:5f:8c:73:39:e3:fa:f8:0d:3b:64:9a:0a: 6a:02:f4:00:46:e0:b4:5f:ac:d6:ca:0d:9a:4d:d7:5e:9a:56: da:10:dd:b0:84:51:3a:a9:92:ee:f4:64:fb:e8:6b:a4:99:59: 86:69:e0:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niN8yDV/oN19cPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFhNzNkYmUtOTBlMS00ZTU0LTgwNmItYTE1NTRmNjQxYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTMOCXAlOe0UELublt6NCoQZZFRjdwiTYkFq X3mebbFxIdjVVcdEztHpyanLqZHJfwSpOXuoMV4GZeWnU1UNSW95l1FP5yLgyzUB nlix90VyzEodBXJ4qz0rRYsxjBiKtACiOALVRidg8x+ZW/jAb9Uz/ckJxywWS3ON tVgCPBTMhsrYrrSMb79O3fmAkPFtdtcf1TdMWMMlAuZTBH+39zSEgap8cXnoVPvD uqp3ZhnoWDLjA7s7N3qVJjiJGDojDIBLek7mmBy/AaR/0yMs4yCzpJZtTuQL/6DW rD9lG3O3HyF22L8CN39mhhRsLNPaKorDkXRFalZKtyE1Tw801wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJiIYHF/khGh0wNDz9IE4goTXnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ0NjUyZjgtN2Y4Yy0z OGFkLTk3Y2QtYmY2ZDY0MmUyN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNrrzCcp0p5K31Mj888KK0pGUNcKn8rsgiWbplQ4zJBmhtLxuQE7QDS l8hNYxDkgTiayskIddGfxBBsah2Qyy23taD3YZVopD8px8Bphw+ZuYq+A4s/9VFN X1wqdVUV+J+aerdVqDMi93eCAZSTMBFWwNL5Bh6vxN7m17w+nOTPXXiR+bDKs8HJ yS12pzY3VEQfCmKbhDFHzCzirbrClaXgnbSe5CLlI9g56KgAZcQvQ7n2OiONlEOS 7uWCje2KuXr4MG0YqTgnSuilaF+Mcznj+vgNO2SaCmoC9ABG4LRfrNbKDZpN116a VtoQ3bCEUTqpku70ZPvoa6SZWYZp4F0= -----END CERTIFICATE-----Generated at Wed Jul 29 07:09:58 2026 by rpki-client