$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa File: 1394d0ce-5fb2-38f2-9900-16d12286165f.roa (raw, json) Hash identifier: xpoOwfCicPd/AU3F3aNhi0TwT+mvUCCndcEjhjoK9cs= Subject key identifier: 78:46:88:63:AE:53:D3:69:CD:82:CB:06:27:2E:38:22:90:9B:CB:97 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B46FA23F7081FF9F1200 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 68.67.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:6f:a2:3f:70:81:ff:9f:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e3933c93-5c25-4335-9c81-1abb0c75211f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:bb:e9:01:09:9b:a0:ae:d2:85:1d:a4:64: d9:a0:cc:f2:c4:35:c4:13:b3:bf:a3:ec:08:bf:74: 7c:a9:44:64:d9:0b:73:67:05:8f:38:36:06:77:0e: ad:2f:70:6b:83:d7:3a:18:dd:db:72:18:ef:0e:26: 0b:8b:90:b3:f1:59:ea:a7:e6:9d:90:9e:cb:47:3e: 9e:d5:32:41:98:d8:88:35:84:4e:ef:a0:db:72:71: 27:f9:5c:74:46:5a:f6:f6:50:7c:c9:9a:93:b7:17: 84:0d:3d:37:6f:8c:66:3b:ed:cc:fe:07:24:85:b2: 3a:0d:18:67:15:72:ea:ca:74:a0:5c:24:fd:3d:17: 3b:7e:e8:9e:7a:7a:ac:b6:a4:ad:fc:1c:c3:de:12: 69:bc:8b:cc:1a:dd:3d:03:37:5f:86:5a:df:65:6b: 75:b7:e6:fb:c8:9f:1b:dd:23:0b:51:0e:64:87:aa: 14:f8:f3:d8:73:38:0a:2d:92:d0:5e:9a:fa:70:7e: 14:45:6e:94:87:b4:23:9f:56:9d:24:05:0b:30:b0: cc:92:f5:4a:32:62:a7:7c:d5:32:dc:cf:0a:d4:63: 04:4f:84:2d:2e:f3:37:22:29:5d:78:99:8d:02:36: 76:e9:18:29:09:24:35:31:b0:8c:1c:70:a0:3e:ec: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:46:88:63:AE:53:D3:69:CD:82:CB:06:27:2E:38:22:90:9B:CB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1394d0ce-5fb2-38f2-9900-16d12286165f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b4:c3:2b:0b:20:d3:c3:2d:f1:07:68:03:63:c9:54:c8:ea: 11:0c:d5:9c:ab:07:5f:3a:e9:5f:a3:2d:41:cb:97:1b:97:85: 98:b2:ed:1f:56:df:6d:e2:1b:e9:70:81:c6:b6:b7:b9:49:f5: fc:ac:99:f7:16:0b:8a:b8:ee:1b:ec:95:36:da:53:ff:a5:fe: 58:13:85:f0:67:67:98:f0:67:33:6e:f8:ad:56:95:85:50:a1: ff:bb:16:f7:35:b4:17:13:01:d5:cf:8a:53:4b:84:87:72:a5: 34:10:af:59:eb:cf:4e:b1:fd:d9:38:9e:54:65:7b:c1:a6:bf: e2:c7:71:57:70:82:b5:f3:2b:21:63:0b:c2:39:0d:b6:34:38: 40:11:c0:34:a8:21:cc:cb:ba:27:76:ed:aa:80:20:6d:36:9d: d6:f0:e1:34:ed:ec:b3:9b:12:74:1d:06:31:ec:b6:ea:b5:c8: b3:e2:6a:2b:88:6a:78:c1:89:38:93:18:e6:ff:49:82:93:18: d6:0c:ae:92:16:33:ea:42:fd:45:6a:7e:0d:fe:f3:7b:15:0f: d6:2c:ed:c6:83:2b:dc:59:dc:c8:f0:bb:22:bb:78:7f:79:95: f5:bb:52:fe:6b:db:52:10:ef:d4:04:bf:0d:c5:b2:80:d3:ac: f0:16:be:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErRvoj9wgf+fEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTM5MzNjOTMtNWMyNS00MzM1LTljODEtMWFiYjBjNzUyMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpi76QEJm6Cu0oUdpGTZoMzyxDXEE7O/o+wI v3R8qURk2QtzZwWPODYGdw6tL3Brg9c6GN3bchjvDiYLi5Cz8Vnqp+adkJ7LRz6e 1TJBmNiINYRO76DbcnEn+Vx0Rlr29lB8yZqTtxeEDT03b4xmO+3M/gckhbI6DRhn FXLqynSgXCT9PRc7fuieenqstqSt/BzD3hJpvIvMGt09AzdfhlrfZWt1t+b7yJ8b 3SMLUQ5kh6oU+PPYczgKLZLQXpr6cH4URW6Uh7Qjn1adJAULMLDMkvVKMmKnfNUy 3M8K1GMET4QtLvM3IildeJmNAjZ26RgpCSQ1MbCMHHCgPuyPeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhGiGOuU9NpzYLLBicuOCKQm8uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMTM5NGQwY2UtNWZiMi0z OGYyLTk5MDAtMTZkMTIyODYxNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS0wysLINPDLfEHaANjyVTI6hEM1ZyrB1866V+jLUHLlxuXhZiy7R9W 323iG+lwgca2t7lJ9fysmfcWC4q47hvslTbaU/+l/lgThfBnZ5jwZzNu+K1WlYVQ of+7Fvc1tBcTAdXPilNLhIdypTQQr1nrz06x/dk4nlRle8Gmv+LHcVdwgrXzKyFj C8I5DbY0OEARwDSoIczLuid27aqAIG02ndbw4TTt7LObEnQdBjHstuq1yLPiaiuI anjBiTiTGOb/SYKTGNYMrpIWM+pC/UVqfg3+83sVD9Ys7caDK9xZ3MjwuyK7eH95 lfW7Uv5r21IQ79QEvw3FsoDTrPAWvqY= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:43 2026 by rpki-client