$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa File: 35020f1b-66f6-38ce-b296-a8a736d9ba08.roa (raw, json) Hash identifier: O25m8xQ0PJiQhWKh/iE5+The5O+UU8wxloM1zzMlHqQ= Subject key identifier: FB:58:61:F9:17:93:C3:5D:50:CD:42:D9:6D:9E:55:98:18:A2:B1:A9 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584E9EAFE7C96963F62FF8D36760 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 54137 IP address blocks: 68.67.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e7:c9:69:63:f6:2f:f8:d3:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=8b493323-5b1c-4b2c-91ef-debc3a86163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:1e:cc:b0:da:91:7c:39:60:3f:7e:d9:a2: 93:ac:7f:31:86:da:3e:f8:4d:25:ef:dd:f0:84:d6: a9:db:94:74:ba:74:0e:37:ee:fc:92:60:65:ae:fd: 24:22:7b:d8:c7:3c:ee:fd:e8:63:43:ca:b0:12:ec: e4:d3:81:51:34:68:27:fe:5e:28:19:1a:8e:45:76: ce:a2:bf:a9:2c:01:3c:35:ae:28:4b:3c:f7:ed:2d: 4b:6c:66:5b:ff:30:93:70:3f:67:cb:0b:35:c3:63: 3b:7d:aa:06:fd:fb:7d:b3:d4:57:8c:16:70:4e:a7: 05:f3:b2:ae:21:30:a8:0b:d8:b4:1b:9e:b2:10:03: 32:84:1b:d8:49:8d:fa:59:bc:fd:12:83:60:66:69: 06:4c:dd:d3:25:ac:20:08:cf:62:34:d8:00:1d:77: e5:da:ab:0f:7b:f5:06:b0:e5:ae:db:45:ca:55:b3: dc:30:3c:9b:7a:22:12:5c:5a:98:32:25:0f:97:67: 4c:fb:07:1d:1e:a2:4a:72:d0:c5:72:4c:b9:0f:ac: 0c:70:c0:00:b4:6c:39:03:5b:18:6d:cb:9a:30:11: 82:fe:63:63:05:d4:65:ca:1f:9e:b5:9e:25:28:a4: 7d:92:d8:ca:82:a9:09:3f:c7:1d:96:43:9f:2d:e0: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:61:F9:17:93:C3:5D:50:CD:42:D9:6D:9E:55:98:18:A2:B1:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/35020f1b-66f6-38ce-b296-a8a736d9ba08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ba:8c:10:f0:8d:29:08:f4:9b:8c:b9:47:c4:80:0d:3c:13: a6:1f:c5:63:24:34:e6:18:13:98:1b:71:96:15:37:4c:5a:f1: f9:c2:d2:22:07:a2:ce:dd:53:9f:8d:ef:e0:a0:27:4a:8e:8f: f6:7b:65:d1:5c:50:84:09:5a:87:2b:a0:b6:90:e4:2d:9f:80: 2c:fb:1d:e9:c1:90:27:2f:31:09:6c:c3:62:b8:db:af:ee:57: c9:fa:e4:17:c2:42:77:16:5f:2a:35:e7:0a:97:ea:d5:bd:44: ff:19:09:9b:6c:90:1e:87:37:52:cb:91:19:46:83:5d:25:f3: 3a:7d:06:51:5d:21:5b:5a:5f:96:af:33:f6:df:f7:72:aa:b0: 5d:a2:6d:54:5f:ef:4c:a9:8b:98:d3:c2:81:6c:1a:ac:40:19: aa:8f:51:91:83:de:35:22:d6:93:da:e1:46:c4:82:d9:57:98: 74:1e:e2:66:20:53:2d:cb:20:e8:53:a9:78:6b:c0:28:ce:f4: 47:7a:cc:ec:eb:8f:fd:c2:e9:ad:51:9f:f8:9a:0a:79:d8:3b: 2b:a6:ff:d8:bd:d0:39:29:33:76:22:4b:72:09:1e:90:0f:1b: 15:c1:bc:14:32:8d:5b:dc:ba:78:75:57:ff:a8:57:cc:5b:53: ac:dc:9a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+fJaWP2L/jTZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk OGI0OTMzMjMtNWIxYy00YjJjLTkxZWYtZGViYzNhODYxNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC4ezLDakXw5YD9+2aKTrH8xhto++E0l793w hNap25R0unQON+78kmBlrv0kInvYxzzu/ehjQ8qwEuzk04FRNGgn/l4oGRqORXbO or+pLAE8Na4oSzz37S1LbGZb/zCTcD9nyws1w2M7faoG/ft9s9RXjBZwTqcF87Ku ITCoC9i0G56yEAMyhBvYSY36Wbz9EoNgZmkGTN3TJawgCM9iNNgAHXfl2qsPe/UG sOWu20XKVbPcMDybeiISXFqYMiUPl2dM+wcdHqJKctDFcky5D6wMcMAAtGw5A1sY bcuaMBGC/mNjBdRlyh+etZ4lKKR9ktjKgqkJP8cdlkOfLeCYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtYYfkXk8NdUM1C2W2eVZgYorGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMzUwMjBmMWItNjZmNi0z OGNlLWIyOTYtYThhNzM2ZDliYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa6jBDwjSkI9JuMuUfEgA08E6YfxWMkNOYYE5gbcZYVN0xa8fnC0iIH os7dU5+N7+CgJ0qOj/Z7ZdFcUIQJWocroLaQ5C2fgCz7HenBkCcvMQlsw2K426/u V8n65BfCQncWXyo15wqX6tW9RP8ZCZtskB6HN1LLkRlGg10l8zp9BlFdIVtaX5av M/bf93KqsF2ibVRf70ypi5jTwoFsGqxAGaqPUZGD3jUi1pPa4UbEgtlXmHQe4mYg Uy3LIOhTqXhrwCjO9Ed6zOzrj/3C6a1Rn/iaCnnYOyum/9i90DkpM3YiS3IJHpAP GxXBvBQyjVvcunh1V/+oV8xbU6zcmr4= -----END CERTIFICATE-----Generated at Tue Jul 28 19:52:36 2026 by rpki-client