$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa File: 9ae85637-6c30-3806-85f8-d79f4af96d9e.roa (raw, json) Hash identifier: f3wwabrDpEMlJ8ly1NVEuCga+I29eEekwuxphfgkr5g= Subject key identifier: D4:F2:F8:DC:8C:4C:9A:D9:8A:F3:68:B5:AE:5F:34:3D:7B:4C:85:1E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B441043886E6F88FF000 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 33705 IP address blocks: 68.67.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:41:04:38:86:e6:f8:8f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=f298ba88-0267-4e07-a739-945f2d36440f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:83:54:41:6f:75:82:53:2d:ed:f8:d6:32: e7:e5:64:b7:06:7a:fc:6e:46:e8:d5:c9:9d:aa:41: f1:86:53:83:93:28:8d:c0:b7:89:4f:4c:37:9c:8f: 57:17:7b:b6:30:2e:82:24:76:06:b7:21:fc:fa:d7: 1f:95:1d:a5:cd:8f:01:1f:4b:50:55:96:f6:c0:23: ab:ca:bc:cb:94:04:b0:a0:f2:5d:65:33:0a:92:ef: ae:62:a1:93:95:ec:04:74:a3:da:ad:1b:36:4c:4f: c1:da:de:25:08:09:92:ee:73:54:40:ce:f3:cf:5c: 0b:b3:d5:81:92:c8:bd:00:16:a1:05:eb:90:f2:0c: e0:73:7b:3e:07:0d:c6:b9:b6:01:8a:07:6f:a0:68: b3:89:2c:b8:f4:d0:ee:f5:ad:29:36:87:62:9d:3f: a6:5c:5d:2f:da:9a:15:01:8f:f0:29:b1:dd:14:63: ee:87:7c:54:42:14:94:00:8f:a6:a6:9b:dd:2b:d3: 13:25:84:f4:41:5a:8b:08:a3:e1:9a:9a:7f:6b:e8: 47:0e:08:14:2a:f2:49:be:d8:5a:d5:3c:75:dd:74: 7e:83:0f:ca:c8:5c:d7:5c:51:75:91:57:d6:9d:e7: 9f:ff:70:bc:a1:6e:b2:41:41:67:2f:0e:26:ed:01: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F2:F8:DC:8C:4C:9A:D9:8A:F3:68:B5:AE:5F:34:3D:7B:4C:85:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9ae85637-6c30-3806-85f8-d79f4af96d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 68.67.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d6:80:72:63:f3:dd:c6:29:8c:24:99:9d:cb:c7:4a:43:43: fd:a2:2d:39:2a:20:59:24:1a:91:e5:75:a3:f6:c9:6d:79:41: 2d:65:f1:e4:01:14:cb:2c:a0:f9:66:c0:fa:aa:a5:23:f3:9d: 98:3a:ba:ae:e7:c1:1c:21:2c:ef:ef:05:65:dc:6b:f0:0d:7d: 86:c2:b4:d2:83:2f:bd:0f:3d:1e:87:96:79:ef:16:cb:81:15: 20:18:b2:f1:6e:3c:d3:28:c4:0f:e3:4e:23:99:d7:25:d1:97: ee:0c:be:14:83:f3:c2:a3:74:21:4d:e5:29:bd:f8:61:d5:49: 19:2e:16:7b:d3:d0:17:0e:5f:b3:63:11:6f:12:4e:bd:7c:0e: f9:24:06:48:c1:ea:13:93:61:8f:42:e5:67:11:bd:e3:25:d5: 6f:7d:ee:bf:8a:fb:f2:2e:9f:6c:fe:08:e3:80:7c:48:4f:89: 56:ae:74:cb:49:e1:22:2c:ae:7f:4e:7b:ba:fd:e1:a3:e8:11: ac:bb:b2:4d:94:70:6f:ba:d4:16:0d:2f:8d:f6:15:4b:de:35: 97:fe:2c:aa:9b:a8:2b:df:2a:e7:5a:95:33:21:77:23:d3:f0: 29:e7:9e:5f:85:53:43:86:b5:11:21:f7:cf:3c:5c:27:a1:e1: 34:55:80:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErRBBDiG5viP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjI5OGJhODgtMDI2Ny00ZTA3LWE3MzktOTQ1ZjJkMzY0NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUWDVEFvdYJTLe341jLn5WS3Bnr8bkbo1cmd qkHxhlODkyiNwLeJT0w3nI9XF3u2MC6CJHYGtyH8+tcflR2lzY8BH0tQVZb2wCOr yrzLlASwoPJdZTMKku+uYqGTlewEdKParRs2TE/B2t4lCAmS7nNUQM7zz1wLs9WB ksi9ABahBeuQ8gzgc3s+Bw3GubYBigdvoGiziSy49NDu9a0pNodinT+mXF0v2poV AY/wKbHdFGPuh3xUQhSUAI+mppvdK9MTJYT0QVqLCKPhmpp/a+hHDggUKvJJvtha 1Tx13XR+gw/KyFzXXFF1kVfWneef/3C8oW6yQUFnLw4m7QFftQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTy+NyMTJrZivNota5fND17TIUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOWFlODU2MzctNmMzMC0z ODA2LTg1ZjgtZDc5ZjRhZjk2ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDWgHJj893GKYwkmZ3Lx0pDQ/2iLTkqIFkkGpHldaP2yW15QS1l8eQB FMssoPlmwPqqpSPznZg6uq7nwRwhLO/vBWXca/ANfYbCtNKDL70PPR6HlnnvFsuB FSAYsvFuPNMoxA/jTiOZ1yXRl+4MvhSD88KjdCFN5Sm9+GHVSRkuFnvT0BcOX7Nj EW8STr18DvkkBkjB6hOTYY9C5WcRveMl1W997r+K+/Iun2z+COOAfEhPiVaudMtJ 4SIsrn9Oe7r94aPoEay7sk2UcG+61BYNL432FUveNZf+LKqbqCvfKudalTMhdyPT 8Cnnnl+FU0OGtREh9888XCeh4TRVgA4= -----END CERTIFICATE-----Generated at Wed Sep 23 21:36:18 2026 by rpki-client