$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa File: 679e7dc6-943b-3b84-805b-72be1c2428d2.roa (raw, json) Hash identifier: KSmkjkhecL9i0dLpz7VMHAiypuDOrI642rHrn3eZs7A= Subject key identifier: 81:7D:F9:E9:E4:64:E7:55:62:E9:F7:E6:09:52:3D:6E:4C:C2:49:B9 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584F146797ED2C3C6F137F2E2DC0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36236 IP address blocks: 64.68.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:ed:2c:3c:6f:13:7f:2e:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e0d2cfab-efef-4f2b-929b-839e27d5b38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:20:01:d7:78:c6:35:b7:03:2a:d6:19:8d: 2c:11:d8:f4:28:4f:00:4e:a6:15:92:6b:63:c7:45: ae:35:73:ef:90:fb:92:8b:00:38:2b:69:e7:39:a8: 93:e9:98:6b:44:74:ef:3c:f0:d2:66:75:78:ae:48: 12:97:e0:d0:dc:f8:8e:31:24:89:a3:dc:68:5a:43: 49:9e:d7:23:b2:f8:99:ee:c3:67:12:f3:bd:30:81: c4:68:0a:8d:49:b2:1d:de:a5:b0:4c:3d:54:9c:c3: ed:36:94:f4:32:cb:df:99:c7:c0:85:40:31:ed:50: 14:4a:06:60:21:4a:3f:47:d2:c3:7f:cb:cf:22:e7: dc:31:da:1e:c1:5b:88:99:fc:dd:fb:24:0a:5b:b6: 94:7c:2f:c8:d0:8e:37:04:5d:eb:33:71:48:27:cc: 71:21:43:ba:b3:39:a4:5c:11:fb:5c:7e:ac:8e:f2: b3:36:7a:b3:a9:af:ac:2e:8e:75:c3:cd:69:90:64: 68:d4:51:46:07:59:6d:83:a0:20:48:4f:c9:dc:2c: 6c:72:25:27:74:c6:5c:03:ec:90:68:c7:b2:cc:04: 1d:13:c2:07:08:f1:15:e8:0c:91:c6:74:75:f1:62: 97:d2:e4:8c:68:80:3e:3c:f8:f5:1e:8f:4c:d2:d0: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7D:F9:E9:E4:64:E7:55:62:E9:F7:E6:09:52:3D:6E:4C:C2:49:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a6:62:2a:88:ac:d3:a7:23:d5:ce:1e:7b:4f:a4:ed:69:06: 68:ad:8f:c6:b3:28:cf:9f:64:6e:9c:51:05:54:7f:d9:19:71: 8d:94:86:26:c3:43:88:5c:4e:cb:59:30:eb:bc:7d:cc:5f:d1: 1d:d2:e9:76:8e:9a:73:93:d6:3a:cc:24:3f:95:ac:34:9d:f3: 19:71:57:f8:ca:bb:cc:e1:6a:6c:40:53:40:9e:03:10:b4:28: c6:b6:38:fd:64:fd:db:5b:33:44:5c:fc:b0:5c:8e:4a:02:01: c3:c3:8b:c3:1a:b1:bc:0e:3e:b1:e4:15:a3:ac:20:43:27:bc: 7d:ee:94:c3:e4:fb:35:e0:ee:16:42:ac:15:b4:7b:4e:9e:f7: 08:2b:39:b6:6c:03:c4:8e:6e:22:18:8b:04:d2:aa:ee:f5:91: a1:88:cb:0d:27:66:a3:1c:8a:15:9a:5f:30:84:32:c9:28:ce: 4e:54:52:f2:e2:d2:10:18:50:17:10:30:57:23:a9:e8:ec:be: 3e:38:52:16:40:ec:fb:98:4b:f6:1f:08:be:a3:fe:7f:e1:cf: e8:a3:7b:a6:e1:a9:7b:c1:95:b3:83:f0:d7:19:c5:f6:40:12: 0c:12:5d:0b:79:3d:f6:1b:e3:9a:f0:df:30:9b:a2:19:c0:2d: 5d:f3:88:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5ftLDxvE38uLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTBkMmNmYWItZWZlZi00ZjJiLTkyOWItODM5ZTI3ZDViMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ogAdd4xjW3AyrWGY0sEdj0KE8ATqYVkmtj x0WuNXPvkPuSiwA4K2nnOaiT6ZhrRHTvPPDSZnV4rkgSl+DQ3PiOMSSJo9xoWkNJ ntcjsviZ7sNnEvO9MIHEaAqNSbId3qWwTD1UnMPtNpT0MsvfmcfAhUAx7VAUSgZg IUo/R9LDf8vPIufcMdoewVuImfzd+yQKW7aUfC/I0I43BF3rM3FIJ8xxIUO6szmk XBH7XH6sjvKzNnqzqa+sLo51w81pkGRo1FFGB1ltg6AgSE/J3CxsciUndMZcA+yQ aMeyzAQdE8IHCPEV6AyRxnR18WKX0uSMaIA+PPj1Ho9M0tAU7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF9+enkZOdVYun35glSPW5Mwkm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNjc5ZTdkYzYtOTQzYi0z Yjg0LTgwNWItNzJiZTFjMjQyOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqmYiqIrNOnI9XOHntPpO1pBmitj8azKM+fZG6cUQVUf9kZcY2UhibD Q4hcTstZMOu8fcxf0R3S6XaOmnOT1jrMJD+VrDSd8xlxV/jKu8zhamxAU0CeAxC0 KMa2OP1k/dtbM0Rc/LBcjkoCAcPDi8MasbwOPrHkFaOsIEMnvH3ulMPk+zXg7hZC rBW0e06e9wgrObZsA8SObiIYiwTSqu71kaGIyw0nZqMcihWaXzCEMskozk5UUvLi 0hAYUBcQMFcjqejsvj44UhZA7PuYS/YfCL6j/n/hz+ije6bhqXvBlbOD8NcZxfZA EgwSXQt5PfYb45rw3zCbohnALV3ziJA= -----END CERTIFICATE-----Generated at Mon Sep 21 19:20:58 2026 by rpki-client