$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa File: fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa (raw, json) Hash identifier: 3nAnSUmiyPNh23lW+dbAKuLegEzhvMgWOJnMhX9mCuE= Subject key identifier: 68:72:79:AC:E5:BB:32:E4:62:C1:EB:94:55:73:C1:C0:EF:79:22:A9 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584F2EED156CD5AE4D3D3ED6FA00 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 394285 IP address blocks: 68.68.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:15:6c:d5:ae:4d:3d:3e:d6:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b143519c-96c2-48fb-9525-cf1ec4ba9675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:9d:45:cc:db:9e:ba:1d:1c:ac:fe:43:ca: 65:7f:45:91:07:05:0e:12:95:3a:51:66:9c:3e:bc: 93:6e:05:4f:64:cd:7b:21:a6:79:ef:d7:a6:c4:3a: 2d:28:08:9b:38:6e:7c:c3:31:7a:3c:cf:3c:41:52: b8:11:b9:3e:a2:db:81:55:21:95:63:81:92:a2:0f: 41:0b:99:6f:61:25:96:52:fe:a9:15:e4:6f:82:3b: 0e:75:95:fe:b1:37:33:e8:09:5b:dc:f9:3c:5e:ca: 28:ff:71:f6:27:d2:29:e3:9a:dc:f2:15:5f:3c:35: 2f:71:14:04:80:f1:db:12:e0:e2:fd:ca:ac:29:90: 30:ea:7d:ce:78:7f:64:c6:22:a4:3d:4b:72:cc:a6: bc:bc:fc:ce:4c:da:22:16:6a:f0:2c:ea:21:5f:be: 4f:34:17:3c:69:b7:59:19:99:74:11:a9:8e:ca:db: ad:be:a5:13:bc:c1:b0:a6:98:6a:b0:42:f2:71:b8: 6f:74:d9:68:0c:5f:63:aa:57:e7:90:b6:bc:8b:cc: 61:95:ef:3b:3a:ef:46:6b:b6:75:c8:5f:59:e9:36: 02:e7:dc:07:94:82:f8:c1:c2:d4:76:48:d6:24:81: b8:04:14:59:09:50:8f:9b:0c:71:3c:52:c6:3d:90: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:79:AC:E5:BB:32:E4:62:C1:EB:94:55:73:C1:C0:EF:79:22:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:51:eb:44:23:81:cd:c1:ea:e3:57:7b:57:aa:98:58:b8:76: fa:29:4f:f6:cd:01:84:e1:97:69:f0:e5:b8:44:4d:0c:80:0a: 92:27:13:78:5a:7c:1c:81:54:ec:0e:99:16:b4:9f:07:b0:4d: 14:66:74:3e:f0:67:cb:c6:f3:55:da:69:4f:ae:3d:55:bf:6b: e1:54:82:cc:84:12:9d:7a:39:53:ce:94:8e:2f:fb:f8:f4:40: e1:1f:81:92:bd:17:48:af:82:ab:11:0e:49:0f:9e:79:b4:17: 08:cf:ad:7e:a7:2d:a3:45:28:68:b4:37:2c:37:b0:7c:68:6c: ce:53:04:a0:fa:56:32:c2:a6:98:86:e2:1e:4f:2d:84:bd:7b: 6c:4c:51:de:b1:77:26:75:aa:2e:0e:81:ed:a3:0f:70:c7:30: d8:d3:dd:d5:07:b5:21:58:ba:53:4a:0e:0c:e9:11:99:53:9e: ea:49:f8:fd:ad:e1:97:9d:d2:5f:d3:f1:ab:79:02:64:16:78: 63:6a:6c:33:1d:4f:58:8e:b6:90:c1:d3:70:c4:84:34:57:bc: eb:39:a0:fe:5f:04:2c:9b:12:09:c1:4e:20:a7:08:a5:90:1b: 15:70:01:08:c0:e6:d8:6f:74:e6:81:8d:29:bd:c5:fc:5b:4d: 6a:8a:e6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RVs1a5NPT7W+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YjE0MzUxOWMtOTZjMi00OGZiLTk1MjUtY2YxZWM0YmE5Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmadRczbnrodHKz+Q8plf0WRBwUOEpU6UWac PryTbgVPZM17IaZ579emxDotKAibOG58wzF6PM88QVK4Ebk+otuBVSGVY4GSog9B C5lvYSWWUv6pFeRvgjsOdZX+sTcz6Alb3Pk8Xsoo/3H2J9Ip45rc8hVfPDUvcRQE gPHbEuDi/cqsKZAw6n3OeH9kxiKkPUtyzKa8vPzOTNoiFmrwLOohX75PNBc8abdZ GZl0EamOytutvqUTvMGwpphqsELycbhvdNloDF9jqlfnkLa8i8xhle87Ou9Ga7Z1 yF9Z6TYC59wHlIL4wcLUdkjWJIG4BBRZCVCPmwxxPFLGPZDPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhyeazluzLkYsHrlFVzwcDveSKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZmRlMzQxMDctZjNiYi0z MDc2LWJjYWMtNGZiZmM4OGJjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9R60Qjgc3B6uNXe1eqmFi4dvopT/bNAYThl2nw5bhETQyACpInE3ha fByBVOwOmRa0nwewTRRmdD7wZ8vG81XaaU+uPVW/a+FUgsyEEp16OVPOlI4v+/j0 QOEfgZK9F0ivgqsRDkkPnnm0FwjPrX6nLaNFKGi0Nyw3sHxobM5TBKD6VjLCppiG 4h5PLYS9e2xMUd6xdyZ1qi4Oge2jD3DHMNjT3dUHtSFYulNKDgzpEZlTnupJ+P2t 4Zed0l/T8at5AmQWeGNqbDMdT1iOtpDB03DEhDRXvOs5oP5fBCybEgnBTiCnCKWQ GxVwAQjA5thvdOaBjSm9xfxbTWqK5io= -----END CERTIFICATE-----Generated at Thu Sep 24 03:21:24 2026 by rpki-client