$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: ZraHW+ZgzbzxLD6nO9WneO/3f8erJc5plncbAuH5ZWU= Subject key identifier: A3:D5:18:9E:89:D3:DC:D4:48:64:9D:7A:5A:33:CB:8C:89:B9:B2:53 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584F119D0413681601AB902B7340 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 68.71.224.0/24 maxlen: 24 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:04:13:68:16:01:ab:90:2b:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e9787913-0ceb-4cf5-ab79-6b1a0797207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:9d:f7:88:2a:b6:60:8a:d3:bd:b5:c9:a3: 57:5e:e0:ca:80:f1:9c:51:d1:d4:14:a4:ce:5e:89: db:ff:73:e5:81:2d:ca:63:78:a0:cc:e2:83:a7:9f: 13:e2:ea:7e:4f:fa:e8:1b:41:a3:ac:24:1c:44:71: 15:77:86:71:d7:79:dd:43:69:5a:39:04:3a:bd:3b: 0b:87:d4:57:c0:03:cf:f3:bd:33:77:ac:c2:bf:44: 99:a5:71:90:bf:f1:dd:b4:93:30:b5:b6:91:92:bd: 65:7b:ab:7b:b9:01:5b:d6:58:d3:c4:16:e4:9b:9a: e5:49:65:16:fd:fa:6b:7f:36:ff:40:29:a9:b1:6c: 80:bd:3f:32:91:d6:b5:f2:d9:3d:47:ec:a2:0f:e9: ab:59:51:22:c9:ca:e6:55:9a:0f:fd:e2:65:1b:87: ca:a7:75:67:f2:82:a3:01:c2:fa:8c:45:e1:30:94: c3:07:99:d4:f9:61:f2:23:06:ba:10:78:4c:e8:a4: a7:b9:a1:f8:1a:aa:d1:cc:52:2a:cf:98:67:92:dd: 0f:cd:d5:ce:39:94:22:1e:15:45:85:aa:3d:1e:26: ec:06:ae:a9:0f:00:43:2e:c4:2e:a7:aa:c0:9a:91: 60:25:15:0e:0c:8c:ce:05:e4:68:17:aa:c9:ef:28: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:18:9E:89:D3:DC:D4:48:64:9D:7A:5A:33:CB:8C:89:B9:B2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.224.0/24 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:71:26:6e:b8:b0:5f:b5:77:a7:a4:41:7c:bd:92:73:bb:ca: 06:52:dd:16:3a:6f:37:ab:8a:f3:ab:6a:50:31:87:53:5b:c8: 01:aa:b9:23:aa:c1:c7:13:48:c2:36:62:20:5c:40:37:bd:4b: 86:17:65:88:b0:9e:32:92:6c:55:a4:1b:1a:e8:98:fb:06:4a: 26:b5:19:30:c1:79:62:b3:b2:14:06:65:0b:e5:3c:09:7d:7f: db:21:c7:f4:76:11:d9:2a:1e:51:17:70:23:95:ce:61:a3:9f: c9:bf:0d:19:4c:7f:57:54:7b:46:0d:94:22:dd:3c:61:80:59: 0c:43:5e:fd:08:f0:c2:81:a1:cb:d0:bb:30:0a:0b:5d:0d:2f: bf:7a:ff:da:be:7c:09:28:05:d5:c4:44:02:a5:b0:5b:a0:f5: 68:95:82:62:d7:24:f9:7b:da:c1:db:bd:16:d8:d9:a7:0d:df: 24:cc:c0:e2:88:17:ac:9f:73:d8:4c:68:48:fc:70:15:6a:e0: e9:52:8a:06:31:f1:c1:da:21:3f:6c:1c:ff:0c:c9:22:01:fd: a3:d7:5b:4a:7b:4b:7d:76:8e:a3:84:ec:c5:29:89:00:dc:ec: 22:de:29:e7:f1:00:3a:06:41:36:89:96:b2:97:34:81:c2:fc: 7a:2d:6c:c7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8RnQQTaBYBq5Arc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTk3ODc5MTMtMGNlYi00Y2Y1LWFiNzktNmIxYTA3OTcyMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGSd94gqtmCK0721yaNXXuDKgPGcUdHUFKTO Xonb/3PlgS3KY3igzOKDp58T4up+T/roG0GjrCQcRHEVd4Zx13ndQ2laOQQ6vTsL h9RXwAPP870zd6zCv0SZpXGQv/HdtJMwtbaRkr1le6t7uQFb1ljTxBbkm5rlSWUW /fprfzb/QCmpsWyAvT8ykda18tk9R+yiD+mrWVEiycrmVZoP/eJlG4fKp3Vn8oKj AcL6jEXhMJTDB5nU+WHyIwa6EHhM6KSnuaH4GqrRzFIqz5hnkt0PzdXOOZQiHhVF hao9HibsBq6pDwBDLsQup6rAmpFgJRUODIzOBeRoF6rJ7ygSAQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKPVGJ6J09zUSGSdelozy4yJubJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREfgAwQB REfkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADRxJm64sF+1d6ekQXy9knO7ygZS3RY6bzerivOralAxh1Nb yAGquSOqwccTSMI2YiBcQDe9S4YXZYiwnjKSbFWkGxromPsGSia1GTDBeWKzshQG ZQvlPAl9f9shx/R2EdkqHlEXcCOVzmGjn8m/DRlMf1dUe0YNlCLdPGGAWQxDXv0I 8MKBocvQuzAKC10NL796/9q+fAkoBdXERAKlsFug9WiVgmLXJPl72sHbvRbY2acN 3yTMwOKIF6yfc9hMaEj8cBVq4OlSigYx8cHaIT9sHP8MySIB/aPXW0p7S312jqOE 7MUpiQDc7CLeKefxADoGQTaJlrKXNIHC/HotbMc= -----END CERTIFICATE-----Generated at Thu Sep 24 13:47:14 2026 by rpki-client