$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json) Hash identifier: RQhDRjXlVZzDFDjd+uQ386lwCWeAHbwdiCuieu8ZvYs= Subject key identifier: E2:2E:1D:78:F1:33:80:68:FD:D9:FD:83:45:D6:03:92:7A:39:DA:7F Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584F9FFDD374D40C24F2939DD880 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:d3:74:d4:0c:24:f2:93:9d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=4d339b1f-6ee0-478e-a452-31b3dab67059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:e9:14:99:d5:30:e4:8e:56:63:d8:39:bb: 1a:8e:31:55:40:75:75:ef:a3:97:bb:65:ba:e2:af: 32:fd:d9:c6:6d:c1:ec:d1:68:1d:5e:99:bf:95:45: ff:4f:eb:f2:a0:56:2c:17:f8:28:83:22:43:28:97: 68:b1:a9:94:9f:44:7a:9c:f4:6a:0f:bd:50:97:96: c8:80:21:d3:42:a0:3f:9e:d9:6a:b4:49:e0:96:1c: c1:e9:da:bf:6c:97:cf:af:fa:74:b1:6e:4a:d0:2b: 95:69:46:c7:e0:d5:9c:69:bc:0e:50:6b:22:5d:fc: b8:f9:4d:5a:ae:35:ed:80:7a:92:56:67:82:a2:50: 7c:68:f7:64:0d:73:5e:b1:c3:6d:ef:6c:12:8c:43: 07:3d:2b:9b:de:a8:bf:e7:67:4f:b7:4c:5c:89:d7: 65:d6:16:88:95:ad:ac:3f:7b:41:7f:58:a7:c6:39: 7f:55:1e:bc:16:1c:c0:36:5d:db:8a:90:9d:31:46: f7:df:8f:a6:2a:04:3b:09:5d:26:72:3a:e2:ba:43: 32:98:0f:9c:9e:f9:65:a0:e9:2b:54:b0:44:94:ab: 7c:c2:20:e3:ef:87:6c:63:f6:9b:97:e9:98:c7:20: 17:0e:7b:f9:d4:a1:00:71:d4:34:84:88:bf:cf:85: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:1D:78:F1:33:80:68:FD:D9:FD:83:45:D6:03:92:7A:39:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f5:5d:f6:c3:1f:8b:71:64:42:c7:77:0f:af:d0:69:33:75: 14:5b:8a:49:d8:fa:4b:d8:9d:9d:31:98:e0:f3:77:6f:58:d2: 1b:15:b9:f8:48:95:22:93:f3:ae:94:54:f4:52:d0:98:92:51: ca:ca:e2:d8:f7:a2:fb:2d:b7:1a:1c:b7:20:62:48:c1:9c:b8: 0a:8b:48:0f:28:5e:22:77:44:5f:9a:7a:4c:7b:3d:0e:62:7a: 98:4a:4a:23:6a:de:52:71:8b:60:d4:ce:a8:ad:68:18:4e:e5: 0f:b2:06:7f:f3:59:02:e5:b7:e5:cb:e6:48:9e:8f:0a:b8:ec: 5b:d5:b5:72:9d:ee:59:e9:f4:ed:af:db:73:68:61:9f:6d:47: be:1c:20:d5:27:d8:a0:6d:ab:89:45:ce:10:d8:52:da:22:76: e3:36:84:9f:4d:9f:25:e0:5d:05:8b:ff:fe:64:cd:8c:15:02: 54:67:72:f3:aa:52:7e:d3:b3:fa:da:f8:72:b9:07:6c:78:8d: 1c:9f:33:70:ef:e3:52:42:ce:be:70:fe:e7:d9:85:91:b7:79: f3:d1:6e:d9:c6:0a:c0:e3:d4:1a:e6:cd:bf:34:5f:aa:1b:ae: 7d:14:eb:59:d9:46:69:c9:46:b5:e8:31:58:fb:b5:67:91:a9: 78:38:98:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/dN01Awk8pOd2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk NGQzMzliMWYtNmVlMC00NzhlLWE0NTItMzFiM2RhYjY3MDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0crpFJnVMOSOVmPYObsajjFVQHV176OXu2W6 4q8y/dnGbcHs0WgdXpm/lUX/T+vyoFYsF/gogyJDKJdosamUn0R6nPRqD71Ql5bI gCHTQqA/ntlqtEnglhzB6dq/bJfPr/p0sW5K0CuVaUbH4NWcabwOUGsiXfy4+U1a rjXtgHqSVmeColB8aPdkDXNescNt72wSjEMHPSub3qi/52dPt0xciddl1haIla2s P3tBf1inxjl/VR68FhzANl3bipCdMUb334+mKgQ7CV0mcjriukMymA+cnvlloOkr VLBElKt8wiDj74dsY/abl+mYxyAXDnv51KEAcdQ0hIi/z4VX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIuHXjxM4Bo/dn9g0XWA5J6Odp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODI5ZWEwN2QtOWRiZS0z NmZkLWI0YWEtYzdiMzgwMzRmMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX1XfbDH4txZELHdw+v0GkzdRRbiknY+kvYnZ0xmODzd29Y0hsVufhI lSKT866UVPRS0JiSUcrK4tj3ovsttxoctyBiSMGcuAqLSA8oXiJ3RF+aekx7PQ5i ephKSiNq3lJxi2DUzqitaBhO5Q+yBn/zWQLlt+XL5kiejwq47FvVtXKd7lnp9O2v 23NoYZ9tR74cINUn2KBtq4lFzhDYUtoiduM2hJ9NnyXgXQWL//5kzYwVAlRncvOq Un7Ts/ra+HK5B2x4jRyfM3Dv41JCzr5w/ufZhZG3efPRbtnGCsDj1Brmzb80X6ob rn0U61nZRmnJRrXoMVj7tWeRqXg4mGo= -----END CERTIFICATE-----Generated at Sun Nov 15 17:44:27 2026 by rpki-client