$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa File: 7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa (raw, json) Hash identifier: fHshYm0mT3/vHyKUe3uZVUs1QwSYBJCvo2Jyrd+bItc= Subject key identifier: 28:E0:AE:42:DA:95:6D:72:E4:2D:2E:ED:99:0A:D8:F5:CB:05:88:06 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA78860A1C2831BC9479A4C80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 68.234.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:60:a1:c2:83:1b:c9:47:9a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7b282b41-0ed0-46c7-968c-3cc69edf50bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:37:bb:80:b0:46:dc:43:17:95:33:4b:24: 19:66:c3:8c:e9:7e:51:b6:14:1a:21:3c:b3:f3:31: eb:f0:72:54:cd:61:3a:ae:4d:71:a6:7f:a6:77:77: e8:76:a0:ba:e0:70:3b:cb:92:d2:51:18:b3:47:f0: 19:2d:37:a0:d2:f0:bf:9a:f8:ec:ce:06:1f:f1:8b: b0:40:b3:37:37:12:fa:91:ff:63:7d:9b:f9:15:eb: b3:c9:83:43:99:f8:50:b2:c9:cd:98:c8:82:14:e1: 4b:55:77:e1:bf:2d:75:2d:eb:74:59:0f:23:b4:04: 0b:63:68:24:17:1d:0d:d1:30:a5:09:94:bb:a6:7a: da:b7:04:6a:de:84:91:5c:f2:44:6b:0a:aa:90:47: f5:20:f9:48:b7:ab:40:6a:44:a1:ed:b2:db:16:c0: 14:48:25:9c:03:2f:3b:b3:fa:50:5e:9f:50:aa:f0: 5b:71:5a:5e:f2:9c:76:27:eb:37:28:e0:0d:f5:99: 2c:4f:09:20:23:64:f3:94:ec:80:54:8c:6e:59:67: 8f:f7:9c:01:31:79:61:68:be:b4:6f:49:11:60:1d: 5a:da:0f:2c:d2:21:1d:5d:9a:49:d5:15:64:87:fb: 62:dc:69:81:20:97:80:2f:b4:35:3c:38:3b:22:0c: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:AE:42:DA:95:6D:72:E4:2D:2E:ED:99:0A:D8:F5:CB:05:88:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7d17113f-f9aa-3bfe-ae6a-a69e04b7a063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b5:cf:e8:47:8a:f1:34:71:37:25:d9:6d:33:f4:d0:5d:6d: 15:4a:a2:59:45:be:cd:c3:01:97:be:b8:ad:ac:78:bc:8f:ad: aa:f6:cb:5e:6a:bd:67:19:a1:41:6d:11:1d:62:fe:1c:cf:fd: 07:f0:59:12:a2:b6:c9:11:e1:a1:96:6b:a8:32:2d:62:54:2f: 22:a7:03:ad:4f:f8:e4:38:aa:5d:da:c9:22:6d:ea:4c:f9:c4: f3:26:a4:55:17:76:91:2f:f1:86:d7:5d:12:88:96:21:29:75: 65:a3:1d:e7:ab:ff:42:f5:6c:8f:77:16:05:87:75:08:bb:15: 47:d0:71:08:6e:3b:e1:5b:66:62:0f:bf:1a:a0:dd:ce:79:ae: 6b:b2:8c:be:a8:06:7b:e7:9b:09:31:74:21:30:17:61:ae:4c: bc:a6:1a:a8:32:e5:6c:dd:72:94:98:e2:50:2c:71:4a:82:0b: 01:5a:80:c5:5e:96:51:af:8a:99:83:76:c6:01:1c:e5:d4:5d: ad:75:98:5b:ee:02:fb:67:9c:81:35:df:87:37:52:d3:d1:23: 1c:87:af:b7:f5:c7:55:45:bf:08:0f:e8:0f:21:47:8e:7c:f3: 97:92:73:e8:dd:6b:30:d2:10:c3:cc:ff:27:60:35:f7:01:49: b7:b2:a9:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGChwoMbyUeaTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2IyODJiNDEtMGVkMC00NmM3LTk2OGMtM2NjNjllZGY1MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobI3u4CwRtxDF5UzSyQZZsOM6X5RthQaITyz 8zHr8HJUzWE6rk1xpn+md3fodqC64HA7y5LSURizR/AZLTeg0vC/mvjszgYf8Yuw QLM3NxL6kf9jfZv5FeuzyYNDmfhQssnNmMiCFOFLVXfhvy11Let0WQ8jtAQLY2gk Fx0N0TClCZS7pnratwRq3oSRXPJEawqqkEf1IPlIt6tAakSh7bLbFsAUSCWcAy87 s/pQXp9QqvBbcVpe8px2J+s3KOAN9ZksTwkgI2TzlOyAVIxuWWeP95wBMXlhaL60 b0kRYB1a2g8s0iEdXZpJ1RVkh/ti3GmBIJeAL7Q1PDg7Igxx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjgrkLalW1y5C0u7ZkK2PXLBYgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvN2QxNzExM2YtZjlhYS0z YmZlLWFlNmEtYTY5ZTA0YjdhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK1z+hHivE0cTcl2W0z9NBdbRVKollFvs3DAZe+uK2seLyPrar2y15q vWcZoUFtER1i/hzP/QfwWRKitskR4aGWa6gyLWJULyKnA61P+OQ4ql3aySJt6kz5 xPMmpFUXdpEv8YbXXRKIliEpdWWjHeer/0L1bI93FgWHdQi7FUfQcQhuO+FbZmIP vxqg3c55rmuyjL6oBnvnmwkxdCEwF2GuTLymGqgy5WzdcpSY4lAscUqCCwFagMVe llGvipmDdsYBHOXUXa11mFvuAvtnnIE134c3UtPRIxyHr7f1x1VFvwgP6A8hR458 85eSc+jdazDSEMPM/ydgNfcBSbeyqTY= -----END CERTIFICATE-----Generated at Wed Jul 29 07:11:09 2026 by rpki-client