$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a0897b9e-8a87-3597-aee3-4fde1c32535e.roa File: a0897b9e-8a87-3597-aee3-4fde1c32535e.roa (raw, json) Hash identifier: VWQhQoBU0cWi0pQlklX0iyiYFLKEL7858p6FhfztOYE= Subject key identifier: 1E:B1:ED:17:B8:B5:AD:98:F0:0F:53:11:A1:18:1C:E5:25:84:AA:AC Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA44524DCEEC0B2B939C3FD80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a0897b9e-8a87-3597-aee3-4fde1c32535e.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 23473 IP address blocks: 68.180.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:24:dc:ee:c0:b2:b9:39:c3:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=fc8a0ea5-0e77-4a48-9c92-dd41b1bfd83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:ae:d1:b7:82:cb:11:b7:5e:6d:74:61:fc: 6e:7a:71:88:72:19:00:9e:39:5e:8e:09:3b:e3:d0: 24:65:10:14:7f:db:64:f6:c4:b2:55:14:7c:14:f3: 58:eb:35:db:fe:95:9e:86:24:a7:97:fd:5a:d0:cf: bb:5b:06:93:5b:6d:82:f1:9a:f3:50:49:ae:bb:13: 1e:37:32:d7:59:67:05:d4:8b:1c:d2:b1:61:bf:ed: 79:44:8a:87:03:88:d6:3a:01:1e:06:3a:ca:4e:92: b3:58:9d:39:28:e3:30:8c:20:0c:e5:e0:dc:b2:06: 89:d4:3b:65:58:84:a5:2e:13:09:8c:ee:f4:a5:1d: ca:cc:9a:8f:45:f3:eb:3a:75:b4:95:5f:9d:f5:7a: 1e:5b:06:5a:73:09:3d:73:cb:fa:5c:2c:51:c5:59: da:b1:e1:d7:d4:93:c0:ab:09:fb:61:5e:8b:c5:8d: c2:f6:34:c4:fe:48:ff:9e:c9:ea:de:ba:17:3b:f3: 60:01:f6:59:01:2f:71:65:da:e4:dc:b0:d6:ed:67: 04:d6:54:60:32:46:74:e4:ec:58:85:26:be:68:80: 1a:a0:b2:6c:d6:c2:12:01:4c:1c:38:e5:50:de:34: 0a:07:dd:9a:52:49:7e:59:bb:5d:3b:4e:2a:af:3a: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:ED:17:B8:B5:AD:98:F0:0F:53:11:A1:18:1C:E5:25:84:AA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a0897b9e-8a87-3597-aee3-4fde1c32535e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0f:46:06:ba:81:e3:1d:cc:7e:ea:26:c7:a3:da:d6:37:c6: 88:0b:98:bd:31:51:f9:39:ab:e5:28:9c:4a:ae:45:98:91:b3: 07:07:29:65:86:0a:8f:17:52:c9:63:1d:a8:e0:64:8e:b1:e5: 56:6a:15:54:d8:fe:21:ae:99:e1:09:46:a9:3e:eb:72:75:24: 03:e0:73:57:76:7f:3b:65:66:66:73:ce:3c:05:e2:2c:39:d8: 4c:11:59:c0:47:2a:e8:be:58:d8:35:b3:13:77:21:4d:28:95: 50:cb:50:9f:be:80:ba:a9:cf:e4:fa:64:ca:fa:6d:55:5a:a6: 19:c4:ee:4b:b7:a6:46:41:36:24:17:82:35:ce:af:eb:4c:84: 5c:fb:11:90:56:b1:11:a3:cf:b7:3c:50:17:61:ab:2d:1d:02: b5:8f:95:79:4e:a9:29:e8:a5:c0:26:20:bd:c9:40:a2:55:9a: 73:e5:4e:87:a0:d8:4a:62:23:8d:02:25:24:91:34:45:b8:c1: f0:a1:d0:5d:00:e7:b7:9e:c0:1d:7c:fb:58:c8:a4:f5:b3:3d: 8a:7b:57:36:6e:e4:00:12:cc:db:26:cb:9a:8d:a7:59:d6:fc: 74:f4:82:46:b0:f1:01:b4:78:5a:79:6d:5a:bf:0e:24:e2:e8: ff:97:9b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRSTc7sCyuTnD/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZmM4YTBlYTUtMGU3Ny00YTQ4LTljOTItZGQ0MWIxYmZkODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmau0beCyxG3Xm10YfxuenGIchkAnjlejgk7 49AkZRAUf9tk9sSyVRR8FPNY6zXb/pWehiSnl/1a0M+7WwaTW22C8ZrzUEmuuxMe NzLXWWcF1Isc0rFhv+15RIqHA4jWOgEeBjrKTpKzWJ05KOMwjCAM5eDcsgaJ1Dtl WISlLhMJjO70pR3KzJqPRfPrOnW0lV+d9XoeWwZacwk9c8v6XCxRxVnaseHX1JPA qwn7YV6LxY3C9jTE/kj/nsnq3roXO/NgAfZZAS9xZdrk3LDW7WcE1lRgMkZ05OxY hSa+aIAaoLJs1sISAUwcOOVQ3jQKB92aUkl+WbtdO04qrzrGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6x7Re4ta2Y8A9TEaEYHOUlhKqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTA4OTdiOWUtOGE4Ny0z NTk3LWFlZTMtNGZkZTFjMzI1MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEPRga6geMdzH7qJsej2tY3xogLmL0xUfk5q+UonEquRZiRswcHKWWG Co8XUsljHajgZI6x5VZqFVTY/iGumeEJRqk+63J1JAPgc1d2fztlZmZzzjwF4iw5 2EwRWcBHKui+WNg1sxN3IU0olVDLUJ++gLqpz+T6ZMr6bVVaphnE7ku3pkZBNiQX gjXOr+tMhFz7EZBWsRGjz7c8UBdhqy0dArWPlXlOqSnopcAmIL3JQKJVmnPlToeg 2EpiI40CJSSRNEW4wfCh0F0A57eewB18+1jIpPWzPYp7VzZu5AASzNsmy5qNp1nW /HT0gkaw8QG0eFp5bVq/DiTi6P+Xm2Q= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:29 2026 by rpki-client