$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa File: a10965b1-15bc-387b-be67-ebfa65ef6972.roa (raw, json) Hash identifier: IccYNiF3ptGKNNnf0/wOk0BdU8R+1qzqRtt4WfEfYCk= Subject key identifier: 52:F7:1F:50:80:6E:09:C1:67:C4:58:8E:89:5B:60:E9:82:A4:7E:23 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA78870E5A5F5A5F31E541A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 68.234.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:70:e5:a5:f5:a5:f3:1e:54:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f08c0bb-1442-4a2d-a784-60c643c73d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:44:56:1e:67:0a:96:7d:f7:37:55:7c:ea: 7b:c9:38:7f:a7:5e:52:9f:24:f0:f8:0e:ed:29:f3: 0a:b2:6d:02:07:16:30:f7:7a:e7:75:af:43:9b:33: ec:02:ce:4d:a1:b8:9c:70:7a:71:5f:a5:17:6e:58: ce:6c:62:9d:1c:cf:bc:2b:01:e2:0d:02:2d:66:f4: 25:13:92:ca:c1:13:a3:f2:83:6b:d0:9e:6a:c3:f5: 4c:0e:23:61:39:d2:5a:94:22:2d:9e:3e:e8:59:71: 7f:6c:5d:46:5d:51:bc:df:62:a8:c1:89:fb:9b:b8: 36:96:8a:0c:24:6e:9e:12:54:fa:07:38:18:a9:a7: e9:91:0c:74:63:fd:3d:d1:33:83:8a:e4:c0:45:b5: 67:e8:f4:91:2f:4b:20:4b:82:01:d4:93:6f:57:5d: 51:c2:1e:bd:97:9b:35:cb:1b:7c:a7:34:2f:70:2b: 9f:02:6f:6e:6f:6c:32:ac:b1:da:25:72:db:69:04: ac:ff:02:ae:a1:91:16:cc:d0:19:12:55:bf:e7:36: 74:e5:df:d8:05:5e:03:4f:ef:2d:c3:23:c1:2c:6e: 44:51:b2:40:eb:34:76:e9:fb:b0:28:b6:95:66:28: df:72:e0:c3:e5:d2:04:ae:dc:89:63:0c:0c:cb:bc: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:1F:50:80:6E:09:C1:67:C4:58:8E:89:5B:60:E9:82:A4:7E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a10965b1-15bc-387b-be67-ebfa65ef6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.234.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9f:90:cb:5f:59:24:a3:67:2b:2a:09:36:53:b1:ae:15:07: ed:be:85:42:0c:ae:a5:8b:0d:c8:3a:7f:6a:b7:b2:49:dc:6d: 16:c2:01:dd:7e:51:ac:02:b5:62:9e:9e:64:c3:b2:c4:68:28: b7:46:99:59:a2:f6:f0:69:26:27:9b:b1:47:e5:91:c9:16:9b: ac:ba:fd:cc:85:29:3e:3d:f7:59:24:ed:11:4b:87:5f:ba:c9: 84:3b:58:66:16:74:e2:55:8c:0a:81:b5:7f:89:54:1b:90:e8: 9f:f3:5a:30:aa:44:5f:89:66:13:f9:aa:f3:57:4c:af:e6:3a: 94:07:a1:2e:d1:ca:b5:ce:d3:b1:f8:fc:f5:66:02:90:2d:85: 18:75:ef:08:9f:90:d3:cb:c8:e3:29:0f:22:32:6b:98:31:ad: 71:a7:e2:e4:34:b7:06:89:51:d1:96:c9:69:f7:b7:c8:b4:31: 8e:fa:6e:35:ad:dc:d8:84:56:53:4e:5b:cd:4b:40:c8:47:c9: 7d:86:e9:6f:44:b2:6b:1f:7f:ec:1d:c1:fe:1c:31:6b:cc:1f: c3:5a:4d:e1:a0:27:11:57:34:37:37:b1:42:91:54:a0:35:3c: 7d:e5:f7:17:85:10:fb:e6:a8:c4:e7:9f:73:04:b0:e1:c5:c3: bb:51:48:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHDlpfWl8x5UGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2YwOGMwYmItMTQ0Mi00YTJkLWE3ODQtNjBjNjQzYzczZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAFEVh5nCpZ99zdVfOp7yTh/p15SnyTw+A7t KfMKsm0CBxYw93rnda9DmzPsAs5NobiccHpxX6UXbljObGKdHM+8KwHiDQItZvQl E5LKwROj8oNr0J5qw/VMDiNhOdJalCItnj7oWXF/bF1GXVG832KowYn7m7g2looM JG6eElT6BzgYqafpkQx0Y/090TODiuTARbVn6PSRL0sgS4IB1JNvV11Rwh69l5s1 yxt8pzQvcCufAm9ub2wyrLHaJXLbaQSs/wKuoZEWzNAZElW/5zZ05d/YBV4DT+8t wyPBLG5EUbJA6zR26fuwKLaVZijfcuDD5dIErtyJYwwMy7x7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL3H1CAbgnBZ8RYjolbYOmCpH4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTEwOTY1YjEtMTViYy0z ODdiLWJlNjctZWJmYTY1ZWY2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSfkMtfWSSjZysqCTZTsa4VB+2+hUIMrqWLDcg6f2q3skncbRbCAd1+ UawCtWKenmTDssRoKLdGmVmi9vBpJiebsUflkckWm6y6/cyFKT4991kk7RFLh1+6 yYQ7WGYWdOJVjAqBtX+JVBuQ6J/zWjCqRF+JZhP5qvNXTK/mOpQHoS7RyrXO07H4 /PVmApAthRh17wifkNPLyOMpDyIya5gxrXGn4uQ0twaJUdGWyWn3t8i0MY76bjWt 3NiEVlNOW81LQMhHyX2G6W9Esmsff+wdwf4cMWvMH8NaTeGgJxFXNDc3sUKRVKA1 PH3l9xeFEPvmqMTnn3MEsOHFw7tRSOg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:52:23 2026 by rpki-client