$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa File: aa965c21-050a-3186-99c2-2b87accd1db1.roa (raw, json) Hash identifier: 3Il9668C3Ew9pzgGhV2H1893IxX9nfm02ROVG/sl7s8= Subject key identifier: D3:E0:AF:B6:B0:C8:45:72:73:60:01:5E:EC:BF:2A:0D:89:F2:C4:96 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA445127E2DE3270B710FDDC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 23473 IP address blocks: 68.180.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:12:7e:2d:e3:27:0b:71:0f:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=f7620707-6c2a-4b6f-8d8c-5d7dec41fdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:eb:63:e2:43:2e:8e:1c:36:6f:84:1b:ca: 3a:89:36:36:e9:93:f4:66:26:e4:82:f9:25:9d:0f: 78:60:e9:2d:2d:09:b9:b1:47:b1:6f:62:37:66:c2: b3:c3:24:bc:48:8e:15:cd:1c:6d:80:09:8f:be:b0: 24:db:cc:3e:e2:6c:4b:2e:4e:ad:00:9f:18:56:fe: f3:40:30:5d:0e:79:c3:e5:fe:d9:df:60:07:36:3a: 89:dd:3a:05:d4:29:4e:7d:85:18:90:a0:9e:0b:0c: 3c:5d:21:75:bd:33:22:fb:42:86:82:ba:f2:89:6d: 79:0f:45:42:54:94:94:c0:2d:8f:25:de:d9:89:0f: a8:7b:09:0a:2a:41:69:fb:b2:d3:23:13:00:9c:3b: e5:23:24:ac:14:f9:c9:14:58:28:9e:76:37:06:a9: fe:26:7b:35:cd:43:d1:35:50:88:d6:4a:3d:69:63: 72:c2:80:6b:e7:99:7c:10:ff:bb:da:fa:8d:d8:fc: 06:15:d4:ca:85:ca:b6:a7:62:dd:3e:1a:1c:48:a2: b0:69:47:2a:bf:3b:11:86:84:39:c1:4b:c6:3e:c3: 59:90:9a:dd:c0:b5:8b:19:37:a8:1a:8a:29:7b:cb: f9:df:21:94:a8:4b:a1:78:be:bd:c6:1f:54:98:dc: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E0:AF:B6:B0:C8:45:72:73:60:01:5E:EC:BF:2A:0D:89:F2:C4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aa965c21-050a-3186-99c2-2b87accd1db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:69:7c:7e:7a:28:5d:1c:9e:81:ad:42:15:cc:35:d8:fe: 43:e1:a2:60:5d:0f:e8:a2:f1:7e:da:ff:4b:a2:4e:5e:29:db: 7c:a4:df:55:da:83:ae:00:32:26:32:7b:45:0f:ee:a9:7c:03: d8:c8:85:d2:69:00:88:80:1a:23:49:c3:14:60:6f:f6:46:e2: 98:75:61:10:ac:90:af:84:c3:7a:01:28:d0:79:8d:fb:96:45: 9a:17:56:d2:7f:db:6d:fc:4e:82:25:b5:40:84:12:e1:15:f1: c4:a9:9a:43:47:dc:58:a1:10:0d:b7:af:c4:94:33:69:6f:af: b9:e9:3b:46:a9:e6:e0:69:61:db:62:78:cb:ed:48:b6:ec:8e: 7b:55:17:ed:0e:91:6a:0d:0e:1a:d7:49:77:fe:29:ca:26:87: 06:8b:27:cf:dc:84:9a:b9:74:4b:a2:f3:e7:cb:af:49:14:78: d7:6b:cf:b8:71:18:ff:53:8f:9f:10:1d:3f:71:11:8f:e3:57: e9:8d:fa:ea:71:8a:b5:28:23:f8:27:3a:88:f7:02:0d:67:0c: c7:c7:18:0b:0e:c3:af:d4:96:5e:84:bf:e0:07:28:93:8f:8c: 95:58:c4:fa:54:12:ed:c5:5f:a5:9f:34:53:52:da:30:71:df: 46:c3:a1:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRRJ+LeMnC3EP3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk Zjc2MjA3MDctNmMyYS00YjZmLThkOGMtNWQ3ZGVjNDFmZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/DrY+JDLo4cNm+EG8o6iTY26ZP0Zibkgvkl nQ94YOktLQm5sUexb2I3ZsKzwyS8SI4VzRxtgAmPvrAk28w+4mxLLk6tAJ8YVv7z QDBdDnnD5f7Z32AHNjqJ3ToF1ClOfYUYkKCeCww8XSF1vTMi+0KGgrryiW15D0VC VJSUwC2PJd7ZiQ+oewkKKkFp+7LTIxMAnDvlIySsFPnJFFgonnY3Bqn+Jns1zUPR NVCI1ko9aWNywoBr55l8EP+72vqN2PwGFdTKhcq2p2LdPhocSKKwaUcqvzsRhoQ5 wUvGPsNZkJrdwLWLGTeoGoope8v53yGUqEuheL69xh9UmNySfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPgr7awyEVyc2ABXuy/Kg2J8sSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWE5NjVjMjEtMDUwYS0z MTg2LTk5YzItMmI4N2FjY2QxZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4DaXx+eihdHJ6BrUIVzDXY/kPhomBdD+ii8X7a/0uiTl4p23yk31Xa g64AMiYye0UP7ql8A9jIhdJpAIiAGiNJwxRgb/ZG4ph1YRCskK+Ew3oBKNB5jfuW RZoXVtJ/2238ToIltUCEEuEV8cSpmkNH3FihEA23r8SUM2lvr7npO0ap5uBpYdti eMvtSLbsjntVF+0OkWoNDhrXSXf+KcomhwaLJ8/chJq5dEui8+fLr0kUeNdrz7hx GP9Tj58QHT9xEY/jV+mN+upxirUoI/gnOoj3Ag1nDMfHGAsOw6/Ull6Ev+AHKJOP jJVYxPpUEu3FX6WfNFNS2jBx30bDoTg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:54:44 2026 by rpki-client