$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa File: e38689a7-1a21-3e2e-81e8-5822126f2794.roa (raw, json) Hash identifier: l3Y3wBIMlWIXmTiExxo7GH3Piq7YH7CXMZGBEsXwoU4= Subject key identifier: 1B:93:AD:C8:F1:45:63:A7:87:96:6B:18:08:7B:67:DF:88:23:94:54 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA786F1F499EBCE7338D0BA00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 68.180.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f1:f4:99:eb:ce:73:38:d0:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=40b610f7-c171-4373-8707-ac098bd81de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:0d:3f:0d:4d:d3:a7:07:ab:5d:48:59:7b: b7:d7:7d:ab:ab:8b:b9:9b:cd:81:3a:e0:ad:bd:ad: 63:83:8b:6b:a7:2d:99:12:c7:b1:6b:af:8f:01:19: 23:a5:f2:fe:c9:a5:d1:38:e3:18:35:60:10:b8:0e: 1e:5a:69:99:00:bc:26:63:14:04:03:46:f9:f8:dd: 47:53:75:49:f9:3d:02:39:72:1b:8a:b1:d5:1f:ba: d9:b7:2a:9c:f3:a8:ec:9d:e2:79:da:3d:5e:36:f3: 1e:0c:bc:a9:8e:e5:99:29:d6:04:3d:f7:2a:9a:c6: 83:15:1b:86:b8:67:6a:16:7e:43:aa:c2:8c:cb:7c: 5a:13:2e:fb:0d:58:1d:4f:d9:77:5d:b6:40:b5:75: 97:5f:85:c2:12:de:ca:80:36:92:31:33:5e:dc:f2: 46:6b:a2:dd:fc:34:59:ad:9e:a7:34:b5:7f:c0:d2: 55:78:68:40:4a:e6:5e:a9:53:bf:bc:ce:74:56:d3: 5e:df:1d:89:d6:d7:f1:8f:89:96:73:5d:f3:d3:d4: b2:08:8d:89:6f:e7:5d:7e:d1:30:3e:88:9e:70:93: 01:e7:15:e0:68:af:2e:1f:d3:14:9c:6a:d1:3e:6f: a2:78:cd:44:22:cc:ee:4f:96:b7:b2:ee:64:75:b6: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:93:AD:C8:F1:45:63:A7:87:96:6B:18:08:7B:67:DF:88:23:94:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 68.180.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1a:e5:26:a9:0d:01:b4:15:c3:7a:da:c4:73:7d:3c:a1:16: 39:bc:7d:7d:9b:6d:38:f2:21:99:34:5f:c4:6d:5f:48:20:49: 56:33:c8:d5:8a:61:7a:b6:fa:b8:64:b7:75:47:0e:aa:20:49: bb:27:97:c7:69:ed:28:72:11:e3:72:65:b8:fa:30:1d:db:42: 3a:02:f3:d0:81:3c:6b:4c:b6:c5:ee:78:b9:8e:47:1a:04:5d: 8d:1e:54:08:e9:43:6a:ad:e8:ec:44:04:3d:ad:23:56:1a:d8: 74:cc:87:c6:53:5a:19:27:4e:58:87:41:76:48:77:3a:bb:c0: a2:a0:5a:2b:9d:6e:c3:41:6e:79:1a:19:fe:b7:15:d8:ad:af: cc:34:58:d4:ef:ee:c1:50:40:f8:cf:40:23:a1:af:53:f6:ab: c7:f9:d6:ab:cf:79:0c:aa:ac:3e:3b:09:87:e2:56:34:5e:a2: 1a:92:cd:8f:cf:83:e4:d1:25:7c:46:fb:36:f2:90:a2:98:8f: 54:ea:79:c1:d8:96:39:c1:96:80:7b:81:17:44:43:c0:90:c0: 70:54:49:42:e6:ae:03:81:40:1d:8a:9b:01:86:94:d2:75:9b: e3:7c:34:19:b4:c4:e5:ee:fc:4e:2a:74:bc:4a:30:b4:fd:39: 2f:c6:17:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvH0mevOczjQugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDBiNjEwZjctYzE3MS00MzczLTg3MDctYWMwOThiZDgxZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6ANPw1N06cHq11IWXu3132rq4u5m82BOuCt va1jg4trpy2ZEsexa6+PARkjpfL+yaXROOMYNWAQuA4eWmmZALwmYxQEA0b5+N1H U3VJ+T0COXIbirHVH7rZtyqc86jsneJ52j1eNvMeDLypjuWZKdYEPfcqmsaDFRuG uGdqFn5DqsKMy3xaEy77DVgdT9l3XbZAtXWXX4XCEt7KgDaSMTNe3PJGa6Ld/DRZ rZ6nNLV/wNJVeGhASuZeqVO/vM50VtNe3x2J1tfxj4mWc13z09SyCI2Jb+ddftEw PoiecJMB5xXgaK8uH9MUnGrRPm+ieM1EIszuT5a3su5kdbZoPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuTrcjxRWOnh5ZrGAh7Z9+II5RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTM4Njg5YTctMWEyMS0z ZTJlLTgxZTgtNTgyMjEyNmYyNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwa5SapDQG0FcN62sRzfTyhFjm8fX2bbTjyIZk0X8RtX0ggSVYzyNWK YXq2+rhkt3VHDqogSbsnl8dp7ShyEeNyZbj6MB3bQjoC89CBPGtMtsXueLmORxoE XY0eVAjpQ2qt6OxEBD2tI1Ya2HTMh8ZTWhknTliHQXZIdzq7wKKgWiudbsNBbnka Gf63Fditr8w0WNTv7sFQQPjPQCOhr1P2q8f51qvPeQyqrD47CYfiVjReohqSzY/P g+TRJXxG+zbykKKYj1TqecHYljnBloB7gRdEQ8CQwHBUSULmrgOBQB2KmwGGlNJ1 m+N8NBm0xOXu/E4qdLxKMLT9OS/GF9U= -----END CERTIFICATE-----Generated at Wed Jul 29 09:20:15 2026 by rpki-client