$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa File: 9baca868-3564-34a9-8a80-07b6ed51be15.roa (raw, json) Hash identifier: W9rlZCi4wdQsc+iQRK/9u51xIoYHCV3eXxa34q2IY2o= Subject key identifier: C7:39:2B:DA:B1:1F:A5:AA:A4:95:BF:3D:23:47:E2:32:04:D3:31:2C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA798B7D43CFD9766E9EBEE00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 68.182.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:b7:d4:3c:fd:97:66:e9:eb:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=24c995f8-a2c7-4bdf-84c6-07dd76e6c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:13:11:ae:33:fc:c6:6b:9d:ea:32:0c:b2: 7e:0b:61:84:fd:ca:63:09:34:22:d1:eb:f3:a7:f0: 45:0e:3d:36:61:92:9f:78:53:1e:22:b2:5e:26:a7: e6:aa:fe:b1:56:02:95:7c:f4:b3:2d:c9:ae:64:65: 8b:7c:22:3e:ae:1c:56:fe:f3:87:f3:42:51:b2:80: ca:29:2b:41:ea:0a:2e:e9:3a:4c:5f:c1:24:a3:e9: c9:5d:7e:b4:1f:09:61:4c:b0:c8:32:ce:6b:3a:af: 7d:89:4b:21:bb:88:17:df:c7:0f:cd:b6:93:25:06: 8f:2b:c3:74:2e:92:be:49:4a:96:b2:82:80:aa:fe: 7b:15:67:39:87:fb:cf:7a:d1:2b:de:9a:b5:d1:de: 51:12:84:2b:4f:67:54:f3:b6:4b:d0:bd:7c:b4:c2: 29:f8:f8:7f:4c:5f:e6:42:bc:3c:d6:18:95:97:e7: 7b:37:43:2d:af:95:60:4f:7a:5d:c1:87:c8:2a:02: da:c2:3a:6d:03:24:c2:9e:23:98:d7:9b:59:c6:88: 03:91:ef:a8:03:03:88:5d:58:e2:a2:4f:d3:69:ab: d5:96:f2:55:eb:fb:5b:de:1a:4b:ad:6c:87:da:15: f1:85:d5:4a:6a:83:39:47:4e:79:84:94:af:cc:85: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:39:2B:DA:B1:1F:A5:AA:A4:95:BF:3D:23:47:E2:32:04:D3:31:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9baca868-3564-34a9-8a80-07b6ed51be15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 68.182.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:4c:b7:25:5d:94:fa:5a:ce:99:ea:ae:28:50:e5:bf:e7:12: 31:cc:8c:dd:b4:7a:2f:10:18:68:14:fa:24:d1:99:07:1b:12: 01:9a:55:9f:4d:6d:c3:61:fc:42:fa:89:86:02:9f:40:6e:e7: d9:17:44:f3:7e:89:f6:e9:10:30:a2:8d:cd:bc:4e:10:86:56: 3c:37:ff:78:91:d8:50:05:d9:6b:11:cb:61:30:fd:c7:80:1d: 9c:71:7c:85:8f:d1:67:a8:ee:5e:7c:1c:f2:32:75:bc:84:b6: be:df:14:16:e8:ce:f2:fe:0d:44:f5:65:35:9f:25:d7:6a:be: df:7a:18:ff:80:01:4d:d3:2e:f8:2f:9c:fc:cb:36:a6:1f:77: 97:30:d6:18:38:ad:24:88:dd:63:56:a8:cc:6e:a4:83:5e:fc: cd:f1:46:79:6f:81:fb:c8:89:97:77:82:52:7c:58:05:eb:ed: c2:c6:8c:c9:8d:6e:74:87:35:80:dc:81:0c:07:45:5f:2a:7e: de:21:c7:b7:f9:65:0b:36:89:b6:87:8c:a2:86:db:13:2d:aa: 23:11:19:ed:87:af:cf:09:d6:d4:90:9a:99:6e:bb:f2:6d:88: 32:1e:b0:6a:5e:57:44:23:b2:37:fe:fc:9b:4a:ee:b6:f4:b1: 55:cb:e1:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmLfUPP2XZunr7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjRjOTk1ZjgtYTJjNy00YmRmLTg0YzYtMDdkZDc2ZTZjN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApccTEa4z/MZrneoyDLJ+C2GE/cpjCTQi0evz p/BFDj02YZKfeFMeIrJeJqfmqv6xVgKVfPSzLcmuZGWLfCI+rhxW/vOH80JRsoDK KStB6gou6TpMX8Eko+nJXX60HwlhTLDIMs5rOq99iUshu4gX38cPzbaTJQaPK8N0 LpK+SUqWsoKAqv57FWc5h/vPetEr3pq10d5REoQrT2dU87ZL0L18tMIp+Ph/TF/m Qrw81hiVl+d7N0Mtr5VgT3pdwYfIKgLawjptAyTCniOY15tZxogDke+oAwOIXVji ok/TaavVlvJV6/tb3hpLrWyH2hXxhdVKaoM5R055hJSvzIVXgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc5K9qxH6WqpJW/PSNH4jIE0zEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWJhY2E4NjgtMzU2NC0z NGE5LThhODAtMDdiNmVkNTFiZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRLaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9MtyVdlPpazpnqrihQ5b/nEjHMjN20ei8QGGgU+iTRmQcbEgGaVZ9N bcNh/EL6iYYCn0Bu59kXRPN+ifbpEDCijc28ThCGVjw3/3iR2FAF2WsRy2Ew/ceA HZxxfIWP0Weo7l58HPIydbyEtr7fFBbozvL+DUT1ZTWfJddqvt96GP+AAU3TLvgv nPzLNqYfd5cw1hg4rSSI3WNWqMxupINe/M3xRnlvgfvIiZd3glJ8WAXr7cLGjMmN bnSHNYDcgQwHRV8qft4hx7f5ZQs2ibaHjKKG2xMtqiMRGe2Hr88J1tSQmpluu/Jt iDIesGpeV0Qjsjf+/JtK7rb0sVXL4WI= -----END CERTIFICATE-----Generated at Wed Jul 29 07:39:10 2026 by rpki-client