$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa File: 565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json) Hash identifier: DHO302vbcxblxqy3Yvn9Cg6XZcMG06eIBfi7W2n/N28= Subject key identifier: AE:5C:DD:68:B9:A1:C2:71:37:EB:8B:EE:01:87:68:20:B1:4C:DD:C4 Certificate issuer: /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6 Certificate serial: 010D0C9F4328584F06722F61CE8B6EB7990BC100 Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 3257 IP address blocks: 68.69.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2f:61:ce:8b:6e:b7:99:0b:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b4cd263b-af5e-47e2-a8fb-3edebdb2913d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:7b:f9:bf:3e:ad:c9:7d:51:7a:22:fd:47: 38:51:bf:e5:42:b6:4b:9f:0c:08:22:0e:1d:4f:42: 4e:05:76:2b:09:e5:df:ac:36:0d:89:88:27:7e:b9: 48:7f:f8:98:8c:da:fa:43:f3:0b:2b:4c:f0:29:c7: db:9b:7f:21:77:ec:b5:40:61:1c:41:54:3e:96:f8: fd:8a:bc:e8:00:56:49:88:e6:29:b8:ef:4c:83:18: 24:6a:57:d6:02:a6:91:78:04:ce:15:a9:12:4a:b0: 1c:06:6f:9a:22:c3:9e:ed:b8:2f:ef:dc:1a:86:dc: 36:80:29:40:b6:38:a4:f9:6e:78:1d:13:51:11:b3: 74:ae:fa:92:8d:db:8f:d9:2c:6f:e6:1e:1e:02:ae: 80:3d:61:d2:97:3b:4c:d2:8e:a8:09:e0:8d:d5:85: 14:a7:b0:bc:b2:2f:f4:88:4c:a1:5a:fb:5f:ab:83: f8:ed:d8:71:2c:53:f3:75:34:3a:d2:dc:8c:de:69: bc:ae:e8:1d:e8:84:f1:e1:0b:4d:60:81:23:07:ab: b8:63:bc:f4:7a:a2:24:50:2d:e8:fa:55:f3:7b:e4: 1e:7c:6d:70:6c:08:77:74:89:50:79:57:40:d2:f9: e7:f9:db:c7:24:8e:27:2c:99:b1:1d:ed:91:b9:dc: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:DD:68:B9:A1:C2:71:37:EB:8B:EE:01:87:68:20:B1:4C:DD:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl X509v3 Authority Key Identifier: keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer sbgp-ipAddrBlock: critical IPv4: 68.69.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3e:16:12:8c:74:ce:67:6c:6f:36:34:20:a2:39:61:63:93: 77:99:f9:a3:6d:cd:8c:0e:34:54:3d:91:c0:d2:5b:80:74:e4: 42:2f:2c:df:9c:78:e6:0e:c8:28:51:f6:41:07:ec:73:53:d8: 44:e6:04:06:61:37:64:bb:4c:0a:06:a0:ca:11:cc:b4:65:a4: d2:24:27:9a:c1:2b:a1:c9:71:12:28:8b:74:27:6b:23:2c:6e: e1:d2:8f:e7:1d:8f:97:b2:17:a5:d0:59:88:4e:04:f2:57:30: a0:ed:77:c8:99:c9:79:b7:93:f0:04:2f:45:2b:2e:c2:de:7d: 38:36:fa:88:e6:db:d4:fb:00:3f:05:59:95:36:8a:f0:55:d2: f3:06:5d:2f:21:6e:c6:a1:0c:76:fc:be:b8:14:a3:3b:9c:e8: d3:04:88:8c:20:f8:94:95:10:45:27:88:a1:00:8e:22:7c:3b: 46:8c:83:99:71:51:d3:d2:4e:33:75:6c:71:90:f8:bc:a1:7e: c1:fd:42:99:77:d5:d7:5d:1e:89:bf:fc:1b:85:a8:72:c7:e1: ab:d8:cb:02:8b:d1:61:30:e7:e9:56:93:09:e5:51:1f:69:38: 48:0e:90:45:c4:91:a2:5f:00:a2:bd:f3:f4:c4:6f:41:36:79: 8b:23:0e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gci9hzotut5kLwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1ZmY4YzMtZmFlNS00MDNmLWJlMDItMzgwNzJhZTJk ZGM2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjRjZDI2M2ItYWY1ZS00N2UyLWE4ZmItM2VkZWJkYjI5MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuF7+b8+rcl9UXoi/Uc4Ub/lQrZLnwwIIg4d T0JOBXYrCeXfrDYNiYgnfrlIf/iYjNr6Q/MLK0zwKcfbm38hd+y1QGEcQVQ+lvj9 irzoAFZJiOYpuO9MgxgkalfWAqaReATOFakSSrAcBm+aIsOe7bgv79wahtw2gClA tjik+W54HRNREbN0rvqSjduP2Sxv5h4eAq6APWHSlztM0o6oCeCN1YUUp7C8si/0 iEyhWvtfq4P47dhxLFPzdTQ60tyM3mm8rugd6ITx4QtNYIEjB6u4Y7z0eqIkUC3o +lXze+QefG1wbAh3dIlQeVdA0vnn+dvHJI4nLJmxHe2RudxTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5c3Wi5ocJxN+uL7gGHaCCxTN3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVm ZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3MmFlMmRkYzYvNTY1ZDQ0ZWMtYmVjNC0z ZWMyLTkzNGYtNzU0MDRmYTNkZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGM1ZmY4YzMtZmFlNS00MDNmLWJl MDItMzgwNzJhZTJkZGM2L2RjNWZmOGMzLWZhZTUtNDAzZi1iZTAyLTM4MDcyYWUy ZGRjNi5jcmwwHwYDVR0jBBgwFoAUo+ykYmiJjakTFOimXaT52AJvdbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYzVmZjhjMy1mYWU1LTQwM2YtYmUwMi0zODA3 MmFlMmRkYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg+FhKMdM5nbG82NCCiOWFjk3eZ+aNtzYwONFQ9kcDSW4B05EIvLN+c eOYOyChR9kEH7HNT2ETmBAZhN2S7TAoGoMoRzLRlpNIkJ5rBK6HJcRIoi3QnayMs buHSj+cdj5eyF6XQWYhOBPJXMKDtd8iZyXm3k/AEL0UrLsLefTg2+ojm29T7AD8F WZU2ivBV0vMGXS8hbsahDHb8vrgUozuc6NMEiIwg+JSVEEUniKEAjiJ8O0aMg5lx UdPSTjN1bHGQ+LyhfsH9Qpl31dddHom//BuFqHLH4avYywKL0WEw5+lWkwnlUR9p OEgOkEXEkaJfAKK98/TEb0E2eYsjDjc= -----END CERTIFICATE-----Generated at Tue Sep 22 20:00:18 2026 by rpki-client