$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa File: 13997c14-c581-3e61-9df1-e2286853ad8a.roa (raw, json) Hash identifier: 9fD77ZpUyJ/eVuSZL0gYGHltB9Lr97XkOLoT4AptZow= Subject key identifier: A9:06:66:14:27:D0:3A:04:9E:00:4A:30:36:C9:AE:10:70:63:D7:98 Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584FA85E4AD3373E5149A997A980 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 7029 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:4a:d3:37:3e:51:49:a9:97:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=a3130f57-0ca8-40aa-9cb1-4531b3a8e281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:34:2d:95:1e:86:81:21:3a:e5:20:2c:d9: 53:00:74:38:e0:12:54:07:57:71:f3:88:19:f2:d2: 7a:88:fb:37:9e:e5:71:a7:83:fc:d4:63:a4:24:63: a5:55:37:fb:6e:a6:cb:a5:4b:84:74:a6:bf:4a:e8: a2:f4:37:9f:d6:90:01:1e:97:b7:1b:b9:b1:fa:b1: 5d:83:5b:db:b3:b8:54:ed:92:b8:d0:d0:37:c0:9b: 1a:b4:dc:34:86:56:ea:eb:22:b6:16:11:33:e3:73: 09:33:4b:0d:30:ae:d7:ee:0f:aa:f0:26:d4:59:4c: 4d:f0:13:22:9f:c7:f0:9d:d1:63:f1:6e:b7:43:95: a1:1f:2a:d6:0f:01:6a:78:70:5a:67:1c:bd:23:46: 46:1f:fe:c5:58:3d:82:6f:3e:a9:69:cd:d9:6a:8c: e0:71:18:67:59:51:f0:5d:72:53:19:03:59:33:db: 9e:b9:28:55:4e:29:b1:33:f2:f1:68:96:84:5e:db: 66:77:ee:b6:d7:b3:e3:d3:04:50:ca:39:4a:5e:9d: 97:7a:eb:95:ef:4d:cb:19:33:ef:e9:71:04:a9:15: 7c:ad:c3:b0:ca:15:26:fe:59:dd:8f:a5:e5:e7:58: a7:e2:d7:c5:41:5c:dd:8d:2c:bc:a2:8d:06:e4:a3: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:06:66:14:27:D0:3A:04:9E:00:4A:30:36:C9:AE:10:70:63:D7:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/13997c14-c581-3e61-9df1-e2286853ad8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:73:98:ad:9a:a2:17:9f:49:e1:55:f5:57:c9:54:54:57:a3: b4:78:9d:27:85:2b:5c:1b:6c:76:e3:71:6f:55:44:bd:24:ef: 3b:86:c8:12:42:53:44:00:38:0a:d7:0f:eb:3e:0b:5a:b2:88: df:f6:b3:f3:3b:24:ad:2a:29:05:9e:ce:29:3c:50:d4:ce:98: 48:f6:c5:15:1f:57:55:18:dd:71:d2:55:27:78:86:48:09:cc: 3b:c1:91:5a:eb:f3:4b:fc:bd:39:e9:41:ea:30:dd:c0:ea:b6: df:15:a3:cb:cd:e7:5d:df:8f:31:9b:aa:d7:b7:81:10:a9:5a: 20:49:91:d9:37:9e:03:18:41:0d:55:27:27:a4:23:4d:8f:91: 07:0b:ba:fd:66:fe:ff:8f:1f:7c:4e:dd:be:db:2f:b7:06:c2: f2:f5:0a:62:d8:c8:8a:79:cc:7e:00:40:64:c0:e6:57:d7:8f: 4b:1a:ec:eb:ed:89:43:06:49:39:4e:9d:f9:95:7f:20:5f:4c: 83:92:fe:54:ec:85:51:d2:c3:82:8d:21:23:b6:29:cc:f7:5c: 27:e5:42:0e:9b:eb:68:aa:39:c9:ea:15:5e:54:54:1a:a4:81: 44:2a:ba:ac:97:5e:47:1f:ac:02:8f:c7:77:17:a3:3a:c4:ec: 88:9d:41:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXkrTNz5RSamXqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YTMxMzBmNTctMGNhOC00MGFhLTljYjEtNDUzMWIzYThlMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjg0LZUehoEhOuUgLNlTAHQ44BJUB1dx84gZ 8tJ6iPs3nuVxp4P81GOkJGOlVTf7bqbLpUuEdKa/Suii9Def1pABHpe3G7mx+rFd g1vbs7hU7ZK40NA3wJsatNw0hlbq6yK2FhEz43MJM0sNMK7X7g+q8CbUWUxN8BMi n8fwndFj8W63Q5WhHyrWDwFqeHBaZxy9I0ZGH/7FWD2Cbz6pac3ZaozgcRhnWVHw XXJTGQNZM9ueuShVTimxM/LxaJaEXttmd+6217Pj0wRQyjlKXp2XeuuV703LGTPv 6XEEqRV8rcOwyhUm/lndj6Xl51in4tfFQVzdjSy8oo0G5KMs1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkGZhQn0DoEngBKMDbJrhBwY9eYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvMTM5OTdjMTQtYzU4MS0z ZTYxLTlkZjEtZTIyODY4NTNhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJzmK2aohefSeFV9VfJVFRXo7R4nSeFK1wbbHbjcW9VRL0k7zuGyBJC U0QAOArXD+s+C1qyiN/2s/M7JK0qKQWezik8UNTOmEj2xRUfV1UY3XHSVSd4hkgJ zDvBkVrr80v8vTnpQeow3cDqtt8Vo8vN513fjzGbqte3gRCpWiBJkdk3ngMYQQ1V JyekI02PkQcLuv1m/v+PH3xO3b7bL7cGwvL1CmLYyIp5zH4AQGTA5lfXj0sa7Ovt iUMGSTlOnfmVfyBfTIOS/lTshVHSw4KNISO2Kcz3XCflQg6b62iqOcnqFV5UVBqk gUQquqyXXkcfrAKPx3cXozrE7IidQWM= -----END CERTIFICATE-----Generated at Thu Nov 5 16:37:47 2026 by rpki-client