$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa File: b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa (raw, json) Hash identifier: Mn/EZhdHZLouzhZR9TeXFZ4ixF4nckv4RidCmzPDueo= Subject key identifier: B4:54:5E:01:3D:4D:F0:F5:DA:97:5C:3C:EE:4E:EE:19:8D:9F:76:DD Certificate issuer: /CN=c68f99cd-e059-4345-ac58-8ebecccac84e Certificate serial: 010D0C9F4328584ED861E5167AF9C806C46A5100 Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 74.123.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e5:16:7a:f9:c8:06:c4:6a:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=32bc9c44-ecb7-425c-9630-6bbbea264d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:92:66:96:45:35:88:5a:9e:fe:bd:01:2d: ef:17:de:a0:5f:29:62:87:45:25:28:70:49:5f:e8: 4a:29:2e:a6:e8:36:83:b8:ce:71:07:1f:8d:58:d1: e7:65:dd:bc:a2:b5:38:78:82:2f:d9:ac:3a:df:d8: 4d:c2:87:8a:27:2b:3f:b8:dd:a8:8e:2f:fd:72:8d: 5a:ab:26:a1:7f:cc:bc:d8:95:e6:41:7e:cc:a0:6f: 30:8b:94:01:ee:0e:5f:64:7a:24:3c:8f:86:c1:ab: da:8d:f3:a9:99:46:87:78:7d:a3:56:46:8a:8b:74: 72:3b:d3:ee:28:63:63:04:eb:98:f4:69:d0:1d:e1: 4b:94:77:b8:83:78:c3:35:eb:a7:33:92:bd:24:94: 05:4a:ae:2b:b9:91:c5:7a:3a:f6:4b:81:f9:f6:d4: 44:89:86:7d:5a:fb:fb:c2:33:96:f3:92:70:54:fc: e5:c9:13:6d:73:80:df:35:f0:9a:48:fc:bd:5b:79: 44:2f:a9:87:dd:b6:9b:17:bc:2f:27:ca:d3:5d:1c: 90:54:b8:98:81:c2:d5:09:5a:41:7a:c3:08:18:ab: 1c:60:5f:9a:88:cd:45:ad:d2:9e:3f:90:1b:50:fc: b5:fd:9b:d3:d7:cd:63:c1:7b:dd:57:4b:a2:c5:3c: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:5E:01:3D:4D:F0:F5:DA:97:5C:3C:EE:4E:EE:19:8D:9F:76:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl X509v3 Authority Key Identifier: keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer sbgp-ipAddrBlock: critical IPv4: 74.123.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e8:4f:3a:59:b5:7d:53:f5:4a:73:6a:31:0a:a8:29:ee:9c: 3e:13:18:61:26:6b:29:8b:e4:44:1d:1a:39:ed:b1:58:70:21: b9:de:3d:39:0b:2c:6a:ba:19:cc:40:ad:f4:d3:20:31:69:f1: d7:49:ec:92:89:f8:17:63:cb:7f:52:1d:67:7d:37:04:10:eb: 42:27:d2:33:90:c8:e4:04:94:60:b7:6f:a0:bc:46:1a:dc:89: 2a:b4:53:88:cf:36:ed:b5:b5:6c:92:31:bc:99:d7:ef:78:59: 76:d7:a4:de:5b:cf:71:79:c5:c3:e5:4d:8e:b9:6e:1b:b1:82: 2d:3d:88:7d:8b:4d:d6:c5:f6:bb:a5:1c:0f:92:d8:fb:4a:11: a9:71:e2:24:62:46:00:2c:fd:b8:e0:99:c3:9d:e8:f0:dc:23: 96:9e:52:22:e4:ac:ab:cd:da:13:47:dc:d5:d3:af:6d:c3:7c: 2d:82:41:ad:a8:f6:ba:18:d5:29:8e:8f:5e:0c:fc:45:34:29: 56:23:be:7c:9e:1c:ef:9c:de:7d:b0:9f:92:40:af:34:55:db: b5:45:b3:cb:97:f9:9d:e3:9a:b4:25:61:ff:31:80:54:8d:e8: 9e:50:ab:94:11:f4:1f:75:82:fc:b7:de:1e:5c:59:c8:8f:8e: ca:10:49:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeUWevnIBsRqUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4Zjk5Y2QtZTA1OS00MzQ1LWFjNTgtOGViZWNjY2Fj ODRlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MzJiYzljNDQtZWNiNy00MjVjLTk2MzAtNmJiYmVhMjY0ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJmSZpZFNYhanv69AS3vF96gXylih0UlKHBJ X+hKKS6m6DaDuM5xBx+NWNHnZd28orU4eIIv2aw639hNwoeKJys/uN2oji/9co1a qyahf8y82JXmQX7MoG8wi5QB7g5fZHokPI+GwavajfOpmUaHeH2jVkaKi3RyO9Pu KGNjBOuY9GnQHeFLlHe4g3jDNeunM5K9JJQFSq4ruZHFejr2S4H59tREiYZ9Wvv7 wjOW85JwVPzlyRNtc4DfNfCaSPy9W3lEL6mH3babF7wvJ8rTXRyQVLiYgcLVCVpB esMIGKscYF+aiM1FrdKeP5AbUPy1/ZvT181jwXvdV0uixTwIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRUXgE9TfD12pdcPO5O7hmNn3bdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhm OTljZC1lMDU5LTQzNDUtYWM1OC04ZWJlY2NjYWM4NGUvYjMyZDZhOWUtZTFiZC0z NjA1LWFjNWEtOTVlYmU0NGI3M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzY4Zjk5Y2QtZTA1OS00MzQ1LWFj NTgtOGViZWNjY2FjODRlL2M2OGY5OWNkLWUwNTktNDM0NS1hYzU4LThlYmVjY2Nh Yzg0ZS5jcmwwHwYDVR0jBBgwFoAUCmbGteBfw7Z8RupGiPW6HoYMDDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNjhmOTljZC1lMDU5LTQzNDUtYWM1OC04ZWJl Y2NjYWM4NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASns3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7oTzpZtX1T9UpzajEKqCnunD4TGGEmaymL5EQdGjntsVhwIbnePTkL LGq6GcxArfTTIDFp8ddJ7JKJ+Bdjy39SHWd9NwQQ60In0jOQyOQElGC3b6C8Rhrc iSq0U4jPNu21tWySMbyZ1+94WXbXpN5bz3F5xcPlTY65bhuxgi09iH2LTdbF9rul HA+S2PtKEalx4iRiRgAs/bjgmcOd6PDcI5aeUiLkrKvN2hNH3NXTr23DfC2CQa2o 9roY1SmOj14M/EU0KVYjvnyeHO+c3n2wn5JArzRV27VFs8uX+Z3jmrQlYf8xgFSN 6J5Qq5QR9B91gvy33h5cWciPjsoQSaI= -----END CERTIFICATE-----Generated at Mon Sep 21 15:56:47 2026 by rpki-client