$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa File: 7cf1b155-1ef2-3673-9779-9ab9f58972da.roa (raw, json) Hash identifier: SFF0GWbOLOAmYuNeULaRx22CAgdXj2Ewx0AciGcH0As= Subject key identifier: 0C:0B:05:25:AE:7A:50:22:61:8C:3B:7D:A9:47:33:25:DA:BF:8C:93 Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Certificate serial: 010D0C9F4328584EF7176BF2D7A6DC1E6540A100 Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 4476 IP address blocks: 192.68.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6b:f2:d7:a6:dc:1e:65:40:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=6551f18d-25f2-406c-90c7-2de50fee371f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:2a:96:c3:aa:a5:73:b8:ff:c4:5c:9f:1c: e9:76:21:04:32:ec:4a:fb:13:0d:2e:0e:77:bd:31: 7b:76:f5:dc:a5:52:2f:91:c7:53:5b:b6:15:ac:22: 6d:ea:38:50:a6:0d:e3:36:92:f1:5d:be:14:e5:e2: 8b:61:d7:c9:d6:4d:b6:01:14:05:23:de:bd:b9:1f: 17:24:d1:b7:53:0c:28:37:78:e9:37:73:ea:ac:20: 2d:80:74:62:7b:a1:90:62:96:71:0b:59:11:e9:ee: 1d:5c:c0:d1:4a:58:96:39:25:98:d0:e3:8f:7c:76: b8:01:82:29:be:4e:65:e6:51:39:d7:94:8c:ca:f2: b3:df:71:9d:6d:6f:1d:2b:42:93:e8:fc:4c:8e:eb: 93:47:c9:37:d9:d8:cf:b2:f0:43:78:f4:21:5b:76: 6d:2c:0a:9c:89:e1:1d:43:da:0b:90:da:d9:1d:12: 9d:6d:f2:8b:ab:9a:97:d2:fc:bd:40:29:ee:d2:f1: 4b:2a:95:a7:44:8f:3a:1f:92:f7:1d:29:85:3b:01: db:4b:09:41:f1:82:29:f7:0a:81:d3:5d:81:22:38: 03:da:6b:b6:6c:64:6d:fb:2c:6f:b8:86:6c:c8:80: 25:96:12:f3:47:7d:af:50:69:39:05:c6:ac:de:b1: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:05:25:AE:7A:50:22:61:8C:3B:7D:A9:47:33:25:DA:BF:8C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl X509v3 Authority Key Identifier: keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer sbgp-ipAddrBlock: critical IPv4: 192.68.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:04:5b:a5:2b:a1:1e:a7:e8:45:b2:37:6e:7a:42:dd:37:59: d0:c2:b7:48:b0:fe:fe:98:37:98:49:3f:59:c3:c8:9b:d4:15: 97:3f:3b:2b:60:59:78:0e:dd:9f:1b:b1:d4:2d:5b:b9:17:7f: 30:78:65:67:9d:8c:6d:db:4e:5f:0e:29:1d:fe:dc:45:b6:c8: 85:3f:3f:02:89:52:cb:86:04:1f:79:3e:73:13:8c:f8:71:69: 37:b7:5e:6f:9c:b7:1a:47:6e:8f:a2:95:4a:ae:e4:6c:f1:c9: 5f:cd:87:e1:75:f2:41:35:1e:d7:06:8c:5a:76:10:da:6c:52: f7:53:07:a8:83:71:89:07:78:82:80:c6:6d:cb:ba:5f:d3:54: e3:c4:c7:38:0b:be:08:f1:16:df:2c:3d:0f:00:34:5e:b7:4b: 7a:e6:d9:9d:57:64:38:f3:76:be:fa:c7:2a:d4:1a:fc:f4:29: f1:12:de:2a:af:a4:fb:9a:a0:99:e3:93:24:71:9b:b9:4c:6e: fb:76:23:7f:d1:68:2f:b5:dd:f3:83:11:7f:2c:de:36:a5:e8: 9c:27:7d:4b:61:21:45:83:e9:54:6d:91:0f:0e:78:99:39:9c: 85:12:72:b2:4d:31:df:e6:18:9b:e8:af:f2:53:b2:48:20:9b: 76:63:1b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2vy16bcHmVAoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2 OTYzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NjU1MWYxOGQtMjVmMi00MDZjLTkwYzctMmRlNTBmZWUzNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm8qlsOqpXO4/8RcnxzpdiEEMuxK+xMNLg53 vTF7dvXcpVIvkcdTW7YVrCJt6jhQpg3jNpLxXb4U5eKLYdfJ1k22ARQFI969uR8X JNG3UwwoN3jpN3PqrCAtgHRie6GQYpZxC1kR6e4dXMDRSliWOSWY0OOPfHa4AYIp vk5l5lE515SMyvKz33GdbW8dK0KT6PxMjuuTR8k32djPsvBDePQhW3ZtLAqcieEd Q9oLkNrZHRKdbfKLq5qX0vy9QCnu0vFLKpWnRI86H5L3HSmFOwHbSwlB8YIp9wqB 012BIjgD2mu2bGRt+yxvuIZsyIAllhLzR32vUGk5Bcas3rEyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwLBSWuelAiYYw7falHMyXav4yTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5 YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvN2NmMWIxNTUtMWVmMi0z NjczLTk3NzktOWFiOWY1ODk3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4 NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2 ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUEW6UroR6n6EWyN256Qt03WdDCt0iw/v6YN5hJP1nDyJvUFZc/Oytg WXgO3Z8bsdQtW7kXfzB4ZWedjG3bTl8OKR3+3EW2yIU/PwKJUsuGBB95PnMTjPhx aTe3Xm+ctxpHbo+ilUqu5GzxyV/Nh+F18kE1HtcGjFp2ENpsUvdTB6iDcYkHeIKA xm3Lul/TVOPExzgLvgjxFt8sPQ8ANF63S3rm2Z1XZDjzdr76xyrUGvz0KfES3iqv pPuaoJnjkyRxm7lMbvt2I3/RaC+13fODEX8s3jal6JwnfUthIUWD6VRtkQ8OeJk5 nIUScrJNMd/mGJvor/JTskggm3ZjG3E= -----END CERTIFICATE-----Generated at Tue Sep 22 22:17:38 2026 by rpki-client