$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa File: 2cc7e6d7-52d1-305c-a917-da2148e02567.roa (raw, json) Hash identifier: OwIlDsS0Hc7NWe7qxQedC62tB1uEispP8lVPqFIzkf0= Subject key identifier: E4:38:DD:B1:6A:B7:6E:5F:42:B9:59:48:1C:44:BF:EC:6E:5B:28:53 Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F4328584EA7926B5374ED58C98EC95E80 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397122 IP address blocks: 68.234.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6b:53:74:ed:58:c9:8e:c9:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8ddcaff5-2112-4d7d-b3bb-b15ca55cb7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:57:99:3c:50:af:51:23:c2:c9:de:8e:94: 0e:50:80:f3:14:e7:8b:9a:fb:ec:67:f4:72:e2:20: a5:9f:67:6c:43:38:eb:63:a8:fd:8c:4e:6e:ba:de: 3f:1d:14:b5:7c:b3:12:e5:dd:93:a1:f6:9a:85:e8: b7:be:6f:50:66:02:ab:f1:fc:2b:c6:75:d8:3e:fb: 3f:85:f3:e6:96:eb:c3:b2:57:4e:45:ce:6b:88:83: 7c:cb:79:b1:bd:e7:ca:28:93:50:65:59:ec:63:05: 66:fa:17:05:5c:9e:b4:4c:4c:a8:0f:27:32:86:d8: 36:a4:11:a8:0a:1c:33:52:05:00:66:49:74:ae:01: df:a0:e1:6a:79:ce:9c:45:48:e6:06:84:1d:64:0e: 3d:7f:89:1e:65:e1:f7:8d:a3:26:3c:31:66:f3:46: 88:08:24:27:d8:22:5d:b3:45:4e:f4:89:d7:dc:af: 34:19:54:29:e7:39:e2:9b:e9:90:13:15:c2:62:96: 06:d3:48:5c:5d:2c:ce:73:c9:ca:da:c4:13:6a:25: ba:cb:cb:9d:90:89:84:26:06:2b:ae:d8:04:be:f8: cb:d1:08:ec:b9:88:1f:85:f0:44:f5:b4:2b:4d:c9: 97:ab:db:ff:e5:c0:55:4e:2a:9c:17:1b:1b:d5:66: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:38:DD:B1:6A:B7:6E:5F:42:B9:59:48:1C:44:BF:EC:6E:5B:28:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2cc7e6d7-52d1-305c-a917-da2148e02567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 68.234.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:38:12:3e:97:e6:f0:65:54:ec:69:b3:47:50:0e:c0:b5:39: 6c:35:ca:05:e0:16:61:87:88:65:f5:ce:41:27:30:81:6c:78: fd:3c:1d:ba:04:6d:c3:9c:a0:48:41:bb:c7:b0:fa:b9:85:3d: 7c:78:46:18:9a:d3:2c:77:fe:11:63:e0:b4:1c:aa:0f:a2:12: 89:57:03:01:a7:77:8b:bd:b1:06:08:f2:21:90:01:fe:27:9d: 10:08:19:38:7a:21:d3:30:3f:4f:06:d0:2a:78:1f:3d:d9:a6: 51:50:42:f1:31:61:fb:71:57:01:71:89:98:08:ff:de:99:3c: 32:65:d2:31:62:49:2a:b5:a6:ca:3a:a2:91:72:58:5a:64:7c: bb:75:34:1c:43:f9:57:72:e7:53:37:7a:8b:ee:a1:e3:17:b7: 6e:a4:47:92:c2:31:a4:09:64:9a:08:36:42:8c:6a:27:1a:d4: 92:83:c4:79:c5:e8:e8:7d:fc:a2:d9:ae:7f:50:86:ac:fa:09: 61:4f:09:ee:b7:c3:38:59:a7:f5:f4:a3:95:db:7c:56:bd:6c: 62:e7:6c:ec:cc:b2:d0:93:5f:ed:4b:b8:a3:df:f3:69:fb:12: 53:f9:9e:7a:c0:66:d6:44:9b:cb:04:58:37:82:80:34:ae:ef: ba:50:8c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkmtTdO1YyY7JXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGRkY2FmZjUtMjExMi00ZDdkLWIzYmItYjE1Y2E1NWNiN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/NXmTxQr1EjwsnejpQOUIDzFOeLmvvsZ/Ry 4iCln2dsQzjrY6j9jE5uut4/HRS1fLMS5d2Tofaahei3vm9QZgKr8fwrxnXYPvs/ hfPmluvDsldORc5riIN8y3mxvefKKJNQZVnsYwVm+hcFXJ60TEyoDycyhtg2pBGo ChwzUgUAZkl0rgHfoOFqec6cRUjmBoQdZA49f4keZeH3jaMmPDFm80aICCQn2CJd s0VO9InX3K80GVQp5znim+mQExXCYpYG00hcXSzOc8nK2sQTaiW6y8udkImEJgYr rtgEvvjL0QjsuYgfhfBE9bQrTcmXq9v/5cBVTiqcFxsb1WbwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ43bFqt25fQrlZSBxEv+xuWyhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvMmNjN2U2ZDctNTJkMS0z MDVjLWE5MTctZGEyMTQ4ZTAyNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEROpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw4Ej6X5vBlVOxps0dQDsC1OWw1ygXgFmGHiGX1zkEnMIFseP08HboE bcOcoEhBu8ew+rmFPXx4Rhia0yx3/hFj4LQcqg+iEolXAwGnd4u9sQYI8iGQAf4n nRAIGTh6IdMwP08G0Cp4Hz3ZplFQQvExYftxVwFxiZgI/96ZPDJl0jFiSSq1pso6 opFyWFpkfLt1NBxD+Vdy51M3eovuoeMXt26kR5LCMaQJZJoINkKMaica1JKDxHnF 6Oh9/KLZrn9Qhqz6CWFPCe63wzhZp/X0o5XbfFa9bGLnbOzMstCTX+1LuKPf82n7 ElP5nnrAZtZEm8sEWDeCgDSu77pQjA8= -----END CERTIFICATE-----Generated at Wed Jul 29 03:58:14 2026 by rpki-client