$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa File: 195a65bc-7a79-3b20-8e10-5794d68025a0.roa (raw, json) Hash identifier: /VQdjXeRyAavEipRJWfW3bRFxBw6/RcJQauouxSQGrs= Subject key identifier: FC:10:D0:53:BE:FA:3F:C5:32:3D:E3:80:4A:3C:7E:42:4F:08:65:2C Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584F4C3D56E3D90565DA977D6540 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23316 IP address blocks: 68.170.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:56:e3:d9:05:65:da:97:7d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0f4d9091-7119-4a8b-a2ae-1d5ff35f8c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:22:be:c3:28:b2:a7:46:1e:a7:07:8e:88: 33:dd:48:6e:36:4c:89:b2:46:fe:ed:72:49:92:a8: 68:7e:37:e2:58:a7:d4:b0:b0:d2:5f:33:0f:b3:d9: 3c:38:6b:b3:54:2d:4b:04:10:70:3a:80:07:12:db: 47:7f:1b:95:d9:af:72:a4:33:25:42:f9:d9:05:d7: ad:3b:ee:78:d3:92:b3:0e:32:b0:b0:98:49:f9:44: f2:ce:56:c9:29:0b:a5:3a:02:8a:a5:ce:05:e2:89: ac:4c:6b:f6:06:47:9c:a7:d5:b5:db:22:64:36:b2: 79:34:15:a3:41:dc:98:d7:fe:39:fa:62:96:1a:d7: d1:60:70:ef:5a:11:00:b5:7d:d1:5e:01:a4:fe:5a: 4e:ee:6c:00:e7:24:d1:9f:31:30:7d:84:49:96:5e: 93:74:22:a3:a3:51:d8:cc:c3:cc:61:a2:06:c9:63: 0c:79:74:29:7f:bb:df:41:ac:c8:c3:63:f6:05:d1: ff:74:5c:06:b6:74:74:5b:02:8c:0f:20:fd:7e:91: 56:bc:f9:c3:93:0a:ac:75:9d:88:a2:b0:67:b5:4f: 48:5b:d1:67:96:c9:a7:0a:0f:dc:c4:e0:ca:6c:c5: b4:87:45:19:7b:f6:b7:20:36:78:4c:fc:36:64:4d: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:D0:53:BE:FA:3F:C5:32:3D:E3:80:4A:3C:7E:42:4F:08:65:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/195a65bc-7a79-3b20-8e10-5794d68025a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 68.170.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1b:ac:d7:88:c1:f5:2f:2f:52:bd:43:9b:75:14:3d:7a:17: 89:c9:d2:df:bc:3b:fc:4a:c2:0e:5c:61:b4:a2:45:5b:f6:2a: ac:5c:32:08:1e:d9:82:68:ec:db:42:dd:3c:e2:43:0f:00:1a: 9d:1c:0d:93:d6:87:4c:93:2d:28:62:8a:6f:dd:ee:c1:78:bb: 32:f3:68:db:00:69:5e:30:ef:0c:c9:e3:66:44:9d:0a:2a:25: 32:13:11:8b:14:70:31:1a:60:59:28:9c:9f:83:12:8b:33:c7: bf:ad:0a:0b:4b:da:71:50:f2:d4:e6:0b:44:20:99:8e:20:44: ca:51:08:ed:03:18:dc:8a:56:d6:16:a7:98:ef:68:bd:64:15: a3:3e:25:be:33:6d:a0:75:2a:6e:26:6b:e2:50:12:66:5b:65: f4:1a:17:9f:1e:30:89:94:4f:da:d4:a3:c0:c8:ea:cb:68:82: 63:5e:ca:56:f7:39:c1:bf:d5:3e:79:48:f4:3a:90:a5:42:39: be:01:37:62:13:f7:a9:32:26:92:bd:73:48:ec:13:eb:d7:4b: 5a:83:96:08:70:f8:4c:ff:68:b7:eb:d9:51:33:32:11:fe:2c: 02:ee:fa:c2:fe:43:e7:d4:28:4a:c9:a9:59:1e:7c:d5:94:4a: ca:94:3f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVbj2QVl2pd9ZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGY0ZDkwOTEtNzExOS00YThiLWEyYWUtMWQ1ZmYzNWY4Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y8ivsMosqdGHqcHjogz3UhuNkyJskb+7XJJ kqhofjfiWKfUsLDSXzMPs9k8OGuzVC1LBBBwOoAHEttHfxuV2a9ypDMlQvnZBdet O+5405KzDjKwsJhJ+UTyzlbJKQulOgKKpc4F4omsTGv2Bkecp9W12yJkNrJ5NBWj QdyY1/45+mKWGtfRYHDvWhEAtX3RXgGk/lpO7mwA5yTRnzEwfYRJll6TdCKjo1HY zMPMYaIGyWMMeXQpf7vfQazIw2P2BdH/dFwGtnR0WwKMDyD9fpFWvPnDkwqsdZ2I orBntU9IW9FnlsmnCg/cxODKbMW0h0UZe/a3IDZ4TPw2ZE3B0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwQ0FO++j/FMj3jgEo8fkJPCGUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvMTk1YTY1YmMtN2E3OS0z YjIwLThlMTAtNTc5NGQ2ODAyNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIbrNeIwfUvL1K9Q5t1FD16F4nJ0t+8O/xKwg5cYbSiRVv2KqxcMgge 2YJo7NtC3TziQw8AGp0cDZPWh0yTLShiim/d7sF4uzLzaNsAaV4w7wzJ42ZEnQoq JTITEYsUcDEaYFkonJ+DEoszx7+tCgtL2nFQ8tTmC0QgmY4gRMpRCO0DGNyKVtYW p5jvaL1kFaM+Jb4zbaB1Km4ma+JQEmZbZfQaF58eMImUT9rUo8DI6stogmNeylb3 OcG/1T55SPQ6kKVCOb4BN2IT96kyJpK9c0jsE+vXS1qDlghw+Ez/aLfr2VEzMhH+ LALu+sL+Q+fUKErJqVkefNWUSsqUPxo= -----END CERTIFICATE-----Generated at Sat Oct 3 08:31:02 2026 by rpki-client