$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d8674b52-33c7-3d26-9c60-e80adbcebd47.roa File: d8674b52-33c7-3d26-9c60-e80adbcebd47.roa (raw, json) Hash identifier: 5Pzxn4ZwnEbWJQ4Vy2HXgW3GiWDm7V5zG3ke5FzZS2Y= Subject key identifier: 67:C0:BF:8D:38:49:C1:7D:EA:3B:65:ED:94:D0:71:55:E9:00:86:FD Certificate issuer: /CN=e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4 Certificate serial: 010D0C9F4328584F99030A6ED27C7CDCA547E980 Authority key identifier: A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d8674b52-33c7-3d26-9c60-e80adbcebd47.roa Signing time: Fri 23 Oct 2026 13:00:12 +0000 ROA not before: Fri 23 Oct 2026 13:00:12 +0000 ROA not after: Thu 21 Jan 2027 14:00:12 +0000 asID: 214432 IP address blocks: 68.68.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:03:0a:6e:d2:7c:7c:dc:a5:47:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4 Validity Not Before: Oct 23 13:00:12 2026 GMT Not After : Jan 21 14:00:12 2027 GMT Subject: CN=7244c3ad-0042-4b43-8f62-8e514312eeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:3a:15:8a:60:ec:e7:60:bb:92:fb:05:af: 67:55:d5:fc:6d:77:c1:de:14:8a:5f:ec:51:7d:21: 8f:00:2f:f4:03:49:5a:e8:ae:15:b6:92:c2:1b:17: 85:3c:ad:09:ca:ca:3f:cc:b2:d7:bd:42:1b:43:7e: 81:c0:d3:5b:3b:e7:5c:30:c6:d7:4a:61:c7:5e:12: 24:d2:c6:17:e7:17:ee:07:e8:9f:f3:66:58:54:61: e4:1e:70:58:84:a2:bd:5b:3e:e9:e0:69:d4:c5:a5: ca:24:63:36:9b:84:21:31:e7:09:d5:a0:c0:c2:57: dd:74:fb:f2:ee:5a:4c:6a:9a:bd:71:8a:25:d8:35: 5f:1e:e9:fd:df:7b:1b:09:31:c9:cf:a4:ba:a6:fb: 0b:73:e4:b0:cb:a9:f5:be:01:55:b1:b1:17:cf:c0: ce:0f:2a:fd:a6:61:8c:e3:50:47:1d:5f:70:78:4c: 52:77:4a:b8:ed:ff:7b:37:e9:c7:fa:f4:0d:22:22: bf:c4:c3:c6:6c:9f:0b:13:a9:e2:7e:ff:9f:1f:75: f8:11:6b:95:a8:35:02:27:29:e3:dd:e3:fa:28:49: 72:21:e8:45:39:18:5b:61:52:4e:90:cb:c3:2a:3e: 51:c5:34:fc:55:7b:98:e1:3b:fe:70:60:68:e2:e1: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C0:BF:8D:38:49:C1:7D:EA:3B:65:ED:94:D0:71:55:E9:00:86:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/d8674b52-33c7-3d26-9c60-e80adbcebd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.crl X509v3 Authority Key Identifier: keyid:A3:F4:CF:BF:A7:3E:08:D7:49:C8:83:90:C9:1B:A1:43:6D:7D:EB:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e3aa68ca-e780-4b1a-8817-ddb8ad3d01a4.cer sbgp-ipAddrBlock: critical IPv4: 68.68.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a8:72:bb:2d:53:8b:5e:e3:98:a6:ae:02:29:d1:8b:63:a2: f7:3e:c9:5f:92:36:87:f8:73:6e:c4:43:2b:9d:89:5b:65:f1: fc:9e:96:1a:77:a4:4a:22:dc:d9:22:77:69:9d:3b:5c:0c:59: 67:07:f1:d5:c9:a3:d1:10:58:3b:4e:5e:da:ef:25:d9:d1:e2: 45:5c:df:fa:b6:8d:c8:ce:ae:5c:dd:16:f0:c2:71:5a:9c:74: 5e:91:12:1c:0c:12:31:94:70:af:40:12:ba:f6:74:51:ae:11: 55:86:e9:a4:2c:0b:06:93:af:3e:43:77:46:ca:98:f0:50:64: 11:c2:b8:aa:4c:ae:ee:b2:8a:2f:83:b4:4b:a2:4d:5e:bc:9b: 28:fc:d6:06:57:e8:ba:02:75:17:f1:3a:3a:7d:98:7a:15:f6: 31:de:fb:6e:7b:8a:60:9d:fb:b9:97:fb:34:a2:8d:9a:90:78: 70:cd:70:40:fd:0b:3b:c1:04:00:07:79:18:fc:f2:da:f8:50: d7:1b:c9:e4:30:f7:2d:a2:be:eb:c7:7f:8d:c9:65:33:8d:0a: 43:dc:9a:38:f5:b4:7e:77:ac:8e:2d:d7:01:a2:09:f8:be:a9: f0:5c:18:a1:08:cd:9c:34:d0:fb:13:de:d2:74:34:2c:c4:e2: 37:37:e9:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZAwpu0nx83KVH6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNhYTY4Y2EtZTc4MC00YjFhLTg4MTctZGRiOGFkM2Qw MWE0MB4XDTI2MTAyMzEzMDAxMloXDTI3MDEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NzI0NGMzYWQtMDA0Mi00YjQzLThmNjItOGU1MTQzMTJlZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDE6FYpg7Odgu5L7Ba9nVdX8bXfB3hSKX+xR fSGPAC/0A0la6K4VtpLCGxeFPK0Jyso/zLLXvUIbQ36BwNNbO+dcMMbXSmHHXhIk 0sYX5xfuB+if82ZYVGHkHnBYhKK9Wz7p4GnUxaXKJGM2m4QhMecJ1aDAwlfddPvy 7lpMapq9cYol2DVfHun933sbCTHJz6S6pvsLc+Swy6n1vgFVsbEXz8DODyr9pmGM 41BHHV9weExSd0q47f97N+nH+vQNIiK/xMPGbJ8LE6nifv+fH3X4EWuVqDUCJynj 3eP6KElyIehFORhbYVJOkMvDKj5RxTT8VXuY4Tv+cGBo4uHPAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfAv404ScF96jtl7ZTQcVXpAIb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lM2Fh NjhjYS1lNzgwLTRiMWEtODgxNy1kZGI4YWQzZDAxYTQvZDg2NzRiNTItMzNjNy0z ZDI2LTljNjAtZTgwYWRiY2ViZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTNhYTY4Y2EtZTc4MC00YjFhLTg4 MTctZGRiOGFkM2QwMWE0L2UzYWE2OGNhLWU3ODAtNGIxYS04ODE3LWRkYjhhZDNk MDFhNC5jcmwwHwYDVR0jBBgwFoAUo/TPv6c+CNdJyIOQyRuhQ2196wowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lM2FhNjhjYS1lNzgwLTRiMWEtODgxNy1kZGI4 YWQzZDAxYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqocrstU4te45imrgIp0Ytjovc+yV+SNof4c27EQyudiVtl8fyelhp3 pEoi3Nkid2mdO1wMWWcH8dXJo9EQWDtOXtrvJdnR4kVc3/q2jcjOrlzdFvDCcVqc dF6REhwMEjGUcK9AErr2dFGuEVWG6aQsCwaTrz5Dd0bKmPBQZBHCuKpMru6yii+D tEuiTV68myj81gZX6LoCdRfxOjp9mHoV9jHe+257imCd+7mX+zSijZqQeHDNcED9 CzvBBAAHeRj88tr4UNcbyeQw9y2ivuvHf43JZTONCkPcmjj1tH53rI4t1wGiCfi+ qfBcGKEIzZw00PsT3tJ0NCzE4jc36ZE= -----END CERTIFICATE-----Generated at Thu Nov 5 12:31:16 2026 by rpki-client