$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json) Hash identifier: ELbvE9XNvMAFdLBdJtD8TzjMwEu3cmW+r1pda4sR6Rg= Subject key identifier: B8:D3:E4:CE:3B:D3:AB:47:1E:70:3E:9C:6C:CB:C7:28:38:2E:25:37 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F19FCF7DBA4514EF8CE600C00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 8069 IP address blocks: 40.87.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f7:db:a4:51:4e:f8:ce:60:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=81c87abc-b0e4-4f47-82ca-05f7303f3a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:60:8c:52:26:15:7f:cd:63:dd:c8:a7:20: 24:3a:17:95:ee:6b:1d:11:bf:fb:f6:67:aa:df:7a: cf:d3:af:86:c2:56:06:ba:81:db:d7:01:46:99:46: f3:8d:01:fa:47:82:5a:47:07:8a:ce:20:0e:73:9f: 98:1f:08:95:bb:9f:15:f8:dc:e4:01:3c:ff:52:d5: df:05:9e:c4:2e:0a:c2:43:c5:36:87:f7:e0:7a:1b: 6a:41:fd:09:e1:35:40:36:60:b0:b0:20:50:e8:fa: d6:a5:84:82:d1:65:16:11:ba:27:fd:7e:94:f0:a2: 94:c5:af:cf:5b:45:37:0b:f1:d2:81:29:8b:d6:f1: ef:f9:0f:0c:10:7a:0e:2f:52:a4:27:6f:49:ae:dd: 8c:d4:f2:53:58:0e:29:c2:83:d3:51:fb:ff:f4:71: 81:e8:a8:87:f0:4d:4e:ad:bb:98:f2:13:89:40:fd: da:84:08:01:8c:9c:23:18:6d:0c:e4:bf:6a:ab:3c: 33:73:3a:2b:56:a8:03:13:ff:22:68:93:b7:32:b9: 34:e8:9f:01:c3:f2:b9:2e:d2:6d:85:48:4e:50:64: 2b:ad:ca:ce:ec:9a:7d:49:b4:2e:a4:ed:58:e8:2f: 75:86:c1:ec:a9:52:42:69:60:01:49:61:6c:b7:03: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D3:E4:CE:3B:D3:AB:47:1E:70:3E:9C:6C:CB:C7:28:38:2E:25:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 40.87.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ec:6b:64:8d:cb:52:1f:95:2f:f1:f2:33:ce:97:df:f1:67: cb:ea:30:f5:e3:29:cc:7c:17:a1:96:79:0e:fc:ca:5e:ae:4c: 2f:61:32:13:6f:c1:6e:ac:d3:ca:e2:6a:ef:07:3e:30:59:0f: d1:93:9c:c8:e8:30:4b:5b:2a:29:ba:39:1e:df:69:b1:68:36: 58:30:c9:d6:c5:75:00:bd:ef:39:09:ee:bd:19:95:61:81:00: f2:74:3f:04:b8:c4:29:0f:7a:d8:1a:67:44:45:b1:89:6f:71: b0:c2:68:62:55:02:2d:05:a0:67:4b:02:ef:15:02:8b:55:c3: 97:45:b0:ce:92:4d:49:62:d4:67:25:55:ae:6a:bc:c8:ea:06: 9f:91:21:c7:67:94:da:11:2e:fc:a6:3b:56:11:87:ec:ab:16: 96:bd:77:78:60:02:f4:82:79:0b:72:fe:5d:93:3c:6c:37:e7: 65:b5:92:c9:be:9b:20:eb:7f:84:b4:71:46:a4:30:de:77:47: 86:a5:ed:35:ae:1d:cc:be:1b:dd:34:92:d9:b0:b5:bf:7a:10: dd:c3:2c:bc:61:3d:19:53:b0:85:43:88:fe:32:05:31:33:53: 3a:da:a4:ff:c6:c4:04:8d:48:02:66:0d:f0:ce:15:21:78:43: 02:78:b3:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PfbpFFO+M5gDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ODFjODdhYmMtYjBlNC00ZjQ3LTgyY2EtMDVmNzMwM2YzYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKZgjFImFX/NY93IpyAkOheV7msdEb/79meq 33rP06+GwlYGuoHb1wFGmUbzjQH6R4JaRweKziAOc5+YHwiVu58V+NzkATz/UtXf BZ7ELgrCQ8U2h/fgehtqQf0J4TVANmCwsCBQ6PrWpYSC0WUWEbon/X6U8KKUxa/P W0U3C/HSgSmL1vHv+Q8MEHoOL1KkJ29Jrt2M1PJTWA4pwoPTUfv/9HGB6KiH8E1O rbuY8hOJQP3ahAgBjJwjGG0M5L9qqzwzczorVqgDE/8iaJO3Mrk06J8Bw/K5LtJt hUhOUGQrrcrO7Jp9SbQupO1Y6C91hsHsqVJCaWABSWFstwOO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjT5M4706tHHnA+nGzLxyg4LiU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjk4NjI3M2MtMzQzYi0z OWMyLTlkZDEtYmI4Y2EzNjNjNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKFcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHsa2SNy1IflS/x8jPOl9/xZ8vqMPXjKcx8F6GWeQ78yl6uTC9hMhNv wW6s08riau8HPjBZD9GTnMjoMEtbKim6OR7fabFoNlgwydbFdQC97zkJ7r0ZlWGB APJ0PwS4xCkPetgaZ0RFsYlvcbDCaGJVAi0FoGdLAu8VAotVw5dFsM6STUli1Gcl Va5qvMjqBp+RIcdnlNoRLvymO1YRh+yrFpa9d3hgAvSCeQty/l2TPGw352W1ksm+ myDrf4S0cUakMN53R4al7TWuHcy+G900ktmwtb96EN3DLLxhPRlTsIVDiP4yBTEz UzrapP/GxASNSAJmDfDOFSF4QwJ4s2A= -----END CERTIFICATE-----Generated at Sat Oct 10 16:21:41 2026 by rpki-client