$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa File: 8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa (raw, json) Hash identifier: zFomVXkMgjyIERDJ+kwZU+UHwO6/ANsUPBFmQuE63mY= Subject key identifier: A9:AE:D1:18:E7:B6:11:C2:D8:F9:26:2C:C0:0B:5B:0F:8C:B3:88:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD468533D2B1FFFC36D080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.161.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:46:85:33:d2:b1:ff:fc:36:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=40378dc6-ba94-4b06-acfa-b5912eae4503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:8f:e9:80:f2:fb:4d:64:7d:b1:2e:14:96: 4c:56:aa:82:16:e3:a9:a3:67:e4:f9:55:58:70:82: 32:c2:d1:2b:48:12:75:17:d9:76:36:77:c3:c9:f3: 1a:04:68:e8:ec:fd:3f:69:47:09:c1:7d:a9:7b:48: 23:46:f9:ae:d8:9e:fb:69:3f:a4:77:a2:17:95:bd: 79:46:df:cf:fb:62:1c:e8:66:1f:98:dc:f2:2c:46: 52:a7:c5:6a:db:bb:f1:7e:01:37:3c:f9:6d:af:b8: 46:e8:ff:90:f5:db:cc:40:a0:21:5e:c8:1d:10:e9: bd:45:6d:d0:be:c2:d1:69:12:74:dd:36:b0:09:eb: 84:a3:ff:04:fb:83:1c:dd:a3:44:44:3d:58:48:17: af:65:66:ed:2c:83:f4:4e:70:7c:35:26:b5:f4:a7: 41:97:c2:7c:ec:03:c0:e1:7e:d2:8a:f4:01:9c:77: b8:de:df:3c:4b:30:9c:b5:c8:02:6b:16:cd:24:1f: 87:0c:f8:63:b9:88:fb:56:2c:7e:c7:77:46:26:b1: 70:06:ed:3a:7d:01:7f:81:24:9b:fc:69:47:d1:9c: 16:57:65:d2:e3:78:43:2b:db:b2:07:d4:de:54:b2: 5d:1c:8d:92:53:92:fb:03:2e:36:08:e7:a7:3e:14: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:D1:18:E7:B6:11:C2:D8:F9:26:2C:C0:0B:5B:0F:8C:B3:88:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.161.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:08:cd:4a:ef:31:ca:65:77:bf:87:6d:f9:ff:f7:e0:7b:02: 3e:53:56:94:51:b6:42:19:c3:78:7b:38:c5:74:6a:62:9f:50: dd:50:2a:9c:98:6c:0b:67:0f:48:06:2f:24:02:82:97:58:20: 37:04:c9:b4:bb:6a:b2:35:60:ff:4b:c9:2e:2f:a0:b1:41:ec: e9:19:23:3d:a8:db:60:2b:75:0c:e8:58:51:05:51:a6:11:90: 32:8d:66:dc:6d:b7:29:3e:57:8d:34:a0:44:8d:ae:01:a8:45: 97:08:47:ad:aa:e5:77:40:70:42:35:8f:cf:c4:6a:58:a6:19: ee:83:9b:a7:98:9e:7e:7b:26:e7:e8:1d:9a:77:eb:9f:de:13: 58:db:49:ac:27:f4:d5:54:bb:d4:cc:3b:78:3b:d2:40:9b:70: 6e:ea:8e:bf:81:aa:56:60:ce:54:cf:cb:ba:f2:0e:46:53:41: ab:c5:10:9f:4d:46:db:b6:cb:a9:f1:e1:62:46:cb:cc:6d:3c: eb:ad:34:aa:57:7b:a3:5d:f2:5c:61:d9:ff:e0:84:f3:90:c6: 64:f5:75:e7:9f:38:ac:5e:6c:8c:0c:e8:b8:07:0b:29:07:79: b6:00:ad:4f:21:98:40:02:e6:30:1a:dc:d1:9b:e0:22:2c:61: 2a:d2:c8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUaFM9Kx//w20IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NDAzNzhkYzYtYmE5NC00YjA2LWFjZmEtYjU5MTJlYWU0NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWqP6YDy+01kfbEuFJZMVqqCFuOpo2fk+VVY cIIywtErSBJ1F9l2NnfDyfMaBGjo7P0/aUcJwX2pe0gjRvmu2J77aT+kd6IXlb15 Rt/P+2Ic6GYfmNzyLEZSp8Vq27vxfgE3PPltr7hG6P+Q9dvMQKAhXsgdEOm9RW3Q vsLRaRJ03TawCeuEo/8E+4Mc3aNERD1YSBevZWbtLIP0TnB8NSa19KdBl8J87APA 4X7SivQBnHe43t88SzCctcgCaxbNJB+HDPhjuYj7Vix+x3dGJrFwBu06fQF/gSSb /GlH0ZwWV2XS43hDK9uyB9TeVLJdHI2SU5L7Ay42COenPhQHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmu0RjnthHC2PkmLMALWw+Ms4itMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQxN2M5ZTgtY2M4MC0z ZTQ3LWJlNTctMWEyZGNhZGU4NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUIzUrvMcpld7+Hbfn/9+B7Aj5TVpRRtkIZw3h7OMV0amKfUN1QKpyY bAtnD0gGLyQCgpdYIDcEybS7arI1YP9LyS4voLFB7OkZIz2o22ArdQzoWFEFUaYR kDKNZtxttyk+V400oESNrgGoRZcIR62q5XdAcEI1j8/EalimGe6Dm6eYnn57Jufo HZp365/eE1jbSawn9NVUu9TMO3g70kCbcG7qjr+BqlZgzlTPy7ryDkZTQavFEJ9N Rtu2y6nx4WJGy8xtPOutNKpXe6Nd8lxh2f/ghPOQxmT1deefOKxebIwM6LgHCykH ebYArU8hmEAC5jAa3NGb4CIsYSrSyI4= -----END CERTIFICATE-----Generated at Tue Sep 22 11:41:43 2026 by rpki-client