$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa File: d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa (raw, json) Hash identifier: B99/LrnppHgC2LZiR3+jTgkLrjYHAPAt696CONLG7I0= Subject key identifier: 49:0A:66:D1:D5:7B:C4:46:42:31:44:6B:41:EA:D1:B1:F8:26:92:98 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A7A61A501C1AA4F22B1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 68.238.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:7a:61:a5:01:c1:aa:4f:22:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=a4d855f1-271b-4070-a3fe-39375ce2bda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:57:7f:fb:da:bd:a4:d5:92:5d:3a:1b:9d: 33:9b:a8:f6:fb:a8:78:65:1a:99:db:65:50:f1:59: 4b:47:6c:f8:a8:3e:c5:d9:ad:8d:60:27:55:ec:b7: 69:a4:01:c7:f9:ce:ac:90:e7:ba:ba:4d:c1:c5:28: b2:4a:6e:d9:9c:9a:d4:ad:1d:e9:bc:96:37:80:4c: 8b:f3:e8:20:ba:21:d4:89:96:dc:e5:d4:c0:76:68: f2:ab:d6:39:e2:0c:b0:13:3d:6a:3d:5e:36:60:8b: d6:33:8f:fb:3f:15:59:21:e0:60:d9:13:04:f4:a1: 09:96:46:91:b4:89:60:5d:5a:12:4f:29:e7:cb:0a: 70:af:a9:16:b4:b7:a8:e6:27:f9:87:35:c5:d2:f0: 0b:1d:85:9d:25:c5:65:ad:48:86:50:b3:f2:d5:d9: 7b:19:16:34:f0:ab:1a:51:17:bf:8c:4a:c7:ff:87: b7:3d:d7:90:fe:f4:50:59:3b:5f:09:51:29:5a:04: 50:71:75:01:19:57:f4:b7:6f:f6:a8:87:ca:ae:27: 1d:77:c1:99:ed:ee:44:8a:b9:79:03:60:86:d6:c7: 0b:4f:09:cc:81:e6:81:42:43:9f:94:34:8a:d2:30: 3f:4a:76:e3:9e:bc:5c:c6:ff:6b:fd:65:25:37:8b: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0A:66:D1:D5:7B:C4:46:42:31:44:6B:41:EA:D1:B1:F8:26:92:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8139d4e-f0c2-3302-9f5c-0ab8e3892d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:97:dc:36:2c:a2:80:f1:9b:dd:08:a3:0e:21:5c:7b:96:93: 28:71:e8:f5:42:92:47:0a:76:67:4d:b8:43:88:52:7f:90:62: 92:f5:90:8c:04:76:2f:7d:a6:0c:2d:ae:8e:e6:60:68:07:e3: 6b:62:bf:f5:54:ca:26:ca:ef:a5:fc:d0:3d:cb:88:78:6c:5c: ef:1a:a5:d8:ae:bb:3d:e6:86:80:e1:0c:54:ef:25:3d:40:4d: 58:85:52:00:51:cf:a2:04:23:15:79:a7:7e:33:3f:96:2f:37: e8:29:df:ff:26:ce:1e:fa:4e:3d:48:70:74:9a:02:b7:f7:32: 0a:76:c2:94:98:30:72:a6:3c:48:b7:08:f6:d7:da:83:4a:2a: 59:6b:a3:86:95:19:1d:d8:b5:e8:e4:d6:06:e5:25:8a:b5:7c: 12:07:12:0e:02:af:7c:c9:20:d5:99:3e:b9:43:5a:04:e7:5b: 42:ad:6d:b7:7c:20:ee:b3:ff:14:12:95:cb:b9:1f:9c:dd:e1: c6:72:a0:7b:91:62:fa:f9:6d:0f:2a:cc:1c:d3:3b:5a:0f:05: 88:24:78:81:e1:b5:ea:ef:c2:7b:37:4c:2b:43:cf:b0:e3:c6: 81:54:46:93:75:08:43:ef:c1:6b:7a:db:0e:68:0d:84:58:fb: b0:17:0b:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnphpQHBqk8iscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YTRkODU1ZjEtMjcxYi00MDcwLWEzZmUtMzkzNzVjZTJiZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9Xf/vavaTVkl06G50zm6j2+6h4ZRqZ22VQ 8VlLR2z4qD7F2a2NYCdV7LdppAHH+c6skOe6uk3BxSiySm7ZnJrUrR3pvJY3gEyL 8+gguiHUiZbc5dTAdmjyq9Y54gywEz1qPV42YIvWM4/7PxVZIeBg2RME9KEJlkaR tIlgXVoSTynnywpwr6kWtLeo5if5hzXF0vALHYWdJcVlrUiGULPy1dl7GRY08Ksa URe/jErH/4e3PdeQ/vRQWTtfCVEpWgRQcXUBGVf0t2/2qIfKricdd8GZ7e5Eirl5 A2CG1scLTwnMgeaBQkOflDSK0jA/Snbjnrxcxv9r/WUlN4vLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkKZtHVe8RGQjFEa0Hq0bH4JpKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDgxMzlkNGUtZjBjMi0z MzAyLTlmNWMtMGFiOGUzODkyZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARO5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaX3DYsooDxm90Iow4hXHuWkyhx6PVCkkcKdmdNuEOIUn+QYpL1kIwE di99pgwtro7mYGgH42tiv/VUyibK76X80D3LiHhsXO8apdiuuz3mhoDhDFTvJT1A TViFUgBRz6IEIxV5p34zP5YvN+gp3/8mzh76Tj1IcHSaArf3Mgp2wpSYMHKmPEi3 CPbX2oNKKllro4aVGR3Ytejk1gblJYq1fBIHEg4Cr3zJINWZPrlDWgTnW0Ktbbd8 IO6z/xQSlcu5H5zd4cZyoHuRYvr5bQ8qzBzTO1oPBYgkeIHhtervwns3TCtDz7Dj xoFURpN1CEPvwWt62w5oDYRY+7AXCxU= -----END CERTIFICATE-----Generated at Wed Jul 29 06:28:33 2026 by rpki-client