$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa File: 68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json) Hash identifier: ZnGHLxP96b0J/BYgzIZtuJFpoXLWilO7Mdfk+vJUQhM= Subject key identifier: FB:83:B0:4C:B4:C6:99:5E:25:BE:64:16:87:74:7B:3A:C2:61:9D:CD Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F4328584F49760A29C3E57B47712EFFF8 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396032 IP address blocks: 64.38.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:0a:29:c3:e5:7b:47:71:2e:ff:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e508c4a9-5cd8-47de-b4c8-28a6720e1fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:36:16:f4:e4:09:82:3c:6c:67:0a:0f:07: 80:a3:d7:6a:c1:7e:c5:c4:21:c6:09:af:0b:91:cb: d8:f8:89:4b:75:02:3f:2d:25:14:ef:86:3a:e7:22: c0:28:0d:92:0d:a8:2c:2f:18:00:84:dc:25:92:76: 02:e8:ad:e1:81:b9:92:10:ef:d4:45:ae:42:a5:96: d4:62:f6:d4:30:24:db:6e:06:88:4d:bd:ff:76:fc: ec:2f:f4:c0:13:66:be:5a:2e:6d:55:d9:f1:c0:dc: 76:c6:1b:68:08:6c:67:db:64:1f:d5:41:68:4b:e6: fd:a4:00:02:30:26:89:19:36:49:bb:dd:9a:d9:b0: a4:d0:8f:80:eb:fc:ab:28:fa:e4:8f:36:76:e5:0f: 08:d5:ee:1d:62:b4:17:e0:b0:30:2a:d1:49:12:f7: 66:da:8b:08:aa:af:b2:ce:02:3c:35:49:26:ea:81: a3:43:52:c4:b4:33:98:56:ac:ac:60:53:3f:d4:21: f6:e2:07:06:71:2b:e9:b8:1f:5b:8e:c7:b9:96:97: 36:3f:90:8c:c0:9d:91:3c:97:19:37:b1:69:db:df: 26:07:e9:d9:63:9e:c0:92:08:0f:a8:88:6a:83:7e: 0a:ea:27:50:5f:01:e8:24:fe:2f:a5:f0:ef:43:b9: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:B0:4C:B4:C6:99:5E:25:BE:64:16:87:74:7B:3A:C2:61:9D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 64.38.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:89:26:46:6b:fe:88:0c:e0:67:5f:d6:06:e7:1c:e1:05:5e: ab:cc:06:28:3a:12:5d:86:43:12:cd:4f:2b:9a:77:ca:1c:cd: 85:34:3e:d9:0d:0b:33:19:80:c0:19:08:1b:01:da:94:e3:9c: 78:e9:18:c5:1b:dc:dd:9e:54:4c:2e:70:0c:7c:0e:8e:40:ac: 68:d0:92:8d:a7:70:63:8e:3f:ce:05:9d:7f:fb:9a:24:be:60: 34:a0:bc:40:13:f1:59:a3:ec:6b:f1:3f:0b:d2:cc:07:bd:41: 49:80:43:1b:dc:33:a6:63:57:b8:36:9b:d9:6d:2d:7c:28:5d: 95:8c:ef:e6:40:0a:46:19:18:9b:4f:71:ca:4a:c2:53:56:fc: dc:98:f6:12:c6:1d:31:dd:9a:5c:5b:28:83:63:77:d0:fe:42: 51:5f:c2:e1:d7:43:5d:35:da:c7:e3:bf:9b:fe:ff:ba:b9:06: 99:ae:5b:df:bd:80:66:4a:f8:49:ab:61:57:74:6d:d0:f2:31: ba:5c:07:d3:06:69:db:43:c1:90:95:91:64:88:a5:86:67:84: 6f:9d:36:ac:96:e4:cc:60:47:e5:ee:2f:58:9c:b8:e3:ef:92: c5:92:80:2e:81:b1:31:6c:7d:cf:b3:4c:44:df:b8:d7:74:56: 91:23:5f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdgopw+V7R3Eu//gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTUwOGM0YTktNWNkOC00N2RlLWI0YzgtMjhhNjcyMGUxZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNo2FvTkCYI8bGcKDweAo9dqwX7FxCHGCa8L kcvY+IlLdQI/LSUU74Y65yLAKA2SDagsLxgAhNwlknYC6K3hgbmSEO/URa5CpZbU YvbUMCTbbgaITb3/dvzsL/TAE2a+Wi5tVdnxwNx2xhtoCGxn22Qf1UFoS+b9pAAC MCaJGTZJu92a2bCk0I+A6/yrKPrkjzZ25Q8I1e4dYrQX4LAwKtFJEvdm2osIqq+y zgI8NUkm6oGjQ1LEtDOYVqysYFM/1CH24gcGcSvpuB9bjse5lpc2P5CMwJ2RPJcZ N7Fp298mB+nZY57AkggPqIhqg34K6idQXwHoJP4vpfDvQ7kI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuDsEy0xpleJb5kFod0ezrCYZ3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvNjhkYzY4YWUtYjZjNC0z NzAxLWEyYWQtNjIwOThiMWYxMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCJJkZr/ogM4Gdf1gbnHOEFXqvMBig6El2GQxLNTyuad8oczYU0PtkN CzMZgMAZCBsB2pTjnHjpGMUb3N2eVEwucAx8Do5ArGjQko2ncGOOP84FnX/7miS+ YDSgvEAT8Vmj7GvxPwvSzAe9QUmAQxvcM6ZjV7g2m9ltLXwoXZWM7+ZACkYZGJtP ccpKwlNW/NyY9hLGHTHdmlxbKINjd9D+QlFfwuHXQ1012sfjv5v+/7q5BpmuW9+9 gGZK+EmrYVd0bdDyMbpcB9MGadtDwZCVkWSIpYZnhG+dNqyW5MxgR+XuL1icuOPv ksWSgC6BsTFsfc+zTETfuNd0VpEjX7o= -----END CERTIFICATE-----Generated at Sat Sep 26 02:39:50 2026 by rpki-client