$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa File: 65ede538-d23e-3756-95dc-e6dbd41373e3.roa (raw, json) Hash identifier: GFi6CruckCA2cfW9vm0bzUDx4v71O6tX0ZWsPz5ofhk= Subject key identifier: 3A:74:44:B4:73:28:2D:06:08:92:17:2C:56:30:A6:D7:E2:C0:67:AA Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584E9A7FB94B8694CC94F2313C00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 68.64.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:b9:4b:86:94:cc:94:f2:31:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=ec698ae3-2381-44fc-b264-83ca35fba179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:51:5a:99:8f:ae:6d:ab:65:c2:15:ac:53: 2c:db:77:cc:89:6c:e6:aa:7a:64:ad:88:c1:78:53: 77:4c:db:30:a2:94:06:24:74:db:b2:ee:82:11:91: bf:c8:83:90:17:13:e0:47:f0:ca:68:f1:97:77:76: 5b:f4:08:0f:93:a3:73:fa:b8:cb:b5:cb:0b:3e:1f: c0:e2:50:56:0d:2d:68:b3:5a:28:04:fd:b3:cd:13: c2:ce:88:dc:ef:67:67:42:cb:db:d5:d6:2c:a1:96: a2:0d:7b:9c:6d:44:37:6b:a8:82:72:71:c1:9d:9d: 13:76:9d:6d:be:43:84:4b:c2:e9:25:3c:6d:8b:14: 66:bc:b5:25:8f:ba:5b:bd:33:62:6a:61:7d:b4:e7: b8:10:ff:b0:0a:ff:be:08:19:a6:41:a2:c8:9c:b2: cf:b7:6a:cf:bd:86:d6:db:cd:80:e1:0f:21:72:14: 21:45:c2:34:74:d5:54:fa:79:87:36:10:a2:49:14: 04:ab:52:c8:7d:3c:96:0f:7a:50:85:a6:72:7b:74: 3d:09:78:77:e9:89:71:d9:2f:d8:20:ca:95:9d:69: f7:b4:c3:1d:bb:81:c9:fb:14:df:89:8b:3a:ec:b1: 2f:3f:6d:21:08:35:52:33:c2:76:4e:34:8c:18:95: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:74:44:B4:73:28:2D:06:08:92:17:2C:56:30:A6:D7:E2:C0:67:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 68.64.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:95:17:bb:ee:5b:2f:39:42:58:72:53:f3:c4:f3:ed:54:90: 6e:80:62:16:50:8d:95:1b:0b:d0:38:27:74:8a:b6:7d:46:52: 22:0d:56:48:3b:74:b1:56:bb:f7:03:ca:21:4a:a7:22:e8:24: 91:4c:ed:87:11:32:22:08:aa:81:14:c1:a0:3a:6f:53:9b:9b: 4e:74:cc:cf:0a:28:40:4a:a1:82:9c:73:2f:ac:d7:f5:e7:b7: f7:a8:ff:f0:b3:67:44:ff:5b:3e:4d:15:4f:5a:f1:d7:3d:83: 41:80:f1:07:36:b1:c2:d0:b6:96:7c:5d:e4:af:98:9c:9d:60: 0b:f0:7f:7f:dc:b2:b8:24:66:8b:14:bc:a6:d3:0c:4e:68:c4: 0c:9d:bb:91:16:42:56:53:7c:11:56:4f:e5:c8:32:c4:2c:30: db:a2:7c:af:a7:a9:d3:2f:00:fd:5a:5a:34:cc:c5:51:05:01: 50:4f:99:1b:d9:17:87:08:4a:e9:57:5a:c3:09:f1:c8:45:91: af:ed:46:cb:b3:16:07:62:00:16:8d:6c:75:4f:94:cd:ce:7a: a5:c8:f7:6d:75:54:c2:57:f9:7c:be:2d:ab:cc:30:1a:11:80: 79:eb:a0:97:54:99:15:6c:98:8c:be:0d:89:2a:3c:55:f1:ad: 80:ed:55:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7lLhpTMlPIxPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZWM2OThhZTMtMjM4MS00NGZjLWIyNjQtODNjYTM1ZmJhMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jFRWpmPrm2rZcIVrFMs23fMiWzmqnpkrYjB eFN3TNswopQGJHTbsu6CEZG/yIOQFxPgR/DKaPGXd3Zb9AgPk6Nz+rjLtcsLPh/A 4lBWDS1os1ooBP2zzRPCzojc72dnQsvb1dYsoZaiDXucbUQ3a6iCcnHBnZ0Tdp1t vkOES8LpJTxtixRmvLUlj7pbvTNiamF9tOe4EP+wCv++CBmmQaLInLLPt2rPvYbW 282A4Q8hchQhRcI0dNVU+nmHNhCiSRQEq1LIfTyWD3pQhaZye3Q9CXh36Ylx2S/Y IMqVnWn3tMMdu4HJ+xTfiYs67LEvP20hCDVSM8J2TjSMGJUV/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp0RLRzKC0GCJIXLFYwptfiwGeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNjVlZGU1MzgtZDIzZS0z NzU2LTk1ZGMtZTZkYmQ0MTM3M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyVF7vuWy85QlhyU/PE8+1UkG6AYhZQjZUbC9A4J3SKtn1GUiINVkg7 dLFWu/cDyiFKpyLoJJFM7YcRMiIIqoEUwaA6b1Obm050zM8KKEBKoYKccy+s1/Xn t/eo//CzZ0T/Wz5NFU9a8dc9g0GA8Qc2scLQtpZ8XeSvmJydYAvwf3/csrgkZosU vKbTDE5oxAydu5EWQlZTfBFWT+XIMsQsMNuifK+nqdMvAP1aWjTMxVEFAVBPmRvZ F4cISulXWsMJ8chFka/tRsuzFgdiABaNbHVPlM3OeqXI9211VMJX+Xy+LavMMBoR gHnroJdUmRVsmIy+DYkqPFXxrYDtVes= -----END CERTIFICATE-----Generated at Wed Jul 29 10:11:47 2026 by rpki-client