$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa File: 11e64435-46b6-3862-bbed-e6b28cc92196.roa (raw, json) Hash identifier: IjlTUyC+zmMc0oxQTJ5rRQG4ONrI6aLVlQsgMqtZQEs= Subject key identifier: 05:E5:12:F7:4C:1B:56:59:9D:FB:C6:B0:A8:66:11:D0:9F:D8:5D:3F Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F1467AC544AB718A5570F0C98 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 394654 IP address blocks: 68.209.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ac:54:4a:b7:18:a5:57:0f:0c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a1b256f9-0031-48f5-a205-527eca0280aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:a9:58:7d:fd:9d:5e:7e:bd:fb:95:56:56: 9f:6f:49:01:27:ab:87:5c:8c:65:f6:6d:19:a0:af: c7:fa:a1:f6:52:92:9d:46:a4:81:93:b3:f9:33:23: 63:77:7c:dd:c1:2e:22:40:d8:9c:24:69:b7:df:63: e2:9c:f6:28:54:86:86:38:c9:de:37:52:eb:ad:fe: 7f:fa:72:95:01:c2:00:d2:9c:d5:0c:ef:f6:17:46: b0:ce:cf:83:98:85:0b:34:7d:cf:2f:15:28:c9:ba: 12:f9:67:38:77:43:2f:1c:5d:36:da:c1:53:7a:84: 7f:be:33:41:47:cf:c5:c1:6b:21:b5:05:46:55:07: c6:c1:f6:ea:60:e3:f2:69:8c:54:05:03:92:8c:c8: eb:fb:e5:84:b9:75:ea:6c:2f:2a:f6:4d:78:0c:3d: 5c:3e:08:87:85:64:8c:17:6c:df:61:c1:32:6a:6f: 26:c3:14:29:d9:02:fb:70:50:31:da:e0:79:55:dc: 52:f4:5e:40:48:f4:ac:7a:ed:0c:a6:77:74:a0:ae: c0:29:bf:3b:48:b7:e2:f7:20:78:8b:a3:dd:2d:95: 15:2f:21:5c:49:2f:25:88:91:54:02:d7:f4:62:00: d2:54:e6:23:ea:11:50:7f:87:2a:a2:6d:de:25:c1: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E5:12:F7:4C:1B:56:59:9D:FB:C6:B0:A8:66:11:D0:9F:D8:5D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 68.209.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:05:cd:95:f4:f4:9c:39:92:ca:23:d9:11:62:28:eb:ce:14: 01:43:31:b9:45:64:02:df:69:80:e9:da:10:bf:90:d3:ce:3d: 99:75:52:00:bf:f3:06:69:f8:d8:0f:d0:74:20:e0:9b:be:e8: 38:fc:19:89:80:38:8f:85:98:2d:66:d7:f1:d3:40:e2:6b:d3: a9:db:eb:19:6f:75:48:cb:a2:a5:cf:a6:17:21:32:4e:71:60: 34:ae:34:d4:fa:77:5f:28:f0:cd:9b:f9:90:99:aa:14:1c:8a: 6c:fd:d0:c3:16:fa:62:d0:61:ec:ce:f7:e2:41:3b:f8:db:f1: 73:07:6a:0d:02:6b:d5:26:ad:5b:f7:f5:b3:90:79:21:af:66: 92:50:32:f1:d6:a7:16:d6:68:b9:50:ec:72:f5:c7:16:9e:a1: 87:c3:96:37:af:51:99:01:e2:d4:e3:07:f7:e1:86:b6:08:37: 14:d1:8a:f0:7f:61:24:cb:a9:cd:8d:be:bc:42:71:81:aa:8e: e0:21:8e:51:43:8a:7c:17:a4:c7:6f:88:f4:dd:3a:db:04:4b: 94:89:fb:28:16:d3:34:20:99:f8:bb:72:22:db:ec:9e:e7:3a: 24:e1:7c:49:2b:93:36:ec:14:e2:e2:b8:c7:3a:f9:bd:4b:d2: b5:ba:1d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6xUSrcYpVcPDJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTFiMjU2ZjktMDAzMS00OGY1LWEyMDUtNTI3ZWNhMDI4MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglWpWH39nV5+vfuVVlafb0kBJ6uHXIxl9m0Z oK/H+qH2UpKdRqSBk7P5MyNjd3zdwS4iQNicJGm332PinPYoVIaGOMneN1Lrrf5/ +nKVAcIA0pzVDO/2F0awzs+DmIULNH3PLxUoyboS+Wc4d0MvHF022sFTeoR/vjNB R8/FwWshtQVGVQfGwfbqYOPyaYxUBQOSjMjr++WEuXXqbC8q9k14DD1cPgiHhWSM F2zfYcEyam8mwxQp2QL7cFAx2uB5VdxS9F5ASPSseu0Mpnd0oK7AKb87SLfi9yB4 i6PdLZUVLyFcSS8liJFUAtf0YgDSVOYj6hFQf4cqom3eJcFiRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXlEvdMG1ZZnfvGsKhmEdCf2F0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTFlNjQ0MzUtNDZiNi0z ODYyLWJiZWQtZTZiMjhjYzkyMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERNEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsFzZX09Jw5ksoj2RFiKOvOFAFDMblFZALfaYDp2hC/kNPOPZl1UgC/ 8wZp+NgP0HQg4Ju+6Dj8GYmAOI+FmC1m1/HTQOJr06nb6xlvdUjLoqXPphchMk5x YDSuNNT6d18o8M2b+ZCZqhQcimz90MMW+mLQYezO9+JBO/jb8XMHag0Ca9UmrVv3 9bOQeSGvZpJQMvHWpxbWaLlQ7HL1xxaeoYfDljevUZkB4tTjB/fhhrYINxTRivB/ YSTLqc2NvrxCcYGqjuAhjlFDinwXpMdviPTdOtsES5SJ+ygW0zQgmfi7ciLb7J7n OiThfEkrkzbsFOLiuMc6+b1L0rW6HbY= -----END CERTIFICATE-----Generated at Sat Sep 26 16:09:19 2026 by rpki-client