$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/426c8c96-5059-3b9c-bf4f-e5ff53948016.roa File: 426c8c96-5059-3b9c-bf4f-e5ff53948016.roa (raw, json) Hash identifier: feYjoObmqdWmoTh0hPhv0ltVOg9aLfIbg57rqfWo3vk= Subject key identifier: 82:41:00:EF:D8:3A:A6:A8:6F:70:4E:8A:61:12:E0:81:51:95:92:0E Certificate issuer: /CN=095a022e-c3bc-4521-bb1e-c3f74b801b52 Certificate serial: 010D0C9F4328584F4916A2A78203E6861A9A6800 Authority key identifier: 4A:B4:1B:C1:A1:6C:BF:D1:7C:31:02:D1:3D:7A:0B:3E:F7:BF:5A:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/426c8c96-5059-3b9c-bf4f-e5ff53948016.roa Signing time: Thu 24 Sep 2026 21:55:04 +0000 ROA not before: Thu 24 Sep 2026 21:55:04 +0000 ROA not after: Wed 23 Dec 2026 22:55:04 +0000 asID: 40038 IP address blocks: 68.170.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/095a022e-c3bc-4521-bb1e-c3f74b801b52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/095a022e-c3bc-4521-bb1e-c3f74b801b52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:16:a2:a7:82:03:e6:86:1a:9a:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095a022e-c3bc-4521-bb1e-c3f74b801b52 Validity Not Before: Sep 24 21:55:04 2026 GMT Not After : Dec 23 22:55:04 2026 GMT Subject: CN=f8a0deea-41fb-485a-bf10-5a420475c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c0:05:d8:b9:c7:a6:94:b6:61:72:b8:d4:1e: 80:2b:c3:8f:58:25:28:ea:0c:61:8a:e8:3c:ab:36: 0d:87:5a:9f:8d:a7:c4:f8:a9:b6:05:6c:2a:48:36: b3:f3:ff:65:0b:8a:97:e0:19:2a:2c:2a:f6:78:af: f7:27:ed:2f:e4:98:21:05:e2:57:9a:a6:a6:54:22: 71:d5:22:cf:ec:a9:a7:04:79:49:0e:2f:9c:73:ac: 7b:fc:5c:17:79:a2:81:59:ec:07:c8:7c:ee:22:e5: 97:9b:b8:eb:ec:ec:aa:de:66:a8:78:7a:e5:df:03: 9d:ff:df:5a:4c:24:4f:5d:c5:4f:02:12:67:fa:43: 4b:63:66:5d:62:fd:e2:5c:c7:92:80:a0:67:71:7b: fb:3e:a5:c2:e3:8e:d6:d7:29:30:89:a6:ae:50:5a: ff:0a:6c:e6:91:4e:32:78:7a:d1:81:02:47:a2:22: fb:15:59:39:0f:bb:8b:0c:e0:e8:0f:6f:ff:3b:92: d0:05:0a:6b:b1:cf:07:cd:eb:65:4a:35:8d:a8:1a: c9:50:5e:cc:ea:5e:71:31:30:03:f7:13:a9:a2:f1: a5:03:68:e3:26:a6:4a:59:e4:ad:06:b0:ad:3d:16: 89:fc:5a:67:1e:f1:c0:dd:e3:9b:45:8d:8e:8e:da: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:00:EF:D8:3A:A6:A8:6F:70:4E:8A:61:12:E0:81:51:95:92:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/426c8c96-5059-3b9c-bf4f-e5ff53948016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52/095a022e-c3bc-4521-bb1e-c3f74b801b52.crl X509v3 Authority Key Identifier: keyid:4A:B4:1B:C1:A1:6C:BF:D1:7C:31:02:D1:3D:7A:0B:3E:F7:BF:5A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/095a022e-c3bc-4521-bb1e-c3f74b801b52.cer sbgp-ipAddrBlock: critical IPv4: 68.170.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:28:5b:5e:33:b8:94:44:76:6a:a4:28:5c:c7:43:ba:a6:e3: 60:6d:98:0e:ae:47:15:5a:3d:dd:16:74:9d:45:3c:d2:04:9e: 9f:42:b3:77:2f:d6:2c:7e:a2:83:d8:06:95:39:61:7f:fd:2f: 0e:9d:46:d9:1e:d0:16:86:2e:05:49:c7:f1:d6:7c:d4:c6:82: 21:49:31:be:8c:a3:af:33:9f:79:c5:d2:2c:33:7c:64:2b:17: c4:2a:d1:cd:6e:b9:69:76:5f:77:54:e1:39:52:fb:fe:de:63: 88:4f:03:b3:05:6b:3c:db:83:2f:a9:21:e5:9b:c7:52:81:8e: 57:44:5a:93:10:90:0a:ba:f9:85:88:0f:d1:4b:ea:bf:a6:49: d0:23:b8:9d:a2:e1:0a:ba:dd:da:dd:cc:ee:2d:30:5a:41:64: c9:3c:16:ab:b1:4b:3e:8d:a7:34:c5:5d:a8:df:c7:de:f4:20: b5:88:50:10:79:b3:e4:b6:f9:21:9b:22:79:ab:6e:8a:48:0d: 61:2f:53:9c:26:da:d4:6c:85:74:95:44:31:cb:d6:70:06:f5: db:e4:c2:6f:ca:cb:7e:c9:62:24:01:b4:ba:21:f3:c8:c1:0c: 21:81:10:e9:1d:64:37:c4:41:03:ab:91:ed:1a:48:42:f9:ec: e7:73:69:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JFqKnggPmhhqaaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk1YTAyMmUtYzNiYy00NTIxLWJiMWUtYzNmNzRiODAx YjUyMB4XDTI2MDkyNDIxNTUwNFoXDTI2MTIyMzIyNTUwNFowLzEtMCsGA1UEAxMk ZjhhMGRlZWEtNDFmYi00ODVhLWJmMTAtNWE0MjA0NzVjNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksAF2LnHppS2YXK41B6AK8OPWCUo6gxhiug8 qzYNh1qfjafE+Km2BWwqSDaz8/9lC4qX4BkqLCr2eK/3J+0v5JghBeJXmqamVCJx 1SLP7KmnBHlJDi+cc6x7/FwXeaKBWewHyHzuIuWXm7jr7Oyq3maoeHrl3wOd/99a TCRPXcVPAhJn+kNLY2ZdYv3iXMeSgKBncXv7PqXC447W1ykwiaauUFr/CmzmkU4y eHrRgQJHoiL7FVk5D7uLDODoD2//O5LQBQprsc8HzetlSjWNqBrJUF7M6l5xMTAD 9xOpovGlA2jjJqZKWeStBrCtPRaJ/FpnHvHA3eObRY2OjtqlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJBAO/YOqaob3BOimES4IFRlZIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wOTVh MDIyZS1jM2JjLTQ1MjEtYmIxZS1jM2Y3NGI4MDFiNTIvNDI2YzhjOTYtNTA1OS0z YjljLWJmNGYtZTVmZjUzOTQ4MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDk1YTAyMmUtYzNiYy00NTIxLWJi MWUtYzNmNzRiODAxYjUyLzA5NWEwMjJlLWMzYmMtNDUyMS1iYjFlLWMzZjc0Yjgw MWI1Mi5jcmwwHwYDVR0jBBgwFoAUSrQbwaFsv9F8MQLRPXoLPve/WkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wOTVhMDIyZS1jM2JjLTQ1MjEtYmIxZS1jM2Y3 NGI4MDFiNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0oW14zuJREdmqkKFzHQ7qm42BtmA6uRxVaPd0WdJ1FPNIEnp9Cs3cv 1ix+ooPYBpU5YX/9Lw6dRtke0BaGLgVJx/HWfNTGgiFJMb6Mo68zn3nF0iwzfGQr F8Qq0c1uuWl2X3dU4TlS+/7eY4hPA7MFazzbgy+pIeWbx1KBjldEWpMQkAq6+YWI D9FL6r+mSdAjuJ2i4Qq63drdzO4tMFpBZMk8FquxSz6NpzTFXajfx970ILWIUBB5 s+S2+SGbInmrbopIDWEvU5wm2tRshXSVRDHL1nAG9dvkwm/Ky37JYiQBtLoh88jB DCGBEOkdZDfEQQOrke0aSEL57OdzaTU= -----END CERTIFICATE-----Generated at Tue Sep 29 02:00:24 2026 by rpki-client