$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa File: 08d60cb5-51f2-3446-9623-db845602f862.roa (raw, json) Hash identifier: ehxsFHh7dgIegEIlYFqD8+FzhbjDMCAMh+8rv8Q7s1w= Subject key identifier: 4F:34:F2:E3:96:91:54:31:54:27:FE:0E:E0:EC:F6:A2:FE:8D:06:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BF7E44BF5F01F4C0DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.58.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:bf:7e:44:bf:5f:01:f4:c0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6cbe4a3a-c313-4e97-a7f3-457772967b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:d6:c8:0d:cb:8a:25:06:74:70:0f:4f:91: d8:66:b2:fc:d4:ab:e8:1c:a6:4f:e9:e7:9b:36:e7: 50:e4:80:2a:94:9b:14:92:65:24:b3:1a:80:da:cf: 57:a1:23:06:10:34:22:f8:0e:c0:98:ec:0b:f9:07: ea:fb:72:f8:f9:8d:e8:9d:2f:7a:26:2f:28:81:72: f3:41:96:ff:6b:59:4c:a7:16:e1:62:3c:e8:a7:d2: 6b:24:b7:2c:84:6d:85:d3:5f:23:da:0e:42:a0:32: 94:bf:3e:25:a2:00:3c:64:24:37:4c:a1:eb:97:c6: aa:2d:4c:cc:6f:38:8d:33:ec:87:d1:79:e4:89:84: c5:a5:20:ab:69:5e:17:5b:f8:29:b6:73:54:74:2f: 2b:be:fc:65:fd:dd:30:e4:b3:e5:df:b3:a1:2c:ee: b6:5f:cc:70:12:f2:c1:86:b4:52:c2:76:0d:d5:7e: 5f:02:b1:41:a0:12:bf:db:f7:75:a7:8a:c9:23:24: ca:ff:2e:17:f1:7c:ef:2c:7f:77:46:db:9f:db:cb: 98:9f:ab:7a:28:3f:53:20:17:cd:21:7c:f4:59:85: 14:6c:5b:d9:2e:fb:7f:e1:7d:5a:e2:bc:f2:93:e7: 25:ca:62:a3:28:32:fd:6f:f9:b1:66:f3:a1:4d:7b: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:F2:E3:96:91:54:31:54:27:FE:0E:E0:EC:F6:A2:FE:8D:06:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d60cb5-51f2-3446-9623-db845602f862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e1:a4:36:a9:e2:62:44:70:38:22:cc:42:64:64:9e:c5:bf: 4f:2f:ba:d3:68:82:a5:78:fa:b6:0d:7f:fe:62:f7:34:80:90: d0:c6:e0:21:8f:a8:84:9e:69:33:34:40:63:98:26:47:06:98: 8b:08:fe:6b:54:85:f0:e0:4f:80:42:ac:6e:92:d8:1a:25:39: 5f:ea:58:56:97:61:ab:37:9e:fa:f7:5e:25:97:f2:96:aa:b5: b5:0e:1b:11:60:14:de:d3:87:d0:23:29:71:16:c0:0b:92:9e: 9b:02:4d:6e:da:90:c1:6d:bc:d9:51:a7:f4:b3:9f:d6:f3:aa: 74:43:05:81:90:2a:be:02:14:27:1a:33:dc:e6:cc:d3:4c:53: 88:5c:dd:20:2d:60:92:c2:bb:7a:0b:53:51:eb:77:69:c7:a5: 8a:66:78:66:84:82:2f:c4:cf:23:68:f1:37:8b:d1:f6:cb:7e: 95:40:b5:42:80:6e:48:9d:39:9b:87:43:b4:d7:52:c3:72:81: 76:1a:e0:3c:bf:d6:66:81:18:b3:06:b7:5e:41:28:6a:51:ca: dd:c2:71:e3:31:6d:a3:07:6d:ef:55:e3:b0:b7:74:20:4d:53: 52:34:0a:95:00:8d:33:79:71:2f:64:ca:3d:5c:cd:eb:f2:24: 7c:89:e1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr9+RL9fAfTA3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NmNiZTRhM2EtYzMxMy00ZTk3LWE3ZjMtNDU3NzcyOTY3YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5PWyA3LiiUGdHAPT5HYZrL81KvoHKZP6eeb NudQ5IAqlJsUkmUksxqA2s9XoSMGEDQi+A7AmOwL+Qfq+3L4+Y3onS96Ji8ogXLz QZb/a1lMpxbhYjzop9JrJLcshG2F018j2g5CoDKUvz4logA8ZCQ3TKHrl8aqLUzM bziNM+yH0XnkiYTFpSCraV4XW/gptnNUdC8rvvxl/d0w5LPl37OhLO62X8xwEvLB hrRSwnYN1X5fArFBoBK/2/d1p4rJIyTK/y4X8XzvLH93Rtuf28uYn6t6KD9TIBfN IXz0WYUUbFvZLvt/4X1a4rzyk+clymKjKDL9b/mxZvOhTXvgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE808uOWkVQxVCf+DuDs9qL+jQZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhkNjBjYjUtNTFmMi0z NDQ2LTk2MjMtZGI4NDU2MDJmODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDhpDap4mJEcDgizEJkZJ7Fv08vutNogqV4+rYNf/5i9zSAkNDG4CGP qISeaTM0QGOYJkcGmIsI/mtUhfDgT4BCrG6S2BolOV/qWFaXYas3nvr3XiWX8paq tbUOGxFgFN7Th9AjKXEWwAuSnpsCTW7akMFtvNlRp/Szn9bzqnRDBYGQKr4CFCca M9zmzNNMU4hc3SAtYJLCu3oLU1Hrd2nHpYpmeGaEgi/EzyNo8TeL0fbLfpVAtUKA bkidOZuHQ7TXUsNygXYa4Dy/1maBGLMGt15BKGpRyt3CceMxbaMHbe9V47C3dCBN U1I0CpUAjTN5cS9kyj1czevyJHyJ4aA= -----END CERTIFICATE-----Generated at Sat Sep 26 02:27:03 2026 by rpki-client