$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1748de6a-e784-3ed8-a589-cf7a91c2ffa0.roa File: 1748de6a-e784-3ed8-a589-cf7a91c2ffa0.roa (raw, json) Hash identifier: qawKEWT5FuDNKDnou5Rt5Tw3upknng+3ZTshFyvjAR8= Subject key identifier: C2:7E:03:47:57:5D:84:71:45:66:5A:89:E8:FE:B8:E9:E4:97:D3:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119F106175CD8A5C23DC7A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1748de6a-e784-3ed8-a589-cf7a91c2ffa0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 68.38.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:10:61:75:cd:8a:5c:23:dc:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=5397cefa-9b2b-48d8-a29d-8c275067f781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:90:88:df:ac:83:80:15:a7:96:45:b9:82:e6: 8d:f2:b1:66:e9:d9:9d:ef:dd:ac:03:20:be:6c:6e: a4:c6:08:bc:ef:0e:a7:b5:f8:fd:0e:e9:0a:de:b9: 70:a4:33:0d:0b:19:47:a0:14:75:50:ea:99:12:9c: a7:a5:16:3a:3e:39:42:07:69:79:cb:9d:57:82:fa: 9f:c8:48:04:2d:48:9b:8c:94:d9:32:0b:5c:c8:f2: 0d:06:89:16:f7:9d:33:ed:0c:66:d6:c1:78:46:60: 72:2f:b2:c9:5e:57:ec:10:0b:b1:ba:67:f0:0a:31: e9:a1:21:2d:32:a5:b4:ff:a6:f7:ed:5b:72:3e:f3: 81:51:36:ca:c3:86:79:d2:62:ec:83:a3:5d:62:8d: 16:b2:14:97:73:c2:ae:29:04:3a:8c:d3:dc:93:9c: cd:ef:d6:e2:be:30:6f:39:01:8d:6a:25:e2:7d:f6: 26:5d:10:47:49:69:99:99:58:ec:05:fa:58:bb:b1: e1:da:de:19:18:aa:56:e7:97:33:7a:45:22:58:f9: 8f:dd:89:df:ea:c4:58:d3:03:80:9a:27:5e:7d:7e: 33:24:76:92:a0:ab:eb:08:2a:64:a1:73:d2:65:11: 79:da:b7:e4:be:59:af:f9:36:c3:13:7e:93:cf:b7: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:03:47:57:5D:84:71:45:66:5A:89:E8:FE:B8:E9:E4:97:D3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1748de6a-e784-3ed8-a589-cf7a91c2ffa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fe:7d:28:5e:cd:ab:08:01:45:e4:d1:c5:f9:af:ea:0a:10: 54:fc:3a:a8:21:76:65:50:ad:11:58:e5:f3:f7:22:ca:72:bb: 24:5c:ca:72:d6:16:24:33:15:4a:57:0d:87:98:ae:3b:ad:45: a0:f1:46:b3:a8:8a:48:9c:93:e6:1f:a7:2a:1d:fb:ec:4f:36: fb:57:2b:a8:2b:26:c7:10:e6:1e:b3:1a:73:c3:12:a9:cb:74: e2:8b:f8:4f:e9:08:57:58:d2:28:ca:65:25:ed:26:df:03:37: e3:46:b8:20:66:3d:61:c8:7d:69:37:78:8b:96:33:83:a2:83: 4c:07:21:50:12:be:b4:39:e2:b2:f3:2b:48:a1:f8:90:f6:54: 7d:ed:99:93:5a:59:3d:1c:39:e1:8d:a1:69:ad:e9:2a:86:9f: d1:0b:77:05:85:58:a4:d7:78:62:17:d0:97:4d:d3:f1:33:6c: c7:1d:ef:09:e5:4f:74:28:82:f9:cf:46:f7:31:a5:cf:24:54: d3:27:90:15:a1:ec:53:d5:4b:2d:d1:d1:b1:9f:d9:0f:65:03: 85:a2:32:f1:b2:e7:77:26:29:eb:52:b5:4c:40:24:30:23:34: 74:d3:c1:6c:31:36:31:f2:57:06:96:02:3f:f4:81:c0:39:73: 37:dd:82:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnxBhdc2KXCPcegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NTM5N2NlZmEtOWIyYi00OGQ4LWEyOWQtOGMyNzUwNjdmNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15CI36yDgBWnlkW5guaN8rFm6dmd792sAyC+ bG6kxgi87w6ntfj9DukK3rlwpDMNCxlHoBR1UOqZEpynpRY6PjlCB2l5y51Xgvqf yEgELUibjJTZMgtcyPINBokW950z7Qxm1sF4RmByL7LJXlfsEAuxumfwCjHpoSEt MqW0/6b37VtyPvOBUTbKw4Z50mLsg6NdYo0WshSXc8KuKQQ6jNPck5zN79bivjBv OQGNaiXiffYmXRBHSWmZmVjsBfpYu7Hh2t4ZGKpW55czekUiWPmP3Ynf6sRY0wOA midefX4zJHaSoKvrCCpkoXPSZRF52rfkvlmv+TbDE36Tz7ePyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ+A0dXXYRxRWZaiej+uOnkl9OQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTc0OGRlNmEtZTc4NC0z ZWQ4LWE1ODktY2Y3YTkxYzJmZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCZOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP+fShezasIAUXk0cX5r+oKEFT8OqghdmVQrRFY5fP3IspyuyRcynLW FiQzFUpXDYeYrjutRaDxRrOoikick+Yfpyod++xPNvtXK6grJscQ5h6zGnPDEqnL dOKL+E/pCFdY0ijKZSXtJt8DN+NGuCBmPWHIfWk3eIuWM4Oig0wHIVASvrQ54rLz K0ih+JD2VH3tmZNaWT0cOeGNoWmt6SqGn9ELdwWFWKTXeGIX0JdN0/EzbMcd7wnl T3QogvnPRvcxpc8kVNMnkBWh7FPVSy3R0bGf2Q9lA4WiMvGy53cmKetStUxAJDAj NHTTwWwxNjHyVwaWAj/0gcA5czfdgso= -----END CERTIFICATE-----Generated at Wed Sep 23 01:26:26 2026 by rpki-client