$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21368fc0-1768-3326-978a-5b65e2712242.roa File: 21368fc0-1768-3326-978a-5b65e2712242.roa (raw, json) Hash identifier: wXjNzv5Z/93EPyEocEs3BFTFPd8EV5cy5vqhlo5NOjY= Subject key identifier: 50:1D:93:C5:79:D9:D6:61:C7:B2:60:6E:AF:F0:C0:0B:F6:A6:24:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498084C7B286038C5BFFE240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21368fc0-1768-3326-978a-5b65e2712242.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20214 IP address blocks: 68.85.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:84:c7:b2:86:03:8c:5b:ff:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4defcc1-635d-4096-97de-20d8df60aeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:9c:da:d1:46:71:f3:45:1f:29:78:68:04: db:2c:e5:24:d3:25:ab:01:aa:66:52:67:81:58:82: 54:c8:ef:4e:c4:52:9f:cf:8d:f5:51:ba:e1:01:81: 2c:84:b3:00:aa:04:4d:6d:ea:eb:2d:6e:b7:f7:19: 91:6a:86:b1:f9:4f:1d:e7:58:b8:65:a6:48:39:7e: 40:f1:49:e6:ba:f9:a1:56:51:ef:ae:3b:3a:ff:b3: ef:ff:db:0b:9e:e2:20:19:c4:3e:9b:50:a7:7d:11: 7d:9f:73:fc:0d:62:d2:a5:8e:52:7c:51:a3:e2:39: 5f:6f:56:fc:52:e5:ff:a5:4f:bf:61:5b:c6:83:f2: 44:73:39:0e:aa:76:7b:d5:f8:8e:1e:a9:e0:de:44: dd:09:60:7e:fc:e1:84:19:bf:40:5f:ec:f5:2f:1c: 7b:91:e5:e8:02:1e:47:1a:6e:21:8f:06:11:35:36: 4c:64:75:2a:cb:9a:3b:d1:83:f5:66:a4:23:0d:cc: d5:a2:6d:b5:c0:ba:12:50:50:ba:ca:ef:61:67:5f: aa:81:87:9a:d1:fa:dd:e9:93:92:47:02:1c:40:16: 06:ed:14:aa:ab:a7:cd:01:07:ca:f3:0e:b9:a0:a8: 32:e3:16:0f:4a:4b:12:3a:7a:3d:33:d5:94:3e:58: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1D:93:C5:79:D9:D6:61:C7:B2:60:6E:AF:F0:C0:0B:F6:A6:24:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21368fc0-1768-3326-978a-5b65e2712242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ee:22:71:5e:e3:78:fa:46:d3:bc:9b:d2:9f:57:07:1d:de: d0:fd:c6:53:2f:72:04:43:bd:b6:c2:6b:2c:90:25:db:a0:32: 4b:c2:49:b1:be:69:51:ac:fd:31:bb:a8:ca:ca:77:ae:19:be: 04:dc:31:08:46:46:5c:9e:8e:53:1a:dc:de:4c:6a:dc:f6:9a: f7:58:96:89:cb:c8:1a:6c:6e:d7:8d:5b:d7:bf:23:b6:cc:db: 8e:50:0d:38:17:42:cd:63:f7:2f:22:b1:ae:8f:64:85:ff:1e: 79:6b:b5:9c:20:a7:c6:cf:ee:f2:5f:f2:80:f1:f3:ae:cc:ff: bc:65:36:e2:71:68:25:2f:cf:a0:b8:fb:3d:c8:2f:24:59:9d: 2d:fe:2c:30:45:a9:4f:75:db:b0:35:87:79:66:32:21:41:01: a2:56:04:99:d6:b8:b3:bc:3e:b3:d4:88:0a:96:a2:c5:ca:c9: cd:f3:f7:ce:6b:c6:27:34:6f:bb:f3:bf:18:29:5a:94:af:dd: 06:9a:6b:ef:7b:91:2b:2f:a5:25:ea:e6:f9:f2:01:5d:ce:7f: 64:70:33:4d:f6:b7:af:45:e5:85:0d:16:6d:62:9b:69:69:b3: ba:5e:03:5b:2d:a1:cc:1f:1c:ea:5b:72:05:37:8f:d2:8f:53: 4d:24:15:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgITHsoYDjFv/4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjRkZWZjYzEtNjM1ZC00MDk2LTk3ZGUtMjBkOGRmNjBhZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxayc2tFGcfNFHyl4aATbLOUk0yWrAapmUmeB WIJUyO9OxFKfz431UbrhAYEshLMAqgRNberrLW639xmRaoax+U8d51i4ZaZIOX5A 8UnmuvmhVlHvrjs6/7Pv/9sLnuIgGcQ+m1CnfRF9n3P8DWLSpY5SfFGj4jlfb1b8 UuX/pU+/YVvGg/JEczkOqnZ71fiOHqng3kTdCWB+/OGEGb9AX+z1Lxx7keXoAh5H Gm4hjwYRNTZMZHUqy5o70YP1ZqQjDczVom21wLoSUFC6yu9hZ1+qgYea0frd6ZOS RwIcQBYG7RSqq6fNAQfK8w65oKgy4xYPSksSOno9M9WUPljE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAdk8V52dZhx7Jgbq/wwAv2piR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEzNjhmYzAtMTc2OC0z MzI2LTk3OGEtNWI2NWUyNzEyMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7uInFe43j6RtO8m9KfVwcd3tD9xlMvcgRDvbbCayyQJdugMkvCSbG+ aVGs/TG7qMrKd64ZvgTcMQhGRlyejlMa3N5Matz2mvdYlonLyBpsbteNW9e/I7bM 245QDTgXQs1j9y8isa6PZIX/HnlrtZwgp8bP7vJf8oDx867M/7xlNuJxaCUvz6C4 +z3ILyRZnS3+LDBFqU9127A1h3lmMiFBAaJWBJnWuLO8PrPUiAqWosXKyc3z985r xic0b7vzvxgpWpSv3Qaaa+97kSsvpSXq5vnyAV3Of2RwM032t69F5YUNFm1im2lp s7peA1stocwfHOpbcgU3j9KPU00kFfU= -----END CERTIFICATE-----Generated at Sun Sep 27 04:52:51 2026 by rpki-client