$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa File: 2280e5a2-e1a6-3762-992b-b9f20f648560.roa (raw, json) Hash identifier: EjyeyxEJymftTLXN0GFP318nAgGazEmkNR3dZ9A90JQ= Subject key identifier: C3:D3:75:51:E8:47:41:4B:16:9D:71:9D:53:9C:CC:5E:C1:C7:5E:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981112D942BB375C08BD000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33652 IP address blocks: 68.86.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:11:2d:94:2b:b3:75:c0:8b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=69eaaac7-fe42-4f9c-a861-e3612f415364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:65:6d:fe:77:32:0e:45:ee:f6:bd:9c:4e: 14:9c:2e:01:9c:63:ca:ce:16:4a:a7:06:91:0d:7e: 38:5a:37:9c:60:e3:28:ed:6b:3f:28:a3:26:3b:11: 9e:7a:40:90:da:54:e8:2c:5e:19:d0:62:d4:bd:6d: 55:47:39:a1:97:1b:42:ae:57:8b:6e:14:4a:8d:9b: 29:74:6c:dc:62:ad:32:10:57:45:50:b4:90:73:a5: d8:93:2f:80:ff:47:b6:7f:9f:1c:9b:e5:bd:df:3e: 92:1a:e9:bf:41:79:49:9e:a8:8c:68:90:d3:47:18: c5:1b:22:83:a8:3f:02:d2:4e:4c:bd:ab:24:17:c6: f1:fa:2d:fc:5b:44:ff:ff:84:aa:21:6b:fc:b9:8f: 0c:02:a3:d3:5f:2e:92:cc:fc:6a:7a:e3:cf:a2:bb: fd:eb:fd:e8:81:87:5c:82:e4:1e:eb:2c:48:2e:3f: eb:15:f6:d3:77:64:2d:e2:f5:bf:61:73:d0:29:6e: 5a:39:9c:12:38:4e:7b:a2:44:f1:fe:ab:f7:45:82: 2f:42:32:be:63:4b:b4:09:6f:59:2b:5e:37:4f:97: 9b:fb:6f:48:e8:05:46:11:39:61:21:59:a1:ca:5c: df:6f:5f:f8:bd:25:31:68:37:08:3b:c9:82:b6:cd: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:75:51:E8:47:41:4B:16:9D:71:9D:53:9C:CC:5E:C1:C7:5E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2280e5a2-e1a6-3762-992b-b9f20f648560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2d:c1:0b:9a:63:4a:97:bd:ff:04:ce:08:c6:5b:77:89:6e: 0f:a3:f7:bc:a3:93:ee:bd:c2:96:17:d7:07:bc:de:2f:e7:37: 5e:6a:c1:21:5e:ec:42:2f:48:3a:3b:ec:ff:43:47:2d:63:2e: 23:2c:f9:28:c2:ef:53:34:64:4f:3c:28:a8:24:06:a2:3f:83: 24:19:56:01:8e:b9:91:ab:a2:09:4f:0d:1c:be:d9:3c:7e:e0: cf:ee:e1:f8:ed:2d:07:aa:32:b4:da:99:dd:12:b8:60:12:29: 24:87:60:6e:2f:8e:36:b7:d4:2b:c4:cf:c1:db:8f:37:16:4a: c5:cf:76:b0:ea:46:e8:84:6a:6a:b1:ec:11:c4:72:69:98:3d: 3c:5c:ce:b1:85:f1:9c:d6:85:dd:97:36:18:b5:a0:71:c2:92: 74:80:ac:85:ea:74:a2:da:37:6c:a3:8b:0d:3a:34:ff:5b:8d: 7f:23:42:14:5b:3c:65:e1:92:e2:19:a7:73:6a:21:39:f4:d9: dd:1e:33:b8:77:aa:1a:fb:f7:8e:a4:01:db:0b:67:24:5e:55: 3c:21:2d:be:d0:4f:f0:f3:d3:87:17:8d:15:67:e7:a4:2b:6d: 89:6f:f9:95:55:0f:7a:d2:a9:f6:50:9c:bc:48:50:00:0e:30: 2a:99:6f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgREtlCuzdcCL0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjllYWFhYzctZmU0Mi00ZjljLWE4NjEtZTM2MTJmNDE1MzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk5lbf53Mg5F7va9nE4UnC4BnGPKzhZKpwaR DX44WjecYOMo7Ws/KKMmOxGeekCQ2lToLF4Z0GLUvW1VRzmhlxtCrleLbhRKjZsp dGzcYq0yEFdFULSQc6XYky+A/0e2f58cm+W93z6SGum/QXlJnqiMaJDTRxjFGyKD qD8C0k5MvaskF8bx+i38W0T//4SqIWv8uY8MAqPTXy6SzPxqeuPPorv96/3ogYdc guQe6yxILj/rFfbTd2Qt4vW/YXPQKW5aOZwSOE57okTx/qv3RYIvQjK+Y0u0CW9Z K143T5eb+29I6AVGETlhIVmhylzfb1/4vSUxaDcIO8mCts0QTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPTdVHoR0FLFp1xnVOczF7Bx16XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI4MGU1YTItZTFhNi0z NzYyLTk5MmItYjlmMjBmNjQ4NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwtwQuaY0qXvf8EzgjGW3eJbg+j97yjk+69wpYX1we83i/nN15qwSFe 7EIvSDo77P9DRy1jLiMs+SjC71M0ZE88KKgkBqI/gyQZVgGOuZGroglPDRy+2Tx+ 4M/u4fjtLQeqMrTamd0SuGASKSSHYG4vjja31CvEz8HbjzcWSsXPdrDqRuiEamqx 7BHEcmmYPTxczrGF8ZzWhd2XNhi1oHHCknSArIXqdKLaN2yjiw06NP9bjX8jQhRb PGXhkuIZp3NqITn02d0eM7h3qhr7946kAdsLZyReVTwhLb7QT/Dz04cXjRVn56Qr bYlv+ZVVD3rSqfZQnLxIUAAOMCqZb9o= -----END CERTIFICATE-----Generated at Fri Sep 25 06:27:55 2026 by rpki-client