$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa File: 2898b342-99d9-38c5-9336-1fe74e8caafa.roa (raw, json) Hash identifier: DfQcuSbBO5etZ6kqlEzJhdxuUPYIjRVTWA48YXCL9aE= Subject key identifier: 5B:85:24:A7:C7:3B:E8:4E:A0:97:C2:9F:78:7C:80:B2:3D:C4:9F:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FAF2CE6D16E4165145D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.53.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:af:2c:e6:d1:6e:41:65:14:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cebc5714-39f5-4030-8c12-d339de5ec2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:b6:7d:b8:dc:aa:e5:3a:be:8a:f2:c0:53: 21:73:b2:d5:73:02:be:aa:6e:b6:d2:d8:82:5c:90: e0:8b:b3:fa:40:0b:42:17:6d:04:00:37:ff:c8:4e: cc:cb:0b:e0:7e:7e:7a:fd:f7:d1:a4:57:ec:ca:61: 35:c6:3b:68:6f:f8:7b:bf:12:0a:b5:52:c4:2a:35: 42:6b:f2:ce:bc:20:34:27:87:51:ac:bd:19:c5:56: 72:9c:49:86:05:14:7c:fd:83:d8:11:e1:53:47:fa: bb:76:54:ff:82:6b:41:68:b3:82:e8:77:28:68:69: 1f:ea:d6:9d:b2:f9:98:7f:c6:73:fa:e5:a6:b9:cc: 48:d6:24:5f:d7:ef:45:84:bb:d7:93:94:c5:fc:0c: 8a:20:02:31:ab:7f:97:a9:ed:70:c7:a9:ba:5c:a9: 8d:f3:ac:cf:a0:74:ab:e6:7c:2f:33:83:4c:09:cb: ba:21:dd:8c:63:d6:ae:de:e3:f8:d5:1d:f3:6a:92: 54:9b:2c:dc:03:60:09:02:a7:bf:a2:ce:9c:7e:41: 95:83:26:5c:a4:2e:69:52:60:b5:08:69:ae:ac:0a: c4:d4:b9:2e:6a:ff:0a:82:50:4b:6a:3f:f5:2f:00: 17:37:c9:47:50:c3:9e:b4:e8:8c:f5:48:19:c0:49: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:85:24:A7:C7:3B:E8:4E:A0:97:C2:9F:78:7C:80:B2:3D:C4:9F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2898b342-99d9-38c5-9336-1fe74e8caafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:13:1c:86:7d:64:13:ed:04:c4:dd:5c:4a:b2:84:ed:9e:8d: ad:f4:a4:5c:93:0f:fa:7b:5e:3c:69:d1:9c:01:d4:40:49:c1: 3d:8d:bb:30:9d:19:14:31:84:2b:a6:36:06:c5:c3:ef:dc:11: b6:20:2b:15:f1:37:f4:87:a4:68:f8:4e:cb:57:3c:da:55:f9: 47:56:f3:8d:7e:31:95:e7:dd:4f:a9:8e:dc:26:2d:52:d3:f1: e3:04:d2:d4:65:c6:55:b3:82:82:4f:f6:f6:22:97:00:3e:d7: ea:12:40:b8:4f:1d:29:93:95:0f:27:70:b6:7a:fc:73:2d:ee: 0c:a6:2f:82:24:9a:dc:fd:4c:86:67:4b:fb:d3:c9:e1:53:42: 9b:c3:3a:75:ce:9e:11:d2:83:be:86:d0:b1:77:1e:a8:cd:fa: 6f:6a:c0:f2:7c:4c:d0:e7:e5:e9:5f:a2:dd:67:4c:e9:62:d3: 68:51:bd:e8:07:b1:80:04:f5:00:d0:33:c6:10:af:3e:07:47: 02:e6:7a:5b:91:c4:b6:33:62:0f:7d:25:8e:aa:3d:00:7d:68: 92:58:7f:49:78:0f:6d:d6:36:4a:80:b9:db:3a:0c:05:08:69: 07:d0:e1:33:28:99:b8:c3:ec:b6:55:6d:fb:ce:e4:c9:04:bb: 2c:5e:1a:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf68s5tFuQWUUXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ViYzU3MTQtMzlmNS00MDMwLThjMTItZDMzOWRlNWVjMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZm2fbjcquU6vorywFMhc7LVcwK+qm620tiC XJDgi7P6QAtCF20EADf/yE7Mywvgfn56/ffRpFfsymE1xjtob/h7vxIKtVLEKjVC a/LOvCA0J4dRrL0ZxVZynEmGBRR8/YPYEeFTR/q7dlT/gmtBaLOC6HcoaGkf6tad svmYf8Zz+uWmucxI1iRf1+9FhLvXk5TF/AyKIAIxq3+Xqe1wx6m6XKmN86zPoHSr 5nwvM4NMCcu6Id2MY9au3uP41R3zapJUmyzcA2AJAqe/os6cfkGVgyZcpC5pUmC1 CGmurArE1Lkuav8KglBLaj/1LwAXN8lHUMOetOiM9UgZwEnvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuFJKfHO+hOoJfCn3h8gLI9xJ+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg5OGIzNDItOTlkOS0z OGM1LTkzMzYtMWZlNzRlOGNhYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERDWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkTHIZ9ZBPtBMTdXEqyhO2eja30pFyTD/p7Xjxp0ZwB1EBJwT2NuzCd GRQxhCumNgbFw+/cEbYgKxXxN/SHpGj4TstXPNpV+UdW841+MZXn3U+pjtwmLVLT 8eME0tRlxlWzgoJP9vYilwA+1+oSQLhPHSmTlQ8ncLZ6/HMt7gymL4Ikmtz9TIZn S/vTyeFTQpvDOnXOnhHSg76G0LF3HqjN+m9qwPJ8TNDn5elfot1nTOli02hRvegH sYAE9QDQM8YQrz4HRwLmeluRxLYzYg99JY6qPQB9aJJYf0l4D23WNkqAuds6DAUI aQfQ4TMombjD7LZVbfvO5MkEuyxeGvc= -----END CERTIFICATE-----Generated at Sat Sep 26 08:20:58 2026 by rpki-client