$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa File: 2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa (raw, json) Hash identifier: oLCcpWCGKS58nu3ACaokCMYFK+TIoawOYHkPdJpmvs8= Subject key identifier: 31:1F:7A:86:61:ED:BF:D4:0A:59:89:82:83:C7:D5:29:C8:EC:2E:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A00BF69F337A104491000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 68.58.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:00:bf:69:f3:37:a1:04:49:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=601b7bf6-0cba-417d-b4f3-708e27260e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:fc:10:c6:3e:a0:a9:dd:85:09:a7:32:80: 7c:99:ff:2f:a1:2a:cf:d1:e5:2b:e7:6a:f3:7f:9c: 47:be:64:2d:0e:b9:0c:0c:23:1c:84:45:ae:38:bc: bd:e3:b1:20:6f:1a:9b:eb:e7:be:a2:10:ef:08:97: 8d:c6:1c:90:c3:9d:1e:fd:21:ea:0d:7f:b3:0a:ca: 14:c5:30:05:03:71:07:3f:31:93:dd:1f:50:2f:b1: 81:8b:7f:2a:ca:51:74:87:5e:b3:20:81:36:9d:00: a2:93:42:95:d5:fe:cc:f6:5c:98:17:88:e2:22:32: fa:ac:ed:b9:32:07:82:34:49:28:84:7e:50:9a:41: cc:a2:ab:85:3d:40:99:49:94:71:6e:a0:65:fc:c3: 6c:77:4e:fb:65:07:4a:95:83:5a:9e:b9:9c:65:93: 0f:f5:3a:e5:4e:c2:17:76:dd:38:31:3f:44:34:9b: c4:d5:61:d0:d2:3c:66:f8:fa:de:49:32:d1:90:b5: 66:e3:dd:f7:51:68:97:bb:41:cf:c4:bd:13:c3:4f: 94:37:7c:6e:39:e7:6c:00:37:2d:fa:c3:9a:79:51: cb:77:45:9c:94:30:ec:af:37:c2:36:ad:f4:75:98: 11:7c:4d:2d:a4:cd:67:f3:ae:f2:31:bf:1b:6b:3a: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:7A:86:61:ED:BF:D4:0A:59:89:82:83:C7:D5:29:C8:EC:2E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b4:9e:b9:68:b3:1e:05:9a:eb:79:1d:98:0f:12:cc:3d:af: 02:1f:8a:e3:ac:fc:08:08:6e:b3:d2:88:20:03:c6:7a:60:a9: 8e:2c:0e:ab:2e:74:ec:7d:80:82:dd:18:26:7f:3b:08:03:22: 67:3a:f2:5d:9a:0e:60:4c:f5:b4:26:19:c4:5c:a2:86:e9:9f: c1:3f:52:d9:c6:4b:3b:db:00:d5:c8:53:c2:78:43:ba:b4:7f: 08:b3:69:bf:ee:87:7b:d9:84:fd:ff:36:36:4b:ac:67:cf:b9: 83:02:78:34:93:55:ed:b7:7d:a1:93:9b:11:47:9f:c1:64:17: 4d:5c:a5:1f:e5:58:a1:d5:58:f6:95:c2:76:bb:14:12:97:16: 3d:10:86:91:45:8e:a5:0a:3c:6c:7f:af:b8:34:4f:a6:c2:c8: 6b:04:4f:fd:6a:d3:30:96:69:93:e5:79:f8:50:fc:aa:21:df: db:8b:a7:3d:db:af:3d:2c:47:8e:15:fc:36:bf:3f:06:7c:63: 30:af:00:4e:8c:a2:ca:3b:34:55:a9:8f:95:e8:1a:24:e6:5c: 77:2a:ea:24:d1:af:b6:65:a7:13:07:ec:5b:00:3a:3e:17:91: e6:a7:d8:17:08:ca:23:b0:47:58:e9:26:28:c1:2d:e9:df:37: c4:52:48:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JegC/afM3oQRJEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjAxYjdiZjYtMGNiYS00MTdkLWI0ZjMtNzA4ZTI3MjYwZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNz8EMY+oKndhQmnMoB8mf8voSrP0eUr52rz f5xHvmQtDrkMDCMchEWuOLy947Egbxqb6+e+ohDvCJeNxhyQw50e/SHqDX+zCsoU xTAFA3EHPzGT3R9QL7GBi38qylF0h16zIIE2nQCik0KV1f7M9lyYF4jiIjL6rO25 MgeCNEkohH5QmkHMoquFPUCZSZRxbqBl/MNsd077ZQdKlYNanrmcZZMP9TrlTsIX dt04MT9ENJvE1WHQ0jxm+PreSTLRkLVm4933UWiXu0HPxL0Tw0+UN3xuOedsADct +sOaeVHLd0WclDDsrzfCNq30dZgRfE0tpM1n867yMb8bazrAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEfeoZh7b/UClmJgoPH1SnI7C6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNkMzQ5NmMtNDgxOS0z NDg0LTg3MTItYjIxZWJmOWU2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRDoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB20nrlosx4Fmut5HZgPEsw9rwIfiuOs/AgIbrPSiCADxnpgqY4sDqsu dOx9gILdGCZ/OwgDImc68l2aDmBM9bQmGcRcoobpn8E/UtnGSzvbANXIU8J4Q7q0 fwizab/uh3vZhP3/NjZLrGfPuYMCeDSTVe23faGTmxFHn8FkF01cpR/lWKHVWPaV wna7FBKXFj0QhpFFjqUKPGx/r7g0T6bCyGsET/1q0zCWaZPlefhQ/Koh39uLpz3b rz0sR44V/Da/PwZ8YzCvAE6Moso7NFWpj5XoGiTmXHcq6iTRr7ZlpxMH7FsAOj4X kean2BcIyiOwR1jpJijBLenfN8RSSNs= -----END CERTIFICATE-----Generated at Sat Sep 26 20:48:46 2026 by rpki-client