$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa File: 34f299fa-235a-3113-8368-a7809bfbc5cd.roa (raw, json) Hash identifier: 6GHbX8brWoEX8LRdw0ZeqzDE7vjzBcAF6nKCXpKhGdM= Subject key identifier: 62:A7:63:BD:E9:5D:C3:CD:60:DA:84:62:6B:9C:D3:91:8F:13:6C:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DF85BA6365F83F164B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.43.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:df:85:ba:63:65:f8:3f:16:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=8a2791d9-d7d7-41c7-a7a9-152d62c29d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:3d:1c:70:70:e2:7f:16:14:d8:cd:17:1c: 07:a9:9e:3d:20:14:93:1d:b4:ad:e9:1d:80:46:9d: ab:d8:8a:0d:17:9f:bc:2c:46:6e:23:ff:08:43:9e: 55:69:60:a7:48:47:14:f7:79:74:59:a3:c2:0f:5e: c1:4f:f4:55:72:04:2f:50:55:43:39:e2:53:f7:04: a1:8c:73:98:e7:30:ed:c1:d2:da:8a:cb:36:6f:90: f4:cc:3e:27:8e:84:1a:d9:25:3a:74:de:90:1c:61: b9:22:65:4c:ba:dc:35:29:bc:ce:de:95:34:46:e1: 97:20:9b:fc:11:c8:f3:c4:92:d4:23:d4:b7:88:b7: 67:cc:3d:ea:9c:4f:4c:21:c6:d8:93:bb:89:a4:b1: 9e:e3:1f:74:ab:7b:81:2d:45:0a:e1:a5:57:70:0b: 22:69:a2:fe:8c:57:e8:cc:6b:64:dc:48:ec:3c:b8: b5:ff:a7:3c:6f:df:a3:81:f5:81:62:4a:8c:8b:b7: e9:ba:be:9c:5d:7a:1f:df:10:58:ad:84:79:25:f8: 72:0d:95:92:df:f6:51:45:63:20:b0:a4:9f:76:51: fb:0c:f0:d6:1c:e3:5d:a9:e2:cc:ea:93:21:60:5c: 29:d5:a2:1b:42:78:18:e4:4c:db:9d:f8:ca:a3:5d: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A7:63:BD:E9:5D:C3:CD:60:DA:84:62:6B:9C:D3:91:8F:13:6C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c0:e4:cb:6c:91:17:cb:79:e8:12:7a:e2:6d:e8:2e:37:44: e0:78:5a:9c:e0:85:c8:38:06:ff:bb:de:15:f2:3c:e6:74:be: c2:28:26:bf:7e:40:f2:6e:9b:0e:54:6c:ee:7b:21:eb:75:78: c1:c0:f4:d3:f7:a5:b3:e2:91:71:76:65:48:63:87:05:3d:e8: 9e:86:19:04:12:a0:cc:cc:6f:84:69:65:a1:39:f6:06:fd:b1: 40:d0:5e:b2:a0:3c:eb:fa:7f:6b:3d:2c:f6:29:6f:52:3d:c5: d7:9e:09:c4:69:0d:8f:07:fc:95:07:a0:47:b4:0b:ee:eb:56: a6:6d:6c:1a:e1:dd:47:61:fe:5d:f1:b4:7e:71:84:2b:98:65: 09:26:ca:35:0f:a9:49:a2:26:d9:f1:78:69:f0:a2:d9:1d:6a: 1c:84:51:14:1f:75:72:03:bf:f4:70:a8:55:6e:af:0f:b2:b7: 4a:67:91:dc:c5:29:f0:66:c0:69:2a:26:3a:fb:36:39:bc:a6: 24:61:13:fd:28:02:46:ea:73:e3:7c:36:67:8a:5e:d4:71:dd: 35:b4:77:a3:e8:bf:c5:b4:9c:5f:e2:78:51:87:c3:b2:20:57: f7:3b:2d:c3:d5:5d:0d:92:8d:19:14:66:3b:e3:c9:12:98:fc: af:15:a9:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9+FumNl+D8WSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OGEyNzkxZDktZDdkNy00MWM3LWE3YTktMTUyZDYyYzI5ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Q9HHBw4n8WFNjNFxwHqZ49IBSTHbSt6R2A Rp2r2IoNF5+8LEZuI/8IQ55VaWCnSEcU93l0WaPCD17BT/RVcgQvUFVDOeJT9wSh jHOY5zDtwdLaiss2b5D0zD4njoQa2SU6dN6QHGG5ImVMutw1KbzO3pU0RuGXIJv8 EcjzxJLUI9S3iLdnzD3qnE9MIcbYk7uJpLGe4x90q3uBLUUK4aVXcAsiaaL+jFfo zGtk3EjsPLi1/6c8b9+jgfWBYkqMi7fpur6cXXof3xBYrYR5JfhyDZWS3/ZRRWMg sKSfdlH7DPDWHONdqeLM6pMhYFwp1aIbQngY5EzbnfjKo13rJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKnY73pXcPNYNqEYmuc05GPE2xKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRmMjk5ZmEtMjM1YS0z MTEzLTgzNjgtYTc4MDliZmJjNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLA5MtskRfLeegSeuJt6C43ROB4Wpzghcg4Bv+73hXyPOZ0vsIoJr9+ QPJumw5UbO57Iet1eMHA9NP3pbPikXF2ZUhjhwU96J6GGQQSoMzMb4RpZaE59gb9 sUDQXrKgPOv6f2s9LPYpb1I9xdeeCcRpDY8H/JUHoEe0C+7rVqZtbBrh3Udh/l3x tH5xhCuYZQkmyjUPqUmiJtnxeGnwotkdahyEURQfdXIDv/RwqFVurw+yt0pnkdzF KfBmwGkqJjr7Njm8piRhE/0oAkbqc+N8NmeKXtRx3TW0d6Pov8W0nF/ieFGHw7Ig V/c7LcPVXQ2SjRkUZjvjyRKY/K8VqR4= -----END CERTIFICATE-----Generated at Fri Sep 25 00:06:40 2026 by rpki-client