$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a6c31a-a570-3f5c-ab1d-1662147960d6.roa File: 38a6c31a-a570-3f5c-ab1d-1662147960d6.roa (raw, json) Hash identifier: nfSab+j9IF2b+gIJZVWw3eMMc9i9rkVYXKg9t5LCazI= Subject key identifier: 52:3B:1D:C7:6A:C6:08:62:7B:4E:B4:9E:D7:7F:05:B7:AF:2F:0C:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BF688A47DD32FA6A0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a6c31a-a570-3f5c-ab1d-1662147960d6.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.58.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:bf:68:8a:47:dd:32:fa:6a:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=34239b9a-f745-4326-8ce5-d4b484dc3358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4c:de:e3:40:46:c4:a9:af:2c:2a:c5:06:f9: d0:0b:22:5d:7c:ac:91:7e:79:d9:fc:9e:48:c6:4c: af:bc:9f:1d:bf:fd:cf:61:20:97:08:c3:bf:30:bf: 3c:a0:9d:ca:cc:74:01:26:a7:1c:96:db:29:db:ac: d9:ee:50:c8:73:11:c5:e7:12:a7:c7:d4:ec:c1:be: 42:e6:d7:d9:9b:d6:e4:1a:d7:1c:b5:52:34:7b:1e: db:e4:f4:b4:2b:18:96:fe:ad:b1:c7:91:42:e3:30: fc:3c:da:e5:97:c2:3a:16:14:2d:da:f2:d0:b5:bc: 44:7d:fb:2e:f4:8f:6f:21:d3:a2:76:c6:44:c2:5e: 71:65:92:b7:04:aa:82:a0:21:f6:14:c9:e2:31:7b: cf:24:97:75:57:98:a0:94:4a:c2:ed:02:39:79:8a: 38:20:58:74:ba:d7:97:e2:3d:26:67:6b:72:35:80: 9d:53:ad:c1:61:92:ce:19:e8:f5:41:14:b2:bd:90: ac:48:73:0a:1c:e5:bc:04:72:73:26:0c:3a:99:a2: 4e:c7:9e:35:63:de:e5:93:1c:7f:8f:90:55:ef:b1: de:e0:36:7a:48:56:17:2e:d2:eb:fa:d1:39:5b:b9: 23:27:6e:4f:c1:bf:32:46:ab:d8:ca:3f:a9:de:a2: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3B:1D:C7:6A:C6:08:62:7B:4E:B4:9E:D7:7F:05:B7:AF:2F:0C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38a6c31a-a570-3f5c-ab1d-1662147960d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:4c:9d:04:3c:21:1f:3d:d2:5a:ad:5f:4c:36:41:3e:16:cd: 21:c0:c4:0c:e5:ef:dc:51:64:55:35:3c:b9:a6:6f:89:89:21: 10:33:8a:1f:05:53:a5:40:79:9a:c5:67:3d:e0:b4:69:7f:d6: 22:3e:32:f2:5f:72:80:14:a5:7c:4e:83:36:78:8b:00:4f:fe: b8:4f:40:e7:e8:60:2a:3f:99:11:f4:51:dc:2b:50:25:55:3e: 30:57:a7:0a:81:69:10:e9:04:22:ff:db:a8:14:6f:4b:04:bc: 34:2f:2b:9b:a0:44:ac:29:19:b9:63:a2:35:76:61:28:5d:85: 6c:97:9e:ac:0b:e0:1d:9a:3d:79:54:29:8e:c8:36:48:10:b2: 82:cf:04:b0:73:90:4c:0d:56:06:f4:06:d0:d0:5c:ce:3a:62: 43:9d:32:40:c5:37:f4:af:36:79:03:57:98:0e:96:82:58:c7: 1e:d7:04:96:94:8d:f0:96:f1:ae:67:83:8a:12:58:55:fd:e2: cf:02:7f:23:36:c2:b9:e6:97:be:58:0c:d3:32:43:5c:1e:be: 83:8e:25:32:12:44:98:92:bd:aa:f8:74:a8:f2:0b:0f:00:d0: 0b:6e:3f:b2:1d:58:75:83:66:bb:fa:dc:29:f0:a1:27:7e:d4: 13:7e:96:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr9oikfdMvpqBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MzQyMzliOWEtZjc0NS00MzI2LThjZTUtZDRiNDg0ZGMzMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0ze40BGxKmvLCrFBvnQCyJdfKyRfnnZ/J5I xkyvvJ8dv/3PYSCXCMO/ML88oJ3KzHQBJqccltsp26zZ7lDIcxHF5xKnx9Tswb5C 5tfZm9bkGtcctVI0ex7b5PS0KxiW/q2xx5FC4zD8PNrll8I6FhQt2vLQtbxEffsu 9I9vIdOidsZEwl5xZZK3BKqCoCH2FMniMXvPJJd1V5iglErC7QI5eYo4IFh0uteX 4j0mZ2tyNYCdU63BYZLOGej1QRSyvZCsSHMKHOW8BHJzJgw6maJOx541Y97lkxx/ j5BV77He4DZ6SFYXLtLr+tE5W7kjJ25Pwb8yRqvYyj+p3qLI7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI7Hcdqxghie060ntd/BbevLwz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhhNmMzMWEtYTU3MC0z ZjVjLWFiMWQtMTY2MjE0Nzk2MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpMnQQ8IR890lqtX0w2QT4WzSHAxAzl79xRZFU1PLmmb4mJIRAzih8F U6VAeZrFZz3gtGl/1iI+MvJfcoAUpXxOgzZ4iwBP/rhPQOfoYCo/mRH0UdwrUCVV PjBXpwqBaRDpBCL/26gUb0sEvDQvK5ugRKwpGbljojV2YShdhWyXnqwL4B2aPXlU KY7INkgQsoLPBLBzkEwNVgb0BtDQXM46YkOdMkDFN/SvNnkDV5gOloJYxx7XBJaU jfCW8a5ng4oSWFX94s8CfyM2wrnml75YDNMyQ1wevoOOJTISRJiSvar4dKjyCw8A 0AtuP7IdWHWDZrv63CnwoSd+1BN+lvM= -----END CERTIFICATE-----Generated at Sun Sep 27 01:20:35 2026 by rpki-client