$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4ee603-bf4a-3dc5-a5ab-ca671f0cf88e.roa File: 3e4ee603-bf4a-3dc5-a5ab-ca671f0cf88e.roa (raw, json) Hash identifier: var+E+2eOQ+Cg1YlJZXSP3KEpvUo/NzwIr+MMlSgOM8= Subject key identifier: 03:4C:75:A3:CE:34:02:D1:D9:7B:74:4F:1D:E3:43:9F:D0:A3:00:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78BD006050BECA1DE19CD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4ee603-bf4a-3dc5-a5ab-ca671f0cf88e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 68.57.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:d0:06:05:0b:ec:a1:de:19:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=29fcd41c-ed62-4255-8e91-a1acad76cf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:87:ed:eb:9e:a1:83:d1:09:0c:c0:9e:82:50: 2e:a4:7a:f7:08:33:64:0d:78:d3:13:c5:df:54:e4: f6:51:a4:c6:53:4b:aa:dc:b3:bc:38:ff:94:e0:02: 29:9e:a6:0c:a6:57:c2:84:f1:39:c3:60:8d:eb:b6: 05:bc:a0:9e:8d:06:56:f5:06:e3:17:14:e9:fe:e0: e8:13:95:c2:c7:5b:43:62:a4:1c:ce:74:db:e8:34: ff:67:44:60:ee:27:7a:d8:e3:62:13:f1:6f:68:2e: cb:6f:87:f9:e9:e3:37:b7:57:cb:0f:db:a5:9a:a2: 6e:55:fc:06:8b:58:20:c9:e2:b3:5a:ec:0c:5a:51: b0:ec:54:36:ce:cf:b0:6d:4d:67:24:c2:13:0a:79: 26:45:93:2b:25:94:b6:f3:ab:a4:c9:3c:e2:16:d5: 4a:af:1d:dd:e2:fd:3b:f7:de:09:b6:6a:e3:2e:16: f6:1f:38:cf:a6:e5:56:ac:8f:de:2f:ed:22:ae:21: 02:6f:75:94:c0:b1:cd:af:35:e0:36:ae:4b:f3:c7: a3:31:de:10:5a:52:8d:97:f4:41:d3:02:ea:cb:b6: 74:9a:cd:83:88:b0:44:42:4b:e0:78:a9:52:5e:c8: c3:2e:63:85:fe:03:cc:77:5f:40:2a:e6:9b:a2:e8: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:75:A3:CE:34:02:D1:D9:7B:74:4F:1D:E3:43:9F:D0:A3:00:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4ee603-bf4a-3dc5-a5ab-ca671f0cf88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:14:e9:ae:a9:bc:50:18:ed:c7:34:b5:89:98:e7:4e:36:60: fa:e9:46:57:4a:47:55:d5:27:b7:85:70:5d:bb:d4:39:87:22: b6:09:a6:b4:58:00:b9:56:66:21:d8:eb:fe:09:64:ec:06:f1: 01:8e:b5:63:83:e5:5f:fb:68:32:e9:e6:ad:68:74:0a:c0:63: bf:35:62:2a:bd:74:cf:3d:d8:85:62:22:0e:3c:86:69:3e:15: 06:f4:9b:a0:b4:9c:c2:a1:22:c9:ed:ac:46:98:0b:d0:8a:27: 9b:0d:68:2a:32:4c:99:fd:18:0a:6c:26:26:41:df:ea:8a:91: f1:01:fb:07:9d:79:65:81:80:9b:3e:98:4c:c8:2e:26:6f:12: 62:03:52:e7:5e:f6:1e:e8:2d:2e:22:5c:7a:d0:e7:87:ed:48: 78:a0:75:11:34:a0:d3:ad:50:93:24:56:6a:ad:50:ec:ed:a3: 7e:e5:9b:62:16:d8:65:87:ef:42:b4:bc:23:09:36:a0:13:de: a6:94:47:76:99:6d:10:13:09:42:34:f5:52:db:4f:f0:67:ee: b1:8a:e0:8e:0c:73:06:60:a6:6d:2e:e7:6c:3f:d9:99:03:5b: 9f:7b:fd:aa:b0:38:4c:fa:79:59:4a:27:3c:85:ab:45:be:5d: 12:a2:51:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni9AGBQvsod4ZzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjlmY2Q0MWMtZWQ2Mi00MjU1LThlOTEtYTFhY2FkNzZjZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoft656hg9EJDMCeglAupHr3CDNkDXjTE8Xf VOT2UaTGU0uq3LO8OP+U4AIpnqYMplfChPE5w2CN67YFvKCejQZW9QbjFxTp/uDo E5XCx1tDYqQcznTb6DT/Z0Rg7id62ONiE/FvaC7Lb4f56eM3t1fLD9ulmqJuVfwG i1ggyeKzWuwMWlGw7FQ2zs+wbU1nJMITCnkmRZMrJZS286ukyTziFtVKrx3d4v07 994JtmrjLhb2HzjPpuVWrI/eL+0iriECb3WUwLHNrzXgNq5L88ejMd4QWlKNl/RB 0wLqy7Z0ms2DiLBEQkvgeKlSXsjDLmOF/gPMd19AKuabouiKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANMdaPONALR2Xt0Tx3jQ5/QowD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0ZWU2MDMtYmY0YS0z ZGM1LWE1YWItY2E2NzFmMGNmODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoU6a6pvFAY7cc0tYmY5042YPrpRldKR1XVJ7eFcF271DmHIrYJprRY ALlWZiHY6/4JZOwG8QGOtWOD5V/7aDLp5q1odArAY781Yiq9dM892IViIg48hmk+ FQb0m6C0nMKhIsntrEaYC9CKJ5sNaCoyTJn9GApsJiZB3+qKkfEB+wedeWWBgJs+ mEzILiZvEmIDUude9h7oLS4iXHrQ54ftSHigdRE0oNOtUJMkVmqtUOzto37lm2IW 2GWH70K0vCMJNqAT3qaUR3aZbRATCUI09VLbT/Bn7rGK4I4McwZgpm0u52w/2ZkD W597/aqwOEz6eVlKJzyFq0W+XRKiUcc= -----END CERTIFICATE-----Generated at Wed Sep 23 09:26:49 2026 by rpki-client