$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa File: 3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa (raw, json) Hash identifier: PEHRYu4g0ADDpcXa1oC/aRHB2YlhsXmtkUz8wdBBygA= Subject key identifier: 5E:A4:A3:B0:46:DC:AA:CE:79:D2:1E:6A:FB:C9:EB:A7:F7:F7:30:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FC314A7B6BD352A26B180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.84.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:c3:14:a7:b6:bd:35:2a:26:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ecc2d53-846b-4208-9399-ab6ef397fc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:5c:5b:23:e5:a9:f1:61:75:16:e3:8b:81: 7d:7f:12:da:66:46:a5:2c:9b:fe:93:c5:d2:aa:73: 7b:a1:f3:1a:3e:d3:30:fb:f2:16:e1:ac:99:55:b4: c1:1b:22:ac:88:26:e3:db:2b:32:3a:fa:59:97:27: 4c:59:3b:69:fb:d9:71:d9:3c:54:51:d9:2a:ca:07: 9a:41:62:c3:63:6d:45:1f:a1:9d:69:7b:80:f1:dd: 7b:c4:6d:b2:d8:6a:32:1c:19:51:eb:5e:d8:99:05: fc:e6:1e:ef:e7:1f:ea:f5:01:2f:e1:47:25:73:72: 1e:39:eb:0a:2b:53:a8:22:4f:d7:a5:a6:8c:14:3a: 7d:d1:84:58:aa:66:df:a7:48:6c:f7:61:f0:f1:42: 23:35:f7:4a:89:82:cb:fd:1c:c5:94:8f:a9:63:65: b8:a5:96:22:36:16:9a:ea:a7:b7:1a:59:33:55:38: 9a:ad:71:b7:c1:6c:b0:38:6b:bd:c0:c6:bf:52:dd: a2:f6:65:1c:58:fe:66:e9:ac:6f:c9:31:44:cf:19: c1:ca:e2:85:d5:ca:9f:77:67:79:c3:e3:03:5f:92: f1:af:39:a5:7b:9e:4d:74:07:df:ba:0e:4e:aa:10: f7:80:e5:2b:5c:12:2a:d2:8c:6b:3f:1c:3d:28:72: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:A3:B0:46:DC:AA:CE:79:D2:1E:6A:FB:C9:EB:A7:F7:F7:30:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f21e5a5-dc57-37e4-94e9-f1a4f98f4e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:63:cc:49:46:6f:40:1f:29:5d:dc:a8:7c:02:80:1a:a1:4a: aa:66:f1:26:17:60:e3:c4:b8:33:8b:9f:cc:50:46:a0:fe:1d: ac:4e:81:c4:34:b2:a1:b6:0d:76:3b:0b:5a:17:c2:78:75:cf: 95:66:ea:a0:ed:b4:86:33:91:a1:52:6c:8e:45:e5:7e:8e:c8: f3:8d:03:59:84:8e:3b:9d:d1:b0:82:39:28:2c:51:01:8b:fc: 81:a7:cd:f6:2b:b1:67:38:a7:90:d9:c6:87:bf:16:db:39:c4: f8:4e:b2:0f:11:72:19:43:83:d4:90:39:ca:96:f5:2b:12:73: 34:73:7f:4a:9d:79:54:ee:f6:d2:b5:e0:0c:b5:ba:52:c9:e8: 36:65:3f:4e:9c:1f:0c:42:50:78:a8:05:73:64:f9:8f:fe:e3: ba:3d:41:17:1d:79:48:3b:26:24:74:ed:0e:83:46:bc:e4:be: bb:16:b8:7d:f0:6e:37:66:ba:82:85:d3:60:e4:e4:34:8c:f9: 93:c6:d9:05:08:70:eb:76:2f:6a:6b:08:3e:7c:ef:a9:e8:26: 71:61:9e:1a:1a:aa:f2:8e:20:e4:e1:29:3b:ec:40:e8:a6:3f: 70:80:05:ae:c5:9e:99:a0:00:f1:9b:7b:d7:d6:a6:2b:d1:b9: 32:82:d5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf8MUp7a9NSomsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWVjYzJkNTMtODQ2Yi00MjA4LTkzOTktYWI2ZWYzOTdmYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ1cWyPlqfFhdRbji4F9fxLaZkalLJv+k8XS qnN7ofMaPtMw+/IW4ayZVbTBGyKsiCbj2ysyOvpZlydMWTtp+9lx2TxUUdkqygea QWLDY21FH6GdaXuA8d17xG2y2GoyHBlR617YmQX85h7v5x/q9QEv4Uclc3IeOesK K1OoIk/XpaaMFDp90YRYqmbfp0hs92Hw8UIjNfdKiYLL/RzFlI+pY2W4pZYiNhaa 6qe3GlkzVTiarXG3wWywOGu9wMa/Ut2i9mUcWP5m6axvyTFEzxnByuKF1cqfd2d5 w+MDX5Lxrzmle55NdAffug5OqhD3gOUrXBIq0oxrPxw9KHJKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6ko7BG3KrOedIeavvJ66f39zAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2YyMWU1YTUtZGM1Ny0z N2U0LTk0ZTktZjFhNGY5OGY0ZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFReMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZjzElGb0AfKV3cqHwCgBqhSqpm8SYXYOPEuDOLn8xQRqD+HaxOgcQ0 sqG2DXY7C1oXwnh1z5Vm6qDttIYzkaFSbI5F5X6OyPONA1mEjjud0bCCOSgsUQGL /IGnzfYrsWc4p5DZxoe/Fts5xPhOsg8RchlDg9SQOcqW9SsSczRzf0qdeVTu9tK1 4Ay1ulLJ6DZlP06cHwxCUHioBXNk+Y/+47o9QRcdeUg7JiR07Q6DRrzkvrsWuH3w bjdmuoKF02Dk5DSM+ZPG2QUIcOt2L2prCD5876noJnFhnhoaqvKOIOThKTvsQOim P3CABa7FnpmgAPGbe9fWpivRuTKC1XE= -----END CERTIFICATE-----Generated at Sat Sep 26 03:32:40 2026 by rpki-client