$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa File: 3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa (raw, json) Hash identifier: eFzzn8j2yQavmUEXDQ5K7IUMcb7XRpwNhf0BhUNlS+Y= Subject key identifier: 2F:B8:4E:29:D2:10:F4:F0:BF:4B:72:44:E5:3D:32:45:4E:12:B8:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DCA84E03144AE08BE380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.41.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:dc:a8:4e:03:14:4a:e0:8b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=ea1e7ed6-4a08-4784-a636-0c6800133677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b0:a1:ea:ea:ce:ee:4d:a3:e8:35:2d:dd:a9: b0:77:d5:c5:08:d2:60:9d:8d:a2:29:6b:dc:87:1d: 47:61:76:1f:48:d7:27:1b:9b:aa:d2:42:49:5f:4f: c7:bd:09:a3:e3:f1:b1:2a:1b:2d:4c:00:06:e6:52: 58:f9:16:57:c3:7e:f8:ec:50:e6:60:58:2e:8d:40: da:db:43:67:0c:31:24:24:1d:2a:45:8e:cd:5a:55: fe:7f:7a:5d:41:d8:8d:50:dd:5d:86:e4:e9:66:88: 36:0a:61:a5:84:9f:2e:9d:b3:f3:d8:1d:ee:e7:37: e7:4f:5e:4a:23:ad:eb:fb:06:d1:bf:e5:62:17:db: 65:9d:92:b6:68:2e:c5:2e:2f:f5:f2:1d:0f:a5:a7: 65:56:d2:3f:31:e9:c9:a5:27:83:3c:6c:b1:86:b7: 5b:c7:81:5c:48:3a:5f:c7:5d:0e:95:0e:c9:53:c7: f2:6c:e1:a2:50:f0:0b:29:e2:7e:5a:10:15:aa:57: 86:2f:40:32:cc:25:47:60:31:46:05:12:3a:ef:e0: e7:f1:f1:7c:a5:24:4a:ee:2a:7c:37:c2:31:67:ed: be:18:f0:a9:c0:92:41:ce:79:b1:1b:ee:50:d6:63: c4:ce:3d:1c:84:63:d2:c1:56:43:d9:0f:12:56:3e: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B8:4E:29:D2:10:F4:F0:BF:4B:72:44:E5:3D:32:45:4E:12:B8:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:9a:a6:f3:11:24:19:38:8b:ff:9a:1f:a3:70:0a:5b:f0:a7: f3:35:8e:bb:dd:3a:de:4c:54:1c:69:90:56:f6:c0:de:cc:03: 47:96:6e:fb:75:67:eb:a3:ac:e4:21:ff:b4:cb:15:1f:6a:43: 46:e1:5e:61:48:90:40:34:6a:30:2b:5d:01:78:22:0f:a5:2c: e3:40:7d:f5:4e:e4:f2:dd:bf:a3:9f:d6:9b:1f:13:1a:f4:54: 98:a2:c1:9f:47:82:22:30:c4:f2:20:57:26:96:0d:e3:6c:60: 63:fa:d1:d4:df:0d:c5:1b:d0:eb:2d:b1:de:64:7a:c8:06:6b: 1d:43:bf:c5:4f:32:4d:cb:f2:e2:41:ee:21:57:90:37:aa:f2: 2f:fe:bd:69:e2:6b:f1:34:09:d2:1d:03:35:5c:e3:ce:dc:be: 02:81:1f:86:c9:7e:70:3b:11:0f:b5:c2:0b:a3:61:10:18:94: cc:3e:29:80:9d:29:6f:ea:9c:13:77:06:2c:64:46:27:84:de: 9f:ae:d8:83:e0:ff:56:89:f6:b3:7d:78:46:2d:dd:eb:05:3b: 91:d0:df:ee:b1:9f:a3:75:06:c5:9d:6c:60:26:e0:ae:7e:25: 66:8f:06:90:bb:e5:30:a0:db:04:19:73:6b:84:2c:10:f0:75: c1:2d:31:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9yoTgMUSuCL44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZWExZTdlZDYtNGEwOC00Nzg0LWE2MzYtMGM2ODAwMTMzNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLCh6urO7k2j6DUt3amwd9XFCNJgnY2iKWvc hx1HYXYfSNcnG5uq0kJJX0/HvQmj4/GxKhstTAAG5lJY+RZXw3747FDmYFgujUDa 20NnDDEkJB0qRY7NWlX+f3pdQdiNUN1dhuTpZog2CmGlhJ8unbPz2B3u5zfnT15K I63r+wbRv+ViF9tlnZK2aC7FLi/18h0PpadlVtI/MenJpSeDPGyxhrdbx4FcSDpf x10OlQ7JU8fybOGiUPALKeJ+WhAVqleGL0AyzCVHYDFGBRI67+Dn8fF8pSRK7ip8 N8IxZ+2+GPCpwJJBznmxG+5Q1mPEzj0chGPSwVZD2Q8SVj4mcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+4TinSEPTwv0tyROU9MkVOErgpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y3YmI3OTAtOTJhNy0z ZThjLWE1MWMtZjgxMzdkMThmMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaapvMRJBk4i/+aH6NwClvwp/M1jrvdOt5MVBxpkFb2wN7MA0eWbvt1 Z+ujrOQh/7TLFR9qQ0bhXmFIkEA0ajArXQF4Ig+lLONAffVO5PLdv6Of1psfExr0 VJiiwZ9HgiIwxPIgVyaWDeNsYGP60dTfDcUb0Ostsd5kesgGax1Dv8VPMk3L8uJB 7iFXkDeq8i/+vWnia/E0CdIdAzVc487cvgKBH4bJfnA7EQ+1wgujYRAYlMw+KYCd KW/qnBN3BixkRieE3p+u2IPg/1aJ9rN9eEYt3esFO5HQ3+6xn6N1BsWdbGAm4K5+ JWaPBpC75TCg2wQZc2uELBDwdcEtMWk= -----END CERTIFICATE-----Generated at Tue Sep 29 16:44:27 2026 by rpki-client