$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/456ec740-cf28-3c4a-a87c-8d61f55838de.roa File: 456ec740-cf28-3c4a-a87c-8d61f55838de.roa (raw, json) Hash identifier: cOQdarGwb8o1MLmugXLZZvStwzDPsWU9kcLpZjamSeA= Subject key identifier: 30:DE:85:4C:DE:E3:AE:36:BB:1E:10:18:9E:70:0D:2C:F1:89:D9:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982656EE1BE0A3269BFA1A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/456ec740-cf28-3c4a-a87c-8d61f55838de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 68.83.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:65:6e:e1:be:0a:32:69:bf:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b897512c-97c6-417a-82a9-07d28840bbaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:c2:2c:b2:65:c6:48:7b:3f:a7:12:02:5e: 50:d4:5b:9f:72:d0:3c:64:e4:88:be:e3:72:43:32: fd:45:28:a6:24:3d:40:07:e1:dd:00:2c:8d:c4:86: f7:b4:09:d2:a0:cc:d2:f9:0c:80:19:72:1b:8e:4b: 12:75:be:57:af:54:20:c5:38:26:16:78:f7:71:be: 05:ba:7a:17:10:52:ab:d0:fd:9c:64:c9:94:82:c8: 0c:54:5d:00:3a:f2:db:f5:cf:b4:d7:0f:c8:7f:5f: 78:c9:94:ab:bd:02:66:3e:90:1a:ad:a8:1d:59:63: 79:fa:06:6f:a6:9a:ff:86:36:25:4d:43:f7:13:64: f6:ef:ad:31:fb:23:18:60:51:49:28:a5:9d:11:d2: 1c:4a:4d:d9:ff:6f:64:b6:6c:cd:66:8e:22:95:a1: 5f:3a:a8:98:18:f8:4a:79:ce:71:83:31:4a:7e:c3: 0b:63:8d:4a:7a:f0:f6:26:16:e1:aa:eb:92:27:f1: 3c:b9:4f:b2:4b:3e:87:38:f1:2c:43:c9:62:4b:a6: 58:b5:40:30:86:09:1d:97:20:54:83:01:50:4a:31: 21:29:6d:2c:37:7b:b6:b1:f6:4a:4c:9e:b6:fb:f6: 8f:c9:b7:2d:23:70:16:60:ff:c7:11:01:0f:da:25: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DE:85:4C:DE:E3:AE:36:BB:1E:10:18:9E:70:0D:2C:F1:89:D9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/456ec740-cf28-3c4a-a87c-8d61f55838de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b6:d6:83:a0:d0:52:5e:f7:1c:cc:16:a1:7c:ed:97:f3:c0: 35:db:79:cb:e0:f9:48:f6:a9:12:19:e5:40:2a:14:5c:93:08: 9e:08:1f:b8:cd:23:ff:9c:a4:c7:59:19:40:b4:ca:81:2a:ed: a4:43:b0:5b:59:0a:c8:4e:a7:d2:a1:cc:e8:2c:9a:dd:85:31: f4:f4:ee:22:95:67:a7:3e:39:ea:ca:06:5a:06:ac:53:9e:b1: e7:45:6c:a5:50:96:10:c1:5a:e9:41:2c:a5:04:d4:7c:f0:08: b1:82:b9:41:90:18:46:c9:03:cf:65:81:81:28:52:d4:8e:f3: 21:2a:9d:ef:c7:11:40:47:b2:6b:70:c3:ff:f7:8b:f9:72:3f: 7a:6b:ad:f3:56:ef:ed:df:63:97:48:5b:e3:4a:65:3a:8d:15: e3:df:7a:f7:b9:45:e0:cd:13:68:2a:64:db:d0:24:ef:12:72: 96:0f:37:50:0e:3e:19:34:55:51:d5:7e:86:35:80:2b:21:0c: bb:71:61:c9:19:fb:49:0a:49:24:a8:c8:2e:4f:7d:a4:a2:f4: d5:f3:a0:15:4b:40:aa:a1:c9:b3:c9:d7:7b:4e:20:05:14:45: a2:03:ec:38:92:e4:2e:4e:79:ee:39:e5:54:98:70:2a:9f:4d: f6:da:fe:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgmVu4b4KMmm/oaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg5NzUxMmMtOTdjNi00MTdhLTgyYTktMDdkMjg4NDBiYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwezCLLJlxkh7P6cSAl5Q1FufctA8ZOSIvuNy QzL9RSimJD1AB+HdACyNxIb3tAnSoMzS+QyAGXIbjksSdb5Xr1QgxTgmFnj3cb4F unoXEFKr0P2cZMmUgsgMVF0AOvLb9c+01w/If194yZSrvQJmPpAaragdWWN5+gZv ppr/hjYlTUP3E2T2760x+yMYYFFJKKWdEdIcSk3Z/29ktmzNZo4ilaFfOqiYGPhK ec5xgzFKfsMLY41KevD2JhbhquuSJ/E8uU+ySz6HOPEsQ8liS6ZYtUAwhgkdlyBU gwFQSjEhKW0sN3u2sfZKTJ62+/aPybctI3AWYP/HEQEP2iUwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDehUze4642ux4QGJ5wDSzxidkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU2ZWM3NDAtY2YyOC0z YzRhLWE4N2MtOGQ2MWY1NTgzOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW21oOg0FJe9xzMFqF87ZfzwDXbecvg+Uj2qRIZ5UAqFFyTCJ4IH7jN I/+cpMdZGUC0yoEq7aRDsFtZCshOp9KhzOgsmt2FMfT07iKVZ6c+OerKBloGrFOe sedFbKVQlhDBWulBLKUE1HzwCLGCuUGQGEbJA89lgYEoUtSO8yEqne/HEUBHsmtw w//3i/lyP3prrfNW7+3fY5dIW+NKZTqNFePfeve5ReDNE2gqZNvQJO8ScpYPN1AO Phk0VVHVfoY1gCshDLtxYckZ+0kKSSSoyC5PfaSi9NXzoBVLQKqhybPJ13tOIAUU RaID7DiS5C5Oee455VSYcCqfTfba/hY= -----END CERTIFICATE-----Generated at Sun Sep 27 07:10:30 2026 by rpki-client