$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a9f2e03-40e9-34b0-9bfa-9a60c76f6290.roa File: 7a9f2e03-40e9-34b0-9bfa-9a60c76f6290.roa (raw, json) Hash identifier: 6gVsauQYsD+RrqHbmCYyrSv3OsSn7P1DP61hvU1cS+g= Subject key identifier: 29:8C:E1:C7:DC:8B:36:91:3C:0C:6A:5E:31:45:1D:C0:98:E4:F3:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863D9D152E860E8F32100C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a9f2e03-40e9-34b0-9bfa-9a60c76f6290.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.40.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:d9:d1:52:e8:60:e8:f3:21:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=254c1d6f-c972-473b-8a04-fb799e8620b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:bd:cf:76:08:bb:7b:09:b5:78:a5:3c:17: 77:13:39:44:24:b8:b3:af:05:0e:af:a7:76:53:b1: b9:6d:d7:23:bb:78:18:e5:f7:b5:ae:f7:31:ae:f3: 6e:5e:5c:74:b1:dc:11:0f:f5:58:4a:90:40:3a:d3: 18:a1:00:53:f8:01:70:47:f5:17:c6:77:75:c5:81: d7:19:15:44:63:17:b5:45:5a:79:9d:f0:27:51:bc: ee:0f:52:67:1d:e6:e1:47:3a:61:a4:8a:a0:c7:cf: 18:f0:2b:e5:a0:62:03:3d:4e:47:a9:52:8a:9f:12: de:03:dc:04:0c:51:19:1e:8b:a7:77:a2:a4:12:f0: d5:fe:fc:45:39:a2:70:00:3c:f2:5d:6e:b5:09:54: 79:d0:64:83:75:f2:4f:b4:5e:79:1c:c1:0d:bf:af: 63:e9:cb:17:f2:da:b8:2d:8d:4f:5e:36:bf:8b:6e: bb:25:5c:e1:c0:69:f9:45:c4:e9:a2:93:08:8a:ff: 51:b1:48:33:60:d8:e4:55:20:a7:f1:08:a2:6b:33: 12:5e:c4:62:4f:98:0e:83:01:e4:1c:8e:50:20:d0: 9c:e1:75:31:46:a2:2f:d5:98:6e:44:c2:bd:7f:7f: 69:28:03:4a:64:43:db:b5:fb:28:bf:3d:a0:9e:f3: c6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8C:E1:C7:DC:8B:36:91:3C:0C:6A:5E:31:45:1D:C0:98:E4:F3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a9f2e03-40e9-34b0-9bfa-9a60c76f6290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:73:ab:59:10:f8:d0:69:5c:0c:08:e2:d6:e1:04:69:07:a5: 0c:6e:c9:95:a8:7e:2d:b6:2d:f1:88:0f:0c:ff:3b:64:4a:f1: 84:b3:f5:05:eb:70:06:02:13:63:1b:a6:3c:78:69:15:64:7c: f1:2c:b5:21:94:16:05:72:52:6e:61:f7:d2:48:2e:7b:ea:f6: ec:59:bf:e5:0c:77:73:d3:91:fe:00:67:09:a1:09:3b:46:8f: 5e:2d:f7:2b:5e:3e:36:9a:7c:75:05:9e:c3:b8:49:f7:a4:14: b3:7b:80:52:c7:60:e2:b2:60:29:95:1c:c9:57:5a:b8:bf:3a: 83:c4:79:01:60:9c:34:5c:07:b4:7e:ea:4e:01:a4:11:1a:a1: 3f:67:ec:60:07:cb:81:8c:c0:87:fd:74:0a:40:91:f6:8b:78: 70:74:9f:75:8b:1c:60:c9:5a:0e:41:49:f6:bc:b9:14:75:4d: 08:e0:b8:bc:68:36:7c:84:dd:89:5e:63:07:32:16:95:af:48: 91:e7:b4:e0:37:4b:78:1d:b5:fd:d0:71:8a:3a:89:f9:58:8d: aa:7d:21:76:b1:25:3d:fc:d8:1b:24:bd:38:54:92:b1:30:2f: 9c:1c:53:fe:fe:76:9d:31:f1:13:f3:d0:c9:95:2f:69:6f:56: 28:ce:56:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9nRUuhg6PMhAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjU0YzFkNmYtYzk3Mi00NzNiLThhMDQtZmI3OTllODYyMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwji9z3YIu3sJtXilPBd3EzlEJLizrwUOr6d2 U7G5bdcju3gY5fe1rvcxrvNuXlx0sdwRD/VYSpBAOtMYoQBT+AFwR/UXxnd1xYHX GRVEYxe1RVp5nfAnUbzuD1JnHebhRzphpIqgx88Y8CvloGIDPU5HqVKKnxLeA9wE DFEZHound6KkEvDV/vxFOaJwADzyXW61CVR50GSDdfJPtF55HMENv69j6csX8tq4 LY1PXja/i267JVzhwGn5RcTpopMIiv9RsUgzYNjkVSCn8QiiazMSXsRiT5gOgwHk HI5QINCc4XUxRqIv1ZhuRMK9f39pKANKZEPbtfsovz2gnvPGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmM4cfcizaRPAxqXjFFHcCY5POtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E5ZjJlMDMtNDBlOS0z NGIwLTliZmEtOWE2MGM3NmY2MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFzq1kQ+NBpXAwI4tbhBGkHpQxuyZWofi22LfGIDwz/O2RK8YSz9QXr cAYCE2Mbpjx4aRVkfPEstSGUFgVyUm5h99JILnvq9uxZv+UMd3PTkf4AZwmhCTtG j14t9ytePjaafHUFnsO4SfekFLN7gFLHYOKyYCmVHMlXWri/OoPEeQFgnDRcB7R+ 6k4BpBEaoT9n7GAHy4GMwIf9dApAkfaLeHB0n3WLHGDJWg5BSfa8uRR1TQjguLxo NnyE3YleYwcyFpWvSJHntOA3S3gdtf3QcYo6iflYjap9IXaxJT382BskvThUkrEw L5wcU/7+dp0x8RPz0MmVL2lvVijOVgA= -----END CERTIFICATE-----Generated at Thu Sep 24 22:28:24 2026 by rpki-client