$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa File: 89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa (raw, json) Hash identifier: qFXwtD0R8hY9OLsuYP3Ijt1nQnLK89sUr18PfEiIzIY= Subject key identifier: A2:C6:39:B3:48:6F:17:20:EB:0D:64:CC:08:A3:4B:0E:50:AC:B9:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C20607A2EACB93532D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c2:06:07:a2:ea:cb:93:53:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=7ae50b83-c0ca-4ab1-987f-41002f8d2f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:89:e3:0f:c0:43:52:a6:a4:c6:fc:0e:81: e8:0f:19:89:2f:b4:3b:a8:f9:c0:a4:20:31:61:d8: ff:77:99:b1:27:5c:00:a6:d0:e2:4d:c1:b6:95:f2: b5:c6:40:00:06:9a:98:8d:a5:ac:1f:74:b2:0b:4e: 17:c5:07:c1:69:92:86:ba:be:a2:b3:47:49:80:1a: 07:d4:35:40:4d:19:09:3b:6f:af:ca:24:d9:84:88: 75:a7:d6:74:ff:f3:2a:97:dd:8f:b1:ca:37:e7:3c: e6:f7:56:b6:23:85:06:77:2e:a7:25:3c:c5:2c:1d: a9:64:ea:df:91:a9:a1:56:83:7c:cf:d2:e2:02:78: 1c:15:c9:3a:a9:b0:15:d4:3c:60:58:d3:99:3e:e8: 30:61:1c:74:4a:59:a6:10:14:95:f9:91:44:09:cf: c6:09:2a:c1:50:35:7c:c8:59:04:e9:74:8e:31:97: 71:01:f4:e6:6c:5d:08:71:25:4d:62:3e:dc:51:fd: 10:98:bc:01:99:5b:4a:a0:c4:24:99:d1:30:ab:c3: cc:06:93:06:07:03:53:54:30:c2:ff:b4:c5:b9:11: 13:ce:65:b8:d9:65:2b:f8:0b:ea:27:f1:72:08:e6: 51:6b:cd:57:0c:49:ed:22:0f:a9:dc:fd:01:d7:33: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:39:B3:48:6F:17:20:EB:0D:64:CC:08:A3:4B:0E:50:AC:B9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b5c371-5c5c-33e3-83c7-eb83f20ca006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:99:56:bc:52:f2:59:2a:fc:da:00:e5:bd:08:22:b5:6c:7e: fd:12:fd:20:0a:19:ee:e6:42:c6:59:64:c0:6e:d6:f8:57:67: d9:40:ad:6b:fa:99:01:2d:0a:89:62:47:93:d5:4d:30:8b:a9: f4:f6:e1:9b:e0:76:68:70:ee:03:79:dc:57:5e:15:92:0f:f2: 11:81:07:f1:33:af:ab:17:93:64:3e:17:e2:ea:4a:40:69:e1: b9:7a:e8:0f:a4:83:57:ba:ca:11:d1:74:60:a0:73:1e:57:13: 8f:e0:b9:1e:40:42:31:ee:0f:21:3a:3e:25:81:e8:46:f1:fa: c0:74:1e:2a:0c:b6:a1:e7:36:e4:5a:75:13:5b:fb:f8:29:cb: 48:d3:9b:13:1a:df:ef:66:9f:90:d2:ea:5f:10:b6:a3:40:f7: 2f:68:03:d1:dd:56:a7:b6:13:f0:c2:f2:f3:46:51:ad:5b:23: a3:9c:d5:b7:0e:66:67:dc:cf:5d:01:47:c5:79:01:8a:a0:11: 0d:f4:24:4a:76:74:7b:91:54:ac:dd:f0:88:3f:9b:ed:7c:d3: 84:81:cc:4c:75:af:1d:c3:28:17:9a:9a:75:aa:71:6c:14:7d: f4:0a:e3:c8:67:54:45:79:2a:b5:c5:6d:c7:56:af:70:49:09: 88:e8:ac:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsIGB6Lqy5NTLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk N2FlNTBiODMtYzBjYS00YWIxLTk4N2YtNDEwMDJmOGQyZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4uJ4w/AQ1KmpMb8DoHoDxmJL7Q7qPnApCAx Ydj/d5mxJ1wAptDiTcG2lfK1xkAABpqYjaWsH3SyC04XxQfBaZKGur6is0dJgBoH 1DVATRkJO2+vyiTZhIh1p9Z0//Mql92Psco35zzm91a2I4UGdy6nJTzFLB2pZOrf kamhVoN8z9LiAngcFck6qbAV1DxgWNOZPugwYRx0SlmmEBSV+ZFECc/GCSrBUDV8 yFkE6XSOMZdxAfTmbF0IcSVNYj7cUf0QmLwBmVtKoMQkmdEwq8PMBpMGBwNTVDDC /7TFuRETzmW42WUr+AvqJ/FyCOZRa81XDEntIg+p3P0B1zNr3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLGObNIbxcg6w1kzAijSw5QrLnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliNWMzNzEtNWM1Yy0z M2UzLTgzYzctZWI4M2YyMGNhMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2ZVrxS8lkq/NoA5b0IIrVsfv0S/SAKGe7mQsZZZMBu1vhXZ9lArWv6 mQEtColiR5PVTTCLqfT24Zvgdmhw7gN53FdeFZIP8hGBB/Ezr6sXk2Q+F+LqSkBp 4bl66A+kg1e6yhHRdGCgcx5XE4/guR5AQjHuDyE6PiWB6Ebx+sB0HioMtqHnNuRa dRNb+/gpy0jTmxMa3+9mn5DS6l8QtqNA9y9oA9HdVqe2E/DC8vNGUa1bI6Oc1bcO Zmfcz10BR8V5AYqgEQ30JEp2dHuRVKzd8Ig/m+1804SBzEx1rx3DKBeamnWqcWwU ffQK48hnVEV5KrXFbcdWr3BJCYjorDM= -----END CERTIFICATE-----Generated at Thu Sep 24 04:39:06 2026 by rpki-client