$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa File: 8b0133f6-1583-3502-8817-00f78f135afb.roa (raw, json) Hash identifier: fIX3sS0lf22jYzXuu8vnAaLbHWqtHGFgP2LmgvxbPkg= Subject key identifier: 7A:A7:CC:6F:45:AB:A4:5E:95:EF:53:C4:CD:43:56:12:77:71:15:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49784E86E28B041B5DA19400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21508 IP address blocks: 68.86.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:4e:86:e2:8b:04:1b:5d:a1:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cb3d0717-19b3-4fd9-ab1e-8bfdb3c46576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:dd:7f:c8:57:7b:34:99:ad:16:8f:dc:7e: 1e:0c:13:a5:1a:ff:2f:a2:10:5c:28:57:ff:75:74: 9f:81:d5:47:3f:21:f8:4e:71:8c:e2:c3:f8:c5:ba: 1b:ac:75:9e:75:37:58:d9:38:9e:3f:7d:47:43:14: 02:15:7f:ed:27:1a:9e:cb:dc:1e:3c:f7:e6:49:0a: 54:b3:84:75:c9:89:7b:31:ce:0d:de:12:24:d4:74: fd:c9:20:07:3b:a3:e1:6c:a4:dd:16:b6:af:9b:20: 19:c1:a9:21:61:46:82:dd:af:a3:c5:08:46:9d:d9: 41:f2:1d:fd:90:2c:b8:69:e9:a8:44:50:86:d3:48: f5:4d:7a:7d:03:71:32:37:ea:e1:e9:95:e0:d1:76: b9:60:f2:d6:27:1f:5c:0f:05:3d:62:5e:5b:0c:8a: 53:e7:97:21:05:96:73:50:0f:33:60:5b:8f:9a:7f: d3:e8:1d:01:ab:c4:8e:cb:e2:dc:b2:be:82:4b:6a: 64:c5:b5:3b:ec:7a:7e:e9:38:d4:8a:65:cf:ac:74: 86:5c:6d:d4:d8:0a:81:c8:58:7d:8d:5f:1c:7c:99: e6:4f:af:c3:ce:01:b7:f2:b9:0f:b4:5a:c8:01:b5: c6:61:0f:9c:88:12:43:97:78:41:14:55:ae:18:a8: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:CC:6F:45:AB:A4:5E:95:EF:53:C4:CD:43:56:12:77:71:15:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0133f6-1583-3502-8817-00f78f135afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3f:96:65:83:fd:c4:36:3e:f9:65:78:88:8b:3f:4d:f1:14: 60:f2:99:2d:df:4e:14:b0:a0:10:49:04:96:99:8a:d8:dc:ea: 94:3a:22:dc:b3:e2:45:d2:64:78:22:39:87:57:35:0d:b5:d0: 3f:be:86:6f:ed:f4:e9:32:80:7a:06:80:91:82:3d:b9:66:33: 68:3a:f5:71:0f:8a:41:7b:58:35:39:4a:e5:8b:e2:51:db:9d: fe:5d:bb:75:4c:7e:b2:17:07:d3:9b:a9:97:8a:b7:0e:be:39: 90:7c:f9:fb:bc:f3:f9:58:d1:56:27:c8:16:60:39:8f:61:ec: 97:38:08:78:ab:fc:54:b5:05:4e:49:57:9d:d2:7a:e4:e9:c7: 59:60:f0:0a:e7:83:66:70:12:43:f2:0a:a3:f8:33:6d:14:a5: f1:3a:7f:76:bf:8a:f7:cd:32:e6:9b:62:1b:ca:2f:d6:86:05: 49:44:de:b4:e9:18:e2:25:ee:26:c4:bc:2d:26:a1:a5:dd:c4: 9b:91:c0:12:39:cc:8e:c6:8b:74:31:ec:cc:49:e0:27:65:8e: 3a:06:a9:59:b3:53:3b:33:06:9d:98:d1:ef:5b:e3:57:7c:85: d5:73:e1:da:04:1b:f7:82:df:93:d9:c8:3d:8c:bd:78:61:5a: 0a:b2:a5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeE6G4osEG12hlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2IzZDA3MTctMTliMy00ZmQ5LWFiMWUtOGJmZGIzYzQ2NTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigPdf8hXezSZrRaP3H4eDBOlGv8vohBcKFf/ dXSfgdVHPyH4TnGM4sP4xbobrHWedTdY2TieP31HQxQCFX/tJxqey9wePPfmSQpU s4R1yYl7Mc4N3hIk1HT9ySAHO6PhbKTdFravmyAZwakhYUaC3a+jxQhGndlB8h39 kCy4aemoRFCG00j1TXp9A3EyN+rh6ZXg0Xa5YPLWJx9cDwU9Yl5bDIpT55chBZZz UA8zYFuPmn/T6B0Bq8SOy+Lcsr6CS2pkxbU77Hp+6TjUimXPrHSGXG3U2AqByFh9 jV8cfJnmT6/DzgG38rkPtFrIAbXGYQ+ciBJDl3hBFFWuGKj3nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqnzG9Fq6Rele9TxM1DVhJ3cRVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIwMTMzZjYtMTU4My0z NTAyLTg4MTctMDBmNzhmMTM1YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc/lmWD/cQ2PvlleIiLP03xFGDymS3fThSwoBBJBJaZitjc6pQ6Ityz 4kXSZHgiOYdXNQ210D++hm/t9OkygHoGgJGCPblmM2g69XEPikF7WDU5SuWL4lHb nf5du3VMfrIXB9ObqZeKtw6+OZB8+fu88/lY0VYnyBZgOY9h7Jc4CHir/FS1BU5J V53SeuTpx1lg8Arng2ZwEkPyCqP4M20UpfE6f3a/ivfNMuabYhvKL9aGBUlE3rTp GOIl7ibEvC0moaXdxJuRwBI5zI7Gi3Qx7MxJ4CdljjoGqVmzUzszBp2Y0e9b41d8 hdVz4doEG/eC35PZyD2MvXhhWgqype8= -----END CERTIFICATE-----Generated at Mon Sep 28 20:58:06 2026 by rpki-client