$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653ae65-015d-3741-9775-d38038709f40.roa File: 9653ae65-015d-3741-9775-d38038709f40.roa (raw, json) Hash identifier: Er4E9p41V+/TYEHSrVvDR3OqdyKTBG+tPkhDFks8dkU= Subject key identifier: E0:AB:C0:33:5D:A9:D2:BB:D0:E0:60:E9:72:7B:FF:DF:4F:85:B3:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119ECC77BCBACC5EF56BEEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653ae65-015d-3741-9775-d38038709f40.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 68.83.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:cc:77:bc:ba:cc:5e:f5:6b:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=a2271454-2d0e-4d89-89a3-66bc8010cfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:4d:57:c4:31:50:0e:16:84:a8:d3:93:17: 8c:e9:39:c9:26:c3:b4:72:64:90:19:95:6a:44:66: 2f:97:e1:e5:5b:5f:aa:04:4c:3d:3e:d0:0f:d4:15: 06:43:a8:16:38:43:83:f1:60:2c:29:08:56:36:3b: a3:06:90:64:e2:5f:2f:a2:a4:71:81:8a:f0:d2:15: 67:34:ac:5f:b9:4e:07:5f:1b:04:22:98:b8:c8:02: b0:85:64:ee:fc:9c:c7:a9:36:63:b1:15:63:f6:76: 14:42:11:ac:31:13:34:5f:91:4f:b3:66:55:ee:8f: 46:6b:24:1e:6b:1a:e5:d3:58:76:fa:d0:15:35:25: a7:10:49:c2:2d:95:89:74:b6:a0:97:5a:35:ae:84: 91:74:34:b6:66:31:81:ad:32:c5:4a:2a:c4:59:72: 06:81:e3:4e:25:d6:1f:cc:fc:40:b2:94:ad:20:b6: b1:7b:e8:95:3a:a2:9c:d7:37:19:d9:8a:ea:e2:c1: 58:2e:ca:c0:d6:7d:1d:98:5b:50:45:92:45:0a:87: 3c:f1:67:9b:43:63:0e:f1:fc:8d:80:8a:9f:f9:ef: 00:f4:8e:8c:4c:a9:f8:1e:f1:5e:11:d7:bf:8b:2c: 5a:6e:50:57:64:f2:3a:5b:6a:58:40:57:9e:34:9a: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AB:C0:33:5D:A9:D2:BB:D0:E0:60:E9:72:7B:FF:DF:4F:85:B3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653ae65-015d-3741-9775-d38038709f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:da:7a:69:8d:6e:9b:ec:40:2b:f5:7d:fd:97:5c:56:74:87: 9d:30:25:5a:d8:c1:70:f4:f2:54:66:ef:08:4f:55:e0:04:8e: ab:6d:a1:8a:ac:1d:b1:eb:7a:ee:49:e8:3e:57:5e:db:86:0b: ff:8e:4a:82:48:b1:0c:a8:a5:ae:26:2d:50:01:24:4b:72:6f: f5:4d:ff:99:02:80:c4:8c:f8:b8:fb:03:7d:40:bf:a4:ea:68: 9b:df:72:43:49:eb:01:d4:08:10:13:28:af:87:6c:d8:48:3e: d8:5c:46:05:38:c4:5a:fd:f7:9a:c2:32:94:e0:68:6f:56:c0: d7:54:d8:17:6c:0e:22:d3:a1:43:59:68:0d:f7:b6:23:19:14: 03:68:97:5a:ff:20:33:a1:89:cf:71:ae:3b:8d:2f:dd:c3:0b: 78:36:55:c1:61:e4:28:ce:8a:68:76:d1:ba:47:e8:08:86:a7: d9:b0:0e:6e:27:6a:25:ea:82:80:fd:0b:61:7e:47:47:62:e0: 74:9d:b3:19:78:f3:22:84:d2:0c:87:b1:ab:7d:e1:cf:5c:aa: 11:f4:44:41:4c:a1:e6:65:be:fd:bf:51:db:fe:85:97:3c:18: a1:4f:1d:61:dc:a7:1e:dd:9e:c7:a9:35:5d:52:aa:ec:cc:aa: c4:c2:ea:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnsx3vLrMXvVr7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIyNzE0NTQtMmQwZS00ZDg5LTg5YTMtNjZiYzgwMTBjZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgElNV8QxUA4WhKjTkxeM6TnJJsO0cmSQGZVq RGYvl+HlW1+qBEw9PtAP1BUGQ6gWOEOD8WAsKQhWNjujBpBk4l8voqRxgYrw0hVn NKxfuU4HXxsEIpi4yAKwhWTu/JzHqTZjsRVj9nYUQhGsMRM0X5FPs2ZV7o9GayQe axrl01h2+tAVNSWnEEnCLZWJdLagl1o1roSRdDS2ZjGBrTLFSirEWXIGgeNOJdYf zPxAspStILaxe+iVOqKc1zcZ2Yrq4sFYLsrA1n0dmFtQRZJFCoc88WebQ2MO8fyN gIqf+e8A9I6MTKn4HvFeEde/iyxablBXZPI6W2pYQFeeNJrZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCrwDNdqdK70OBg6XJ7/99PhbMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY1M2FlNjUtMDE1ZC0z NzQxLTk3NzUtZDM4MDM4NzA5ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKraemmNbpvsQCv1ff2XXFZ0h50wJVrYwXD08lRm7whPVeAEjqttoYqs HbHreu5J6D5XXtuGC/+OSoJIsQyopa4mLVABJEtyb/VN/5kCgMSM+Lj7A31Av6Tq aJvfckNJ6wHUCBATKK+HbNhIPthcRgU4xFr995rCMpTgaG9WwNdU2BdsDiLToUNZ aA33tiMZFANol1r/IDOhic9xrjuNL93DC3g2VcFh5CjOimh20bpH6AiGp9mwDm4n aiXqgoD9C2F+R0di4HSdsxl48yKE0gyHsat94c9cqhH0REFMoeZlvv2/Udv+hZc8 GKFPHWHcpx7dnsepNV1SquzMqsTC6nY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:34:04 2026 by rpki-client