$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa File: a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa (raw, json) Hash identifier: 57fDeF2P1V9w+rt7zJY0X7nBETYCFJlzWAaqrUl1Juw= Subject key identifier: 65:AA:35:77:30:5D:A7:EA:20:A4:93:36:BD:B0:23:13:F0:B1:A9:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C0E8E92325E4E0B84880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c0:e8:e9:23:25:e4:e0:b8:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=82e21680-df57-4eca-93f1-3d5380cc7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:66:b6:f5:96:e7:80:cb:4b:f4:b2:46:1a: 4e:52:93:87:18:1d:bf:09:4d:3d:e5:de:22:5a:33: b1:22:71:65:4a:5d:74:37:b2:8b:9f:03:42:4d:69: c7:af:15:29:12:5d:00:de:16:f6:03:c4:bc:dd:e7: ed:e4:83:2a:90:a7:22:9a:30:c1:49:ed:58:24:25: 1f:f5:d6:28:29:d7:04:59:a3:3c:71:04:bf:5f:83: c4:53:db:d6:98:ab:a7:40:82:6f:e1:e3:d3:40:bd: ac:0e:66:e8:95:1e:68:20:dc:6c:fa:7a:a5:56:6f: 7d:13:2e:ea:95:ea:c4:7d:d4:a0:ae:b7:73:44:b5: 2e:89:9d:bd:d7:c6:f7:d4:bf:74:f5:e4:78:66:fd: 30:33:64:00:66:cb:b5:89:ca:ef:54:13:ae:b4:41: 28:6f:da:f5:cf:93:2b:ba:d7:88:67:30:34:c7:27: c1:fc:5b:8a:81:98:cb:fb:7d:8d:5f:a0:de:25:bc: 0b:d9:99:fd:aa:d4:6a:24:f0:9d:cd:c9:99:c8:73: 41:0a:13:41:48:4e:51:ab:72:6b:66:c9:11:76:7d: e8:88:44:a0:77:e6:d4:da:6c:6d:ab:31:8f:1e:5d: d0:f6:1f:93:9c:75:96:d0:86:59:29:b9:82:f5:b5: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AA:35:77:30:5D:A7:EA:20:A4:93:36:BD:B0:23:13:F0:B1:A9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9f3a15d-6be2-36f8-9810-a6b0ae674189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:aa:83:11:e0:d8:0c:cd:d9:3c:70:f4:d7:b1:c2:6c:f4: c1:a8:e5:bc:fd:5e:07:6e:5a:16:dd:a4:f7:f2:2b:61:a1:75: 3b:7e:8a:0c:af:cb:6f:cd:07:59:b7:09:4e:6a:c4:92:65:ff: cf:b2:0b:d8:e9:76:74:5c:a8:04:6a:08:45:e1:19:28:ab:ae: 4a:18:6b:16:49:63:08:c4:55:85:23:54:3f:8c:f1:1b:1d:2c: dd:c2:3c:9c:8f:7f:e6:ef:26:37:0c:03:b6:86:62:0f:66:db: 25:e3:62:9f:4c:7e:16:9b:3d:30:b2:f0:b4:3e:aa:ce:1f:e1: f1:38:4d:cb:d7:c5:0d:d8:a7:c5:3f:d9:a0:bb:8b:f2:78:22: 53:c9:f2:b7:b8:4f:14:2a:ff:72:43:7a:6f:58:b5:9a:25:e1: 4c:1d:f5:10:83:69:cf:0e:c4:f8:f8:87:cf:25:e9:c6:76:5a: be:71:73:bb:27:ed:93:c1:c8:9c:9c:b3:d3:5c:1d:a7:b8:71: 02:39:c8:d8:73:a1:d2:17:19:1d:59:7a:d3:ca:e6:a1:22:2d: 7a:5b:25:6b:8f:e1:2f:52:72:56:81:19:63:4f:f8:f4:39:fa: 75:4b:fd:9c:91:7c:45:2c:48:a6:8f:cd:74:f5:c6:5f:0c:f5: 51:17:98:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsDo6SMl5OC4SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ODJlMjE2ODAtZGY1Ny00ZWNhLTkzZjEtM2Q1MzgwY2M3NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhttmtvWW54DLS/SyRhpOUpOHGB2/CU095d4i WjOxInFlSl10N7KLnwNCTWnHrxUpEl0A3hb2A8S83eft5IMqkKcimjDBSe1YJCUf 9dYoKdcEWaM8cQS/X4PEU9vWmKunQIJv4ePTQL2sDmbolR5oINxs+nqlVm99Ey7q lerEfdSgrrdzRLUuiZ2918b31L909eR4Zv0wM2QAZsu1icrvVBOutEEob9r1z5Mr uteIZzA0xyfB/FuKgZjL+32NX6DeJbwL2Zn9qtRqJPCdzcmZyHNBChNBSE5Rq3Jr ZskRdn3oiESgd+bU2mxtqzGPHl3Q9h+TnHWW0IZZKbmC9bULwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWqNXcwXafqIKSTNr2wIxPwsaltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlmM2ExNWQtNmJlMi0z NmY4LTk4MTAtYTZiMGFlNjc0MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ5qoMR4NgMzdk8cPTXscJs9MGo5bz9XgduWhbdpPfyK2GhdTt+igyv y2/NB1m3CU5qxJJl/8+yC9jpdnRcqARqCEXhGSirrkoYaxZJYwjEVYUjVD+M8Rsd LN3CPJyPf+bvJjcMA7aGYg9m2yXjYp9MfhabPTCy8LQ+qs4f4fE4TcvXxQ3Yp8U/ 2aC7i/J4IlPJ8re4TxQq/3JDem9YtZol4Uwd9RCDac8OxPj4h88l6cZ2Wr5xc7sn 7ZPByJycs9NcHae4cQI5yNhzodIXGR1ZetPK5qEiLXpbJWuP4S9SclaBGWNP+PQ5 +nVL/ZyRfEUsSKaPzXT1xl8M9VEXmIQ= -----END CERTIFICATE-----Generated at Wed Sep 23 05:41:27 2026 by rpki-client