$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa File: afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa (raw, json) Hash identifier: I2k0Jo5b3Ci417pfqvAMJ/f9i3kg1qfmXE24oR7EAas= Subject key identifier: 19:B3:F9:CE:B0:55:91:C7:6C:31:04:09:8C:25:6A:7E:8B:22:B6:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA788E57D264758F84F101D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 68.57.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:e5:7d:26:47:58:f8:4f:10:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=87285d42-37cd-44d5-9b2e-87e5d4e2ce40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:fe:00:93:f3:c9:07:b5:95:44:2e:b7:fa: 9d:59:b0:03:01:67:b1:ca:00:97:ad:00:d5:98:7c: a2:dd:5a:ad:af:00:07:8f:8b:8b:ab:77:03:46:c6: 71:ce:59:fb:63:1e:50:83:6f:ba:98:34:3e:06:87: e7:9f:c9:6b:b6:7a:6d:c6:d1:6a:96:1f:29:b4:b2: 63:41:77:61:d9:5c:0f:2d:26:f9:0c:32:ed:c2:b5: b4:ae:09:59:26:7b:31:bb:9f:78:3f:b2:71:ec:d1: c9:48:cb:67:09:6b:bf:58:51:a9:0c:0a:b5:13:fd: c6:99:32:a5:88:d6:ec:d4:60:9b:9e:b3:b8:d9:ca: 16:f6:97:76:1a:bc:2a:b5:4e:17:d2:6c:10:c6:6f: db:66:1a:7f:11:54:41:91:2f:1b:e9:d7:73:2b:55: 14:c1:36:2b:b3:1f:61:65:d5:cb:7a:ff:b9:1b:3e: 84:6a:77:6d:9a:54:b6:a0:10:c5:88:74:18:22:50: f2:28:1b:38:45:b0:b4:4b:72:a4:88:6b:66:ab:cb: ac:1c:ad:e1:e6:e7:d9:0e:62:40:cb:95:fa:bf:b7: f6:19:db:b1:87:f6:fa:aa:43:11:53:6e:9b:54:69: 47:2c:01:e9:ad:fd:83:6c:20:77:5b:0c:d0:ba:ae: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B3:F9:CE:B0:55:91:C7:6C:31:04:09:8C:25:6A:7E:8B:22:B6:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:29:7c:87:29:d8:81:ca:2b:dc:d4:d3:fe:16:4b:c2:85: d4:0d:52:32:0a:16:bd:19:3a:2f:5f:08:27:6c:1f:af:36:4e: 01:b0:25:32:94:b8:bc:c8:c9:f5:cd:08:af:6b:41:bc:76:d2: 16:3c:63:f4:80:16:e5:f2:81:31:c9:6e:10:b6:7a:7e:80:ab: e2:ec:40:38:24:b6:e5:5a:7e:b2:17:fe:63:c8:85:7a:b3:29: 1d:1a:09:93:5d:65:40:40:5e:fb:8d:5d:05:f0:ef:72:07:2c: df:67:ed:d0:ed:85:f2:8e:35:36:65:7e:f1:5b:91:d7:b8:bb: 3b:4c:7c:ab:2e:da:f8:73:f5:d2:c9:bd:17:cc:34:ff:4f:ef: f7:21:8a:7d:61:a1:c2:e9:40:25:1c:71:98:6e:a9:3d:2c:57: 25:05:1d:aa:74:c3:49:6d:95:ec:e9:75:55:0c:03:a9:e6:f1: 1f:2a:60:45:f3:42:6c:f5:6b:03:23:0a:43:5f:05:02:33:be: ee:07:0d:e9:27:64:04:a7:c4:9d:08:80:39:46:1d:4d:4f:c6: ba:4c:82:2b:6f:37:a3:d6:8f:a3:45:7c:02:ec:28:6a:74:4c: 2d:e6:c1:d6:ce:9e:dc:fd:07:99:27:2a:b2:75:3a:36:f8:30: 57:98:38:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niOV9JkdY+E8QHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODcyODVkNDItMzdjZC00NGQ1LTliMmUtODdlNWQ0ZTJjZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi47+AJPzyQe1lUQut/qdWbADAWexygCXrQDV mHyi3VqtrwAHj4uLq3cDRsZxzln7Yx5Qg2+6mDQ+Bofnn8lrtnptxtFqlh8ptLJj QXdh2VwPLSb5DDLtwrW0rglZJnsxu594P7Jx7NHJSMtnCWu/WFGpDAq1E/3GmTKl iNbs1GCbnrO42coW9pd2GrwqtU4X0mwQxm/bZhp/EVRBkS8b6ddzK1UUwTYrsx9h ZdXLev+5Gz6EandtmlS2oBDFiHQYIlDyKBs4RbC0S3KkiGtmq8usHK3h5ufZDmJA y5X6v7f2Gduxh/b6qkMRU26bVGlHLAHprf2DbCB3WwzQuq4cewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmz+c6wVZHHbDEECYwlan6LIrYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZiNzJkNWItM2YxYi0z N2RiLTgxNDEtZmE2ZDhhNTQ5NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6NKXyHKdiByivc1NP+FkvChdQNUjIKFr0ZOi9fCCdsH682TgGwJTKU uLzIyfXNCK9rQbx20hY8Y/SAFuXygTHJbhC2en6Aq+LsQDgktuVafrIX/mPIhXqz KR0aCZNdZUBAXvuNXQXw73IHLN9n7dDthfKONTZlfvFbkde4uztMfKsu2vhz9dLJ vRfMNP9P7/chin1hocLpQCUccZhuqT0sVyUFHap0w0ltlezpdVUMA6nm8R8qYEXz Qmz1awMjCkNfBQIzvu4HDeknZASnxJ0IgDlGHU1PxrpMgitvN6PWj6NFfALsKGp0 TC3mwdbOntz9B5knKrJ1Ojb4MFeYOEo= -----END CERTIFICATE-----Generated at Thu Sep 24 02:32:52 2026 by rpki-client