$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8a09b4-1aa3-3e64-9125-abe53b1f4609.roa File: be8a09b4-1aa3-3e64-9125-abe53b1f4609.roa (raw, json) Hash identifier: 0kW2Kd8SYR/RqW26DSvBgBsa50/8BX4szS1UAarORs8= Subject key identifier: 95:B9:27:E6:31:A3:44:54:CB:D3:50:04:96:54:53:22:07:BA:40:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B638612F8A81487F2AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8a09b4-1aa3-3e64-9125-abe53b1f4609.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.48.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b6:38:61:2f:8a:81:48:7f:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=18724f5e-558a-4395-9fce-5930cd02a187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:2d:a4:7f:21:2b:0e:6b:8d:28:88:c8:94: f2:a5:fd:b8:e7:84:d1:62:8f:26:15:e1:56:bb:ef: 33:21:9d:f4:66:09:fd:17:b6:e8:41:ee:58:95:0e: 18:ee:ee:ac:0a:80:03:e4:50:43:f9:f3:9a:2b:5f: ef:59:c0:c5:34:ae:ae:30:22:35:d2:7d:59:a2:0c: 00:76:af:51:bb:25:f2:16:fb:85:6c:23:a9:ce:62: af:a5:47:2f:a2:12:ee:3d:8b:ed:e5:25:a8:1c:d7: 87:ba:b8:cb:43:b7:84:37:6f:45:14:29:2d:ac:33: a2:60:76:f5:a9:5a:f1:e6:81:2b:84:75:35:d0:83: 93:6a:02:bb:20:a7:62:4f:0c:4d:80:03:a3:f3:9e: 33:73:a8:cf:7f:5c:61:0d:0d:97:99:da:a7:69:d7: d3:e1:23:3a:70:13:e1:a2:ee:e6:23:8e:f1:c7:46: d1:56:fc:58:f9:5f:dd:f6:5e:73:0d:d1:7f:c0:ca: 48:6c:f6:7c:57:c8:b7:85:d9:e8:73:af:bf:fa:be: 54:d8:94:33:3f:b9:89:d2:2e:71:95:e5:c0:5f:35: 28:30:02:d7:af:10:1c:f8:2f:29:52:4d:c2:55:29: 98:0c:97:12:77:03:37:53:92:31:2e:7d:0a:93:60: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:27:E6:31:A3:44:54:CB:D3:50:04:96:54:53:22:07:BA:40:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be8a09b4-1aa3-3e64-9125-abe53b1f4609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d7:d9:9d:bc:62:65:e0:d5:6d:38:b6:fe:0d:53:85:86:0c: 89:26:f6:b9:26:6c:e8:e6:31:e5:85:1c:34:26:1b:39:32:81: 92:50:be:9c:bb:70:70:85:90:a7:b6:bc:3d:de:72:ae:e9:73: 22:bf:67:4b:ee:05:9e:95:0e:32:0b:82:fb:d9:2b:ef:63:f2: c6:6f:2d:45:ce:27:c0:08:0c:73:28:af:3e:e2:09:e7:9a:98: 68:a1:fa:13:15:f8:f1:91:6f:bf:21:86:3a:12:fc:f5:98:98: 3a:2c:60:ba:59:f1:26:7b:14:7e:90:2f:1d:5f:fe:2a:e0:9b: c4:a2:9c:47:c3:f2:ea:bb:42:16:ae:61:f9:17:62:72:57:7c: f8:9b:c9:76:95:2a:a7:fc:40:d7:f6:a3:22:82:ba:8a:5a:50: 2f:37:cc:da:9e:8c:93:6b:f0:f9:3a:0c:05:e5:d7:f7:ac:eb: cb:37:1a:bc:2f:42:43:7d:bc:07:27:45:f7:7e:8e:24:8f:22: 7b:63:ba:0b:a1:fe:74:bb:5b:dc:0d:9f:8e:54:db:0f:20:ac: ec:c9:fb:be:88:61:f7:0c:db:3b:e6:a8:88:21:20:ff:d3:a9: 4c:26:a3:1f:44:0f:df:ac:03:70:c1:ae:30:26:cd:3f:9f:bd: 0b:c6:62:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrY4YS+KgUh/KsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MTg3MjRmNWUtNTU4YS00Mzk1LTlmY2UtNTkzMGNkMDJhMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5QtpH8hKw5rjSiIyJTypf2454TRYo8mFeFW u+8zIZ30Zgn9F7boQe5YlQ4Y7u6sCoAD5FBD+fOaK1/vWcDFNK6uMCI10n1ZogwA dq9RuyXyFvuFbCOpzmKvpUcvohLuPYvt5SWoHNeHurjLQ7eEN29FFCktrDOiYHb1 qVrx5oErhHU10IOTagK7IKdiTwxNgAOj854zc6jPf1xhDQ2XmdqnadfT4SM6cBPh ou7mI47xx0bRVvxY+V/d9l5zDdF/wMpIbPZ8V8i3hdnoc6+/+r5U2JQzP7mJ0i5x leXAXzUoMALXrxAc+C8pUk3CVSmYDJcSdwM3U5IxLn0Kk2CTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW5J+Yxo0RUy9NQBJZUUyIHukAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU4YTA5YjQtMWFhMy0z ZTY0LTkxMjUtYWJlNTNiMWY0NjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfX2Z28YmXg1W04tv4NU4WGDIkm9rkmbOjmMeWFHDQmGzkygZJQvpy7 cHCFkKe2vD3ecq7pcyK/Z0vuBZ6VDjILgvvZK+9j8sZvLUXOJ8AIDHMorz7iCeea mGih+hMV+PGRb78hhjoS/PWYmDosYLpZ8SZ7FH6QLx1f/irgm8SinEfD8uq7Qhau YfkXYnJXfPibyXaVKqf8QNf2oyKCuopaUC83zNqejJNr8Pk6DAXl1/es68s3Grwv QkN9vAcnRfd+jiSPIntjuguh/nS7W9wNn45U2w8grOzJ+76IYfcM2zvmqIghIP/T qUwmox9ED9+sA3DBrjAmzT+fvQvGYhM= -----END CERTIFICATE-----Generated at Thu Sep 24 20:26:42 2026 by rpki-client