$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf02d28e-fec7-3bac-ab5d-447ad2714b12.roa File: bf02d28e-fec7-3bac-ab5d-447ad2714b12.roa (raw, json) Hash identifier: 2kOXBVsHbR8tkmVB4f3cNcCMX+kxsnXwM31ezYKkS8w= Subject key identifier: DF:E9:3D:66:F9:26:28:55:B6:70:B3:CE:A7:87:48:40:23:E2:17:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B2D5067CE97A0C9B6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf02d28e-fec7-3bac-ab5d-447ad2714b12.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.42.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b2:d5:06:7c:e9:7a:0c:9b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d0c7dfdb-b206-46d1-8204-cbf5c658d9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:18:0a:ee:69:d4:7a:8e:b2:05:bb:88:c2: af:b4:10:ea:f8:45:9c:c6:78:75:f3:86:09:21:10: 79:a4:4a:6a:8f:8d:42:84:95:4e:20:e9:0b:e8:ea: 51:3f:27:b9:e4:d3:e8:44:e9:2a:66:ce:91:63:7d: 3d:49:53:85:b3:28:3b:08:c1:65:e5:e5:21:d3:b6: 36:80:4c:89:0e:b9:67:98:c0:4f:3a:59:81:2e:9b: 1f:55:b7:4b:da:ba:2d:25:6c:03:09:11:82:0c:f4: ff:96:ea:49:71:a6:93:34:76:cd:52:6a:8a:86:a5: 55:85:b1:71:93:35:76:bf:cf:ab:bd:97:0a:b5:24: 63:7d:cc:a8:bc:5c:35:3f:ed:a3:23:52:ba:f3:e0: 07:4c:df:f3:97:96:ae:8e:bd:6b:9b:7c:44:15:cf: c7:67:73:67:a1:83:e9:c0:94:e8:0b:2e:8e:dc:af: b6:c8:68:ab:e3:01:9f:8d:e2:ed:a7:f6:a2:d7:77: a1:27:b8:64:24:c2:da:7c:67:33:73:85:d7:2e:bf: e7:a1:fd:56:06:3e:fd:30:2a:6b:31:0c:13:90:9c: 95:c9:5e:08:29:c9:9a:e8:a8:b6:c7:ea:d7:67:7e: 97:1b:d2:6b:4b:3c:dd:80:df:56:60:9e:39:26:78: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:3D:66:F9:26:28:55:B6:70:B3:CE:A7:87:48:40:23:E2:17:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf02d28e-fec7-3bac-ab5d-447ad2714b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2f:41:c2:1c:ee:ed:07:49:69:c4:7b:01:7e:ea:f5:b3:80: fa:84:49:ac:b3:e7:37:f7:9f:e0:64:ac:cf:c2:f3:50:3f:e9: 37:5b:ab:79:69:b7:4c:3c:99:6e:db:18:93:9b:50:4c:77:c2: fb:1a:a8:f0:46:c7:55:17:37:ab:89:12:f0:06:ed:cd:dc:e9: 64:29:7b:af:65:35:38:9f:1a:84:d0:25:ee:30:f4:fa:a5:b3: 7b:e6:d9:0b:16:1d:15:16:23:c6:37:0c:ff:ee:33:a3:e9:32: a9:02:7d:16:a4:6b:34:68:01:f5:f0:8e:53:c9:2a:a3:4e:37: 02:b9:ac:60:37:73:86:b5:17:e2:16:aa:91:3d:42:aa:d0:87: e0:40:04:5f:2b:ec:72:d4:41:b2:69:16:c0:5d:cc:1c:47:ed: b7:86:1f:5e:47:08:ec:82:5b:c9:e6:ad:8b:4b:52:67:9b:7f: 38:7a:bf:15:fe:52:c2:2c:cd:a5:87:a9:6c:61:82:19:f0:d4: 65:b6:81:01:49:af:be:1a:aa:4c:9b:d8:93:82:6c:88:72:57: f7:63:35:4e:43:9a:d2:52:be:b5:55:59:a1:bc:87:99:1d:29: 79:ee:c6:e4:cd:ef:86:4a:8f:a5:4f:80:0a:58:51:f4:f7:23: e9:6d:37:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrLVBnzpegybZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDBjN2RmZGItYjIwNi00NmQxLTgyMDQtY2JmNWM2NThkOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtwYCu5p1HqOsgW7iMKvtBDq+EWcxnh184YJ IRB5pEpqj41ChJVOIOkL6OpRPye55NPoROkqZs6RY309SVOFsyg7CMFl5eUh07Y2 gEyJDrlnmMBPOlmBLpsfVbdL2rotJWwDCRGCDPT/lupJcaaTNHbNUmqKhqVVhbFx kzV2v8+rvZcKtSRjfcyovFw1P+2jI1K68+AHTN/zl5aujr1rm3xEFc/HZ3NnoYPp wJToCy6O3K+2yGir4wGfjeLtp/ai13ehJ7hkJMLafGczc4XXLr/nof1WBj79MCpr MQwTkJyVyV4IKcma6Ki2x+rXZ36XG9JrSzzdgN9WYJ45Jni/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/pPWb5JihVtnCzzqeHSEAj4hdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYwMmQyOGUtZmVjNy0z YmFjLWFiNWQtNDQ3YWQyNzE0YjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgvQcIc7u0HSWnEewF+6vWzgPqESayz5zf3n+BkrM/C81A/6Tdbq3lp t0w8mW7bGJObUEx3wvsaqPBGx1UXN6uJEvAG7c3c6WQpe69lNTifGoTQJe4w9Pql s3vm2QsWHRUWI8Y3DP/uM6PpMqkCfRakazRoAfXwjlPJKqNONwK5rGA3c4a1F+IW qpE9QqrQh+BABF8r7HLUQbJpFsBdzBxH7beGH15HCOyCW8nmrYtLUmebfzh6vxX+ UsIszaWHqWxhghnw1GW2gQFJr74aqkyb2JOCbIhyV/djNU5DmtJSvrVVWaG8h5kd KXnuxuTN74ZKj6VPgApYUfT3I+ltN4I= -----END CERTIFICATE-----Generated at Mon Oct 12 01:00:20 2026 by rpki-client