$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa File: c23c4a08-1499-31cb-8779-beb4facfd1b7.roa (raw, json) Hash identifier: uc6hLizmikUCQ71wpONXVNJLmN6hEnTSyaUFQ1gZlF4= Subject key identifier: 39:1A:83:13:0B:7F:36:AC:6F:DA:CF:64:8D:53:1C:71:46:5D:79:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979BBB77A83DE1674F4B340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 68.86.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:bb:b7:7a:83:de:16:74:f4:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e2bd914f-5f6c-431a-8293-d4e4989da629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:13:64:bf:45:f8:53:da:71:6d:87:e5:87: 1f:9e:af:38:35:ad:b7:a2:85:e7:12:0a:36:d3:6f: 20:24:15:32:90:b8:ad:2d:c3:65:63:97:61:60:91: cb:80:6c:b2:54:0d:f6:1e:92:99:66:5a:37:d7:13: a0:83:9f:38:5c:d1:59:07:3d:b3:1b:c6:d6:01:7e: 73:1a:20:31:d3:6a:7c:f5:e6:af:93:bc:59:d9:de: 6f:f0:0b:aa:fd:9b:b7:c2:1f:ed:b1:b1:91:f6:d1: ea:17:02:09:02:cc:c5:7e:ae:5d:22:2a:ec:2e:23: a0:dc:13:a3:45:33:1e:d6:e5:78:0c:a1:46:1b:5b: 50:94:69:58:14:4d:03:43:cd:21:03:61:ec:87:2c: 76:2f:c6:63:66:2d:a6:88:6a:a3:e9:83:14:b1:b0: 6d:e1:ce:1a:4c:ef:77:65:03:cb:63:b6:43:83:a7: 2c:42:94:aa:1a:dc:ec:d0:c4:bf:32:44:25:39:59: 4b:c7:dd:43:70:51:39:bf:f8:9c:1f:eb:26:f0:5c: 12:d0:9b:18:25:b6:47:57:ef:01:e6:c9:64:e2:1b: 1a:38:3c:96:7d:cf:13:7f:b6:3b:c4:5e:49:34:70: 86:73:b9:e1:68:80:eb:88:76:21:be:16:f6:14:c2: ea:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1A:83:13:0B:7F:36:AC:6F:DA:CF:64:8D:53:1C:71:46:5D:79:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c23c4a08-1499-31cb-8779-beb4facfd1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:48:b4:50:e8:83:8d:e1:83:67:eb:94:24:45:f9:53:04:75: 15:a3:2c:3d:ba:5f:89:6e:f6:a9:fd:8b:58:7d:2d:51:46:47: a7:e1:5b:aa:e0:a0:32:fa:6f:d0:f9:e0:80:c0:83:ed:2d:2c: 9e:5c:48:13:cd:07:b0:97:ad:9a:11:36:da:78:1d:0a:52:c7: 42:6f:25:5f:78:8f:08:c0:d3:9c:b7:91:94:d9:99:d7:39:5b: db:db:20:52:26:c9:f0:1d:c1:42:a5:b2:8b:5a:96:65:8b:1e: 25:e1:5f:37:fb:0f:9c:27:11:8a:fb:0a:bd:bb:4c:70:78:04: 49:64:95:9c:9e:23:c2:9b:eb:ce:3c:cd:27:63:ea:83:e8:98: 61:de:fb:86:68:5c:1f:45:35:ef:3e:48:2b:1a:2a:74:3f:06: a0:1e:d8:67:0e:bf:4c:d0:6d:bc:ef:b4:2d:5b:89:75:03:8f: af:d3:71:f5:01:a2:9d:e9:a4:15:e3:6d:97:ee:cd:dc:7b:84: 25:65:c6:70:7e:d9:bc:b1:15:49:fe:28:66:e0:97:09:f8:cc: 41:67:a7:0a:e4:43:99:25:72:d8:a8:df:fd:e2:e0:80:38:49: 99:3d:d5:d5:55:a7:26:46:e4:f0:f8:f2:06:31:61:86:eb:0e: 4d:68:3a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jebu3eoPeFnT0s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTJiZDkxNGYtNWY2Yy00MzFhLTgyOTMtZDRlNDk4OWRhNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3YTZL9F+FPacW2H5Ycfnq84Na23ooXnEgo2 028gJBUykLitLcNlY5dhYJHLgGyyVA32HpKZZlo31xOgg584XNFZBz2zG8bWAX5z GiAx02p89eavk7xZ2d5v8Auq/Zu3wh/tsbGR9tHqFwIJAszFfq5dIirsLiOg3BOj RTMe1uV4DKFGG1tQlGlYFE0DQ80hA2Hshyx2L8ZjZi2miGqj6YMUsbBt4c4aTO93 ZQPLY7ZDg6csQpSqGtzs0MS/MkQlOVlLx91DcFE5v/icH+sm8FwS0JsYJbZHV+8B 5slk4hsaODyWfc8Tf7Y7xF5JNHCGc7nhaIDriHYhvhb2FMLqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkagxMLfzasb9rPZI1THHFGXXkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzIzYzRhMDgtMTQ5OS0z MWNiLTg3NzktYmViNGZhY2ZkMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdItFDog43hg2frlCRF+VMEdRWjLD26X4lu9qn9i1h9LVFGR6fhW6rg oDL6b9D54IDAg+0tLJ5cSBPNB7CXrZoRNtp4HQpSx0JvJV94jwjA05y3kZTZmdc5 W9vbIFImyfAdwUKlsotalmWLHiXhXzf7D5wnEYr7Cr27THB4BElklZyeI8Kb6848 zSdj6oPomGHe+4ZoXB9FNe8+SCsaKnQ/BqAe2GcOv0zQbbzvtC1biXUDj6/TcfUB op3ppBXjbZfuzdx7hCVlxnB+2byxFUn+KGbglwn4zEFnpwrkQ5klctio3/3i4IA4 SZk91dVVpyZG5PD48gYxYYbrDk1oOnY= -----END CERTIFICATE-----Generated at Mon Sep 28 12:44:22 2026 by rpki-client