$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9e72f1c-9a72-365a-b950-2b74bb77575c.roa File: c9e72f1c-9a72-365a-b950-2b74bb77575c.roa (raw, json) Hash identifier: r4gc7UhEi1b1vkwDBnWmuGH4F3kmjYilJ23ncLT3LB0= Subject key identifier: A1:35:C0:64:7B:70:BD:2E:87:DD:16:07:F7:F3:51:B9:B3:3B:AD:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B6F36911F813E9EF2900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9e72f1c-9a72-365a-b950-2b74bb77575c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.48.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b6:f3:69:11:f8:13:e9:ef:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=e53f57b9-d62f-4d1c-afa1-ef0f2b34e840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:a5:2f:91:23:1a:09:63:da:51:ab:50:61: d8:a7:a3:e0:59:28:2d:52:1b:c7:56:4e:ce:bd:e2: f1:1c:f9:24:48:be:ec:1d:94:67:5b:f6:69:77:a7: 06:f2:27:68:89:67:78:f5:2d:7e:4c:c2:e8:b2:d5: b0:8b:c6:ac:b9:0e:09:29:75:13:1c:67:18:af:d3: c9:b9:a4:1d:6c:67:b3:71:10:ab:c1:5c:b5:90:6e: 00:39:14:db:48:c1:85:e2:17:80:5a:18:16:4a:d7: 36:7d:b1:3d:52:93:6e:75:a7:30:e4:01:23:44:3a: 26:a1:f6:ab:d1:9b:ca:c8:fd:fb:5b:f7:fa:32:10: ae:9e:bb:96:87:21:34:28:89:fa:5a:92:71:43:cf: cd:b2:f0:d6:d0:d9:e4:e7:c7:9a:f8:85:7c:e6:aa: 09:88:ca:60:ba:2f:69:85:82:a6:b4:5e:17:df:50: fe:95:ec:bb:c8:05:e9:a4:dd:89:98:13:40:75:44: b8:ba:3a:03:ca:95:04:e8:39:9e:72:d7:dd:87:92: 19:6a:4f:0b:59:a9:44:40:cd:23:fe:71:be:68:d6: 28:43:fc:00:23:02:3f:e5:7a:bf:27:11:bd:58:c0: 90:e0:c1:a7:9a:55:18:1d:1a:da:7f:79:49:36:b5: 8b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:C0:64:7B:70:BD:2E:87:DD:16:07:F7:F3:51:B9:B3:3B:AD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9e72f1c-9a72-365a-b950-2b74bb77575c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8a:af:10:3c:31:fa:dc:56:57:3f:57:7e:29:d7:49:03:2a: a7:d1:61:a3:f4:47:51:87:58:b1:46:5c:7e:39:3d:80:d5:72: b4:df:9d:a1:2c:72:5e:1b:a6:5c:82:60:ee:58:14:26:53:c9: de:6e:e3:73:1e:84:2d:40:1b:7d:0a:ea:7d:52:ac:e7:c6:04: 39:02:79:29:aa:7a:f8:ec:3a:1e:05:d2:ca:fa:f2:90:13:0e: 0d:68:9f:21:09:20:cb:50:86:56:db:a4:4f:93:c9:e5:2d:01: ed:49:23:12:21:bd:cb:90:8d:bc:d2:92:97:8a:03:cb:93:f5: ae:07:21:9a:b7:3d:0b:74:67:50:a8:9b:d6:a9:1b:f2:f5:ba: 5c:20:f5:7b:6f:cb:44:f1:d9:be:15:23:da:88:7e:cb:be:64: cd:92:18:ce:e5:a4:19:60:45:a0:d9:5c:89:16:23:9d:2d:e5: e9:57:0f:3c:a7:61:36:b2:4b:db:c5:34:b2:e0:1c:8c:77:a3: b9:c4:ef:9a:7b:01:f0:8f:09:1f:80:fd:93:33:19:d4:dd:7a: 8d:6f:e6:be:c5:b6:df:71:91:1f:98:41:e4:36:52:23:86:ee: 9d:1f:9c:d4:dc:01:55:ea:34:32:69:24:a4:f3:41:61:ec:f7: 16:2b:49:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrbzaRH4E+nvKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZTUzZjU3YjktZDYyZi00ZDFjLWFmYTEtZWYwZjJiMzRlODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk2lL5EjGglj2lGrUGHYp6PgWSgtUhvHVk7O veLxHPkkSL7sHZRnW/Zpd6cG8idoiWd49S1+TMLostWwi8asuQ4JKXUTHGcYr9PJ uaQdbGezcRCrwVy1kG4AORTbSMGF4heAWhgWStc2fbE9UpNudacw5AEjRDomofar 0ZvKyP37W/f6MhCunruWhyE0KIn6WpJxQ8/NsvDW0Nnk58ea+IV85qoJiMpgui9p hYKmtF4X31D+ley7yAXppN2JmBNAdUS4ujoDypUE6Dmectfdh5IZak8LWalEQM0j /nG+aNYoQ/wAIwI/5Xq/JxG9WMCQ4MGnmlUYHRraf3lJNrWL1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE1wGR7cL0uh90WB/fzUbmzO60kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzllNzJmMWMtOWE3Mi0z NjVhLWI5NTAtMmI3NGJiNzc1NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKKrxA8MfrcVlc/V34p10kDKqfRYaP0R1GHWLFGXH45PYDVcrTfnaEs cl4bplyCYO5YFCZTyd5u43MehC1AG30K6n1SrOfGBDkCeSmqevjsOh4F0sr68pAT Dg1onyEJIMtQhlbbpE+TyeUtAe1JIxIhvcuQjbzSkpeKA8uT9a4HIZq3PQt0Z1Co m9apG/L1ulwg9Xtvy0Tx2b4VI9qIfsu+ZM2SGM7lpBlgRaDZXIkWI50t5elXDzyn YTayS9vFNLLgHIx3o7nE75p7AfCPCR+A/ZMzGdTdeo1v5r7Ftt9xkR+YQeQ2UiOG 7p0fnNTcAVXqNDJpJKTzQWHs9xYrSdQ= -----END CERTIFICATE-----Generated at Sat Sep 26 12:56:44 2026 by rpki-client