$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5bc962-f6c1-314c-9c61-550910b53cb1.roa File: ca5bc962-f6c1-314c-9c61-550910b53cb1.roa (raw, json) Hash identifier: AEzSeBByhZQbRc0afKCl8QocTNkxyClp0Aw+Z8r7gAk= Subject key identifier: ED:80:FB:DF:B8:5C:72:EE:C4:8E:64:81:BA:84:7F:DD:F1:F3:00:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497ABCD113D6BCA4CECC3C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5bc962-f6c1-314c-9c61-550910b53cb1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7922 IP address blocks: 68.87.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:bc:d1:13:d6:bc:a4:ce:cc:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eadcfd51-f1e0-48fa-9d7c-51f1522280f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:35:29:da:b3:41:99:52:70:6e:c7:31:64: 0f:ba:19:11:31:d4:f1:5c:01:45:ca:8d:a2:89:cf: 41:ba:86:15:77:ab:07:2c:e5:89:41:ef:6a:03:3d: df:e6:4a:e0:5c:2d:5c:12:61:2a:ca:ab:5b:eb:8f: 2b:d3:d4:41:81:bf:e2:fb:11:46:6a:2d:4f:85:ca: 18:22:33:a4:cf:b0:83:38:6a:cd:5b:e3:32:11:94: 20:df:f5:81:7a:1a:47:ca:42:1e:4c:5c:68:ac:73: 35:81:76:7a:56:ef:f2:5d:2f:2a:08:03:96:c5:df: ce:8e:4e:85:81:21:81:50:15:f7:64:17:31:79:07: 38:41:7e:af:c0:73:24:f8:da:e6:ca:ab:58:88:ad: df:53:b5:ae:9d:5a:36:79:82:3b:4e:0d:37:2b:61: ce:ba:a9:81:8e:c1:90:4f:25:67:c1:b3:81:12:14: 78:c2:43:06:2e:a4:19:0f:83:95:6b:34:28:0e:60: e0:6b:b5:c7:06:5c:08:b3:5e:1f:95:cd:c4:1d:af: 32:fa:9e:b9:16:52:59:68:28:bc:0e:a2:8c:76:45: de:2c:fe:9c:0f:c1:a7:a7:69:2b:6f:d4:51:c0:17: 10:22:83:98:84:d8:57:c0:84:b8:18:c5:93:84:a6: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:80:FB:DF:B8:5C:72:EE:C4:8E:64:81:BA:84:7F:DD:F1:F3:00:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca5bc962-f6c1-314c-9c61-550910b53cb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ef:90:87:2c:04:8a:15:a4:b5:90:60:e3:17:5c:31:26:ea: 15:06:1a:1c:55:f1:13:73:44:3c:7e:8f:41:0d:4a:a8:5d:0b: 4e:00:e6:d9:7b:de:ea:75:22:0d:a5:da:b3:5e:67:47:77:63: 07:f3:67:5a:39:02:28:a8:91:45:2f:8f:1d:72:65:f5:f8:9c: 0d:af:59:38:2f:3a:3d:c1:e8:23:81:b8:3e:d0:bc:9a:cb:9e: 23:15:83:94:14:33:93:c2:83:bb:5c:ae:16:11:8c:a9:19:7c: fd:e5:9e:b3:bc:b0:9a:43:78:19:9d:99:b3:7e:1f:9f:2e:3a: e4:04:d5:7a:c1:80:a6:81:ac:42:2a:e3:0f:68:b1:e0:9d:5c: bf:47:af:64:0b:1e:72:59:b1:b7:8a:ac:df:08:a9:02:1b:85: 2f:ad:26:09:8f:11:5a:26:29:84:23:bd:23:5d:e7:c2:81:29: 00:66:35:ed:4b:71:6d:45:d0:c1:17:7d:5a:cb:8b:78:ee:8e: 02:6c:d7:86:6d:cc:99:e2:47:81:cc:a8:00:a9:b5:70:ab:de: 23:d3:fb:15:ed:1f:1c:cd:e6:71:bd:93:9e:b8:05:c6:f9:18: ae:06:fd:f7:ef:11:8f:2e:cc:5d:5a:2f:dd:03:e9:c5:30:0c: 1b:a2:cd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JerzRE9a8pM7MPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWFkY2ZkNTEtZjFlMC00OGZhLTlkN2MtNTFmMTUyMjI4MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+s1KdqzQZlScG7HMWQPuhkRMdTxXAFFyo2i ic9BuoYVd6sHLOWJQe9qAz3f5krgXC1cEmEqyqtb648r09RBgb/i+xFGai1PhcoY IjOkz7CDOGrNW+MyEZQg3/WBehpHykIeTFxorHM1gXZ6Vu/yXS8qCAOWxd/Ojk6F gSGBUBX3ZBcxeQc4QX6vwHMk+NrmyqtYiK3fU7WunVo2eYI7Tg03K2HOuqmBjsGQ TyVnwbOBEhR4wkMGLqQZD4OVazQoDmDga7XHBlwIs14flc3EHa8y+p65FlJZaCi8 DqKMdkXeLP6cD8Gnp2krb9RRwBcQIoOYhNhXwIS4GMWThKY0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2A+9+4XHLuxI5kgbqEf93x8wBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E1YmM5NjItZjZjMS0z MTRjLTljNjEtNTUwOTEwYjUzY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3vkIcsBIoVpLWQYOMXXDEm6hUGGhxV8RNzRDx+j0ENSqhdC04A5tl7 3up1Ig2l2rNeZ0d3YwfzZ1o5AiiokUUvjx1yZfX4nA2vWTgvOj3B6COBuD7QvJrL niMVg5QUM5PCg7tcrhYRjKkZfP3lnrO8sJpDeBmdmbN+H58uOuQE1XrBgKaBrEIq 4w9oseCdXL9Hr2QLHnJZsbeKrN8IqQIbhS+tJgmPEVomKYQjvSNd58KBKQBmNe1L cW1F0MEXfVrLi3jujgJs14ZtzJniR4HMqACptXCr3iPT+xXtHxzN5nG9k564Bcb5 GK4G/ffvEY8uzF1aL90D6cUwDBuize0= -----END CERTIFICATE-----Generated at Sat Oct 3 19:58:29 2026 by rpki-client