$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc11acd7-2d7b-3f90-a873-0f1e273bc0ed.roa File: cc11acd7-2d7b-3f90-a873-0f1e273bc0ed.roa (raw, json) Hash identifier: vKteyUQozlBWN7aFQx/A8+XozFtQApacuEl90dFOjHo= Subject key identifier: 32:9B:7C:13:29:51:E7:E4:76:D7:E1:FA:15:D8:2A:24:BB:92:DC:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49787B0C93A247728B58E680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc11acd7-2d7b-3f90-a873-0f1e273bc0ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 68.86.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:7b:0c:93:a2:47:72:8b:58:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4cc4bd4-2190-490b-9c9d-1bda391e1555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:7e:dc:cf:a0:f6:8a:b6:41:07:05:c3:8a: e2:09:7b:28:23:c5:34:94:b8:2f:d1:56:92:5b:17: db:8f:a8:c2:41:81:b3:ac:d4:ec:b3:fd:23:a7:56: 1a:31:34:42:12:5c:7e:bf:51:f6:0a:dc:05:f9:a2: de:59:54:d7:41:bb:38:be:5c:17:33:ce:73:df:ec: 67:3a:5a:5c:5a:e4:60:b4:b6:f1:c9:b4:5c:dc:40: b9:12:96:f6:56:32:b7:e3:d0:27:40:d0:b8:b8:5d: f5:4b:0e:0f:ef:d9:9f:f0:4d:7a:43:59:b2:c4:58: 39:e4:36:36:1b:4a:e1:12:a8:96:fb:5d:92:12:55: 0f:8d:bd:8b:75:10:22:fb:f7:7e:38:cf:c9:b4:fa: e6:84:92:a5:da:62:88:50:30:ed:44:33:29:af:a2: e3:38:6f:aa:11:a7:64:90:a4:75:55:ad:56:39:64: 0f:ad:6f:ff:78:97:fc:04:06:3d:39:5c:ae:8a:86: a9:aa:a3:de:53:e1:d2:90:1c:de:79:25:be:3c:72: 48:cc:d7:8e:4c:3d:0b:a4:26:d6:43:17:9b:5b:55: d7:c9:bd:14:ca:d6:d2:cd:bd:e1:d0:65:e0:fa:96: fd:dd:24:ee:5b:65:06:c8:07:b0:5f:7a:46:41:35: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:7C:13:29:51:E7:E4:76:D7:E1:FA:15:D8:2A:24:BB:92:DC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc11acd7-2d7b-3f90-a873-0f1e273bc0ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:d4:95:01:2d:7f:d6:40:06:a2:1c:7d:a4:4a:1a:ac:fd:fb: aa:09:15:29:e2:7a:b8:8d:6d:a6:0c:15:ee:c4:6f:89:47:05: e4:e5:44:fc:bf:23:1b:eb:89:22:5d:f6:7e:da:b8:8c:28:c2: 94:38:86:80:a3:25:f0:e5:b8:2a:a8:2b:41:74:06:dd:3a:15: f5:26:8a:fb:cc:57:df:c6:c0:aa:6d:5b:95:c8:c0:2d:e5:dc: ef:14:1d:18:6a:d6:59:ea:d6:65:a4:77:c2:c3:e1:e2:05:7e: 78:b2:3d:ab:7d:69:38:9f:83:e5:68:a7:a1:74:05:66:a9:26: 56:cf:cf:86:0a:00:c6:de:11:37:1e:43:07:9e:06:08:13:ea: 83:27:c1:3b:2b:41:e0:d4:51:ac:95:c2:aa:ce:9e:6f:7f:d4: 9b:6b:d8:0e:03:b3:ef:82:ff:69:c6:9e:79:53:cb:85:9d:42: cb:ca:0d:08:bd:5c:8e:eb:2f:4f:82:42:ed:85:ef:dd:0d:1a: 4d:c2:82:4e:a9:4e:fb:9c:20:1b:8b:38:ff:fb:bf:2f:95:a7: bc:f4:ec:0a:9a:0f:48:1c:75:30:6c:8c:4e:8f:15:53:da:71: dc:b2:f7:6a:1b:b3:1e:d7:4b:40:db:1d:c0:17:50:22:21:0a: af:34:85:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeHsMk6JHcotY5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDRjYzRiZDQtMjE5MC00OTBiLTljOWQtMWJkYTM5MWUxNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirF+3M+g9oq2QQcFw4riCXsoI8U0lLgv0VaS Wxfbj6jCQYGzrNTss/0jp1YaMTRCElx+v1H2CtwF+aLeWVTXQbs4vlwXM85z3+xn OlpcWuRgtLbxybRc3EC5Epb2VjK349AnQNC4uF31Sw4P79mf8E16Q1myxFg55DY2 G0rhEqiW+12SElUPjb2LdRAi+/d+OM/JtPrmhJKl2mKIUDDtRDMpr6LjOG+qEadk kKR1Va1WOWQPrW//eJf8BAY9OVyuioapqqPeU+HSkBzeeSW+PHJIzNeOTD0LpCbW QxebW1XXyb0UytbSzb3h0GXg+pb93STuW2UGyAewX3pGQTWgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKbfBMpUefkdtfh+hXYKiS7ktxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2MxMWFjZDctMmQ3Yi0z ZjkwLWE4NzMtMGYxZTI3M2JjMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7UlQEtf9ZABqIcfaRKGqz9+6oJFSnieriNbaYMFe7Eb4lHBeTlRPy/ IxvriSJd9n7auIwowpQ4hoCjJfDluCqoK0F0Bt06FfUmivvMV9/GwKptW5XIwC3l 3O8UHRhq1lnq1mWkd8LD4eIFfniyPat9aTifg+Vop6F0BWapJlbPz4YKAMbeETce QweeBggT6oMnwTsrQeDUUayVwqrOnm9/1Jtr2A4Ds++C/2nGnnlTy4WdQsvKDQi9 XI7rL0+CQu2F790NGk3Cgk6pTvucIBuLOP/7vy+Vp7z07AqaD0gcdTBsjE6PFVPa cdyy92obsx7XS0DbHcAXUCIhCq80hbg= -----END CERTIFICATE-----Generated at Sat Sep 26 05:18:16 2026 by rpki-client