$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33b1cf7-d64c-34b9-906c-6e71350103be.roa File: d33b1cf7-d64c-34b9-906c-6e71350103be.roa (raw, json) Hash identifier: Uz9YrcAWQ58HwenEOn88drxiR6jc8CsAajZI4dK+cgI= Subject key identifier: 1C:60:A6:53:D7:AB:3C:6A:32:4C:BE:E0:B7:D3:FA:7A:6E:85:2C:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BA3A97958AD172013800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33b1cf7-d64c-34b9-906c-6e71350103be.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.51.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:ba:3a:97:95:8a:d1:72:01:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=90b7e77b-9d2a-49ae-a49f-a00f00374cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:d3:72:b4:5d:b7:d6:6d:eb:3e:b9:1f:6b: 6b:76:d2:33:be:02:40:3e:6d:3f:69:32:9a:4d:8c: 02:10:76:14:80:d9:d0:8b:ec:d8:0e:15:97:f4:37: 5b:3a:39:37:42:bd:d8:9e:00:ef:21:b1:e3:2a:d0: 08:f0:fa:63:1c:a1:d8:6f:ea:40:22:8f:17:56:78: 94:4a:e2:55:29:98:e3:30:ec:0e:37:53:ae:8b:12: ef:17:cd:7b:f0:1d:2e:e3:4a:f8:e2:44:2d:66:7e: f4:cf:bf:ad:9e:a8:b0:45:a0:d9:49:ae:f3:cf:94: 69:c9:20:01:df:7c:f5:89:55:f7:60:b7:76:1a:a9: 26:27:bf:f7:e7:6e:7d:22:04:c6:a2:67:cc:85:44: cc:42:8f:17:b0:cb:24:54:04:97:a2:52:d0:40:7c: 08:2c:eb:5a:12:a3:5e:89:7e:64:c0:3a:73:04:a0: 51:09:2a:71:41:b9:94:33:63:87:f8:ce:e4:d5:dc: 2a:c6:f2:67:20:5a:bb:c6:2b:d4:f6:31:76:31:73: 0a:be:be:03:81:4b:3d:71:98:91:0b:e3:9d:fa:64: fb:67:59:c5:7f:77:50:48:3e:ef:93:45:a7:ab:1b: 06:16:c6:2b:6b:ab:6b:38:f4:13:ca:6e:b3:29:38: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:60:A6:53:D7:AB:3C:6A:32:4C:BE:E0:B7:D3:FA:7A:6E:85:2C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d33b1cf7-d64c-34b9-906c-6e71350103be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b0:d5:6b:68:27:71:59:21:a3:3a:62:af:25:ea:47:0b:7a: 2f:e2:a9:6d:29:1b:32:c0:19:f7:4e:a8:05:a5:48:7f:ac:93: aa:a4:0e:52:e6:52:86:62:92:5e:f7:32:85:70:d1:fc:fb:47: dc:13:a5:16:13:a5:a0:45:0a:11:14:94:84:2f:b2:fe:b9:a8: 54:6e:7f:ab:24:23:41:69:f1:be:39:55:94:6e:f7:c7:74:23: ff:f0:08:4e:1f:27:d1:11:b9:b0:5f:00:eb:f3:8e:18:12:9b: cc:0e:5b:87:3f:42:68:e7:ac:ea:23:e4:9f:4a:15:5d:c1:28: d0:ec:c1:01:47:15:6e:a8:d3:c4:d5:d8:10:47:bf:0b:56:59: 33:84:d4:8d:50:72:0c:fc:dd:fd:6f:0c:1e:0b:d3:7c:9c:3d: a7:a9:c0:1e:ad:46:98:7c:58:d7:e8:6f:3a:af:0b:c1:17:2f: 23:67:fc:19:48:b7:51:2e:59:5f:ef:c4:5f:e7:fc:45:86:21: cf:93:27:ad:a5:38:1e:bd:81:d5:27:eb:71:e0:17:17:2e:52: 7b:b0:d4:13:d8:32:89:ee:7b:38:4f:b3:11:97:42:c3:92:b7: 81:75:45:0b:ed:26:20:3d:91:9b:22:54:db:e0:6f:49:e8:69: c1:5a:a3:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYro6l5WK0XIBOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OTBiN2U3N2ItOWQyYS00OWFlLWE0OWYtYTAwZjAwMzc0Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKPTcrRdt9Zt6z65H2trdtIzvgJAPm0/aTKa TYwCEHYUgNnQi+zYDhWX9DdbOjk3Qr3YngDvIbHjKtAI8PpjHKHYb+pAIo8XVniU SuJVKZjjMOwON1OuixLvF8178B0u40r44kQtZn70z7+tnqiwRaDZSa7zz5RpySAB 33z1iVX3YLd2GqkmJ7/35259IgTGomfMhUTMQo8XsMskVASXolLQQHwILOtaEqNe iX5kwDpzBKBRCSpxQbmUM2OH+M7k1dwqxvJnIFq7xivU9jF2MXMKvr4DgUs9cZiR C+Od+mT7Z1nFf3dQSD7vk0WnqxsGFsYra6trOPQTym6zKTiK3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxgplPXqzxqMky+4LfT+npuhSzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMzYjFjZjctZDY0Yy0z NGI5LTkwNmMtNmU3MTM1MDEwM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqw1WtoJ3FZIaM6Yq8l6kcLei/iqW0pGzLAGfdOqAWlSH+sk6qkDlLm UoZikl73MoVw0fz7R9wTpRYTpaBFChEUlIQvsv65qFRuf6skI0Fp8b45VZRu98d0 I//wCE4fJ9ERubBfAOvzjhgSm8wOW4c/QmjnrOoj5J9KFV3BKNDswQFHFW6o08TV 2BBHvwtWWTOE1I1Qcgz83f1vDB4L03ycPaepwB6tRph8WNfobzqvC8EXLyNn/BlI t1EuWV/vxF/n/EWGIc+TJ62lOB69gdUn63HgFxcuUnuw1BPYMonuezhPsxGXQsOS t4F1RQvtJiA9kZsiVNvgb0noacFao18= -----END CERTIFICATE-----Generated at Thu Sep 24 15:53:48 2026 by rpki-client