$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa File: d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa (raw, json) Hash identifier: 3vZVfE73/75i+uQkKHpnj/l8peDGbeHYuXDUZ5U9S6E= Subject key identifier: 68:44:6E:02:B1:01:0D:C1:9E:05:CB:9C:38:86:14:99:58:17:CB:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FA097FE2FF75C1DE25100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.52.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:a0:97:fe:2f:f7:5c:1d:e2:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d8f2446-9ede-40d0-a7ce-333d4aca3b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:72:89:b4:9d:52:2b:5b:ea:e9:1e:f6:da: e2:9f:7a:53:30:e5:73:55:5a:1f:bc:d0:9a:2d:2b: a9:e2:63:5f:76:8d:64:79:70:55:fb:d4:27:7b:59: a0:1f:b7:f1:75:8b:9d:2e:f9:33:45:2b:2a:03:cd: 3b:ab:b8:89:5c:0d:02:c9:fb:70:42:fd:97:4d:30: 87:64:60:1b:3e:ca:69:3e:d2:9d:a3:e5:2e:0d:c9: 61:fb:94:c6:48:35:74:e2:27:80:31:47:24:73:a5: ce:48:c1:83:23:d1:7e:83:2b:9a:d3:dc:2b:73:eb: 77:09:7d:e0:e9:cf:fb:83:a0:a3:f8:0d:f5:90:ad: cd:6a:02:07:cb:80:91:5d:a8:9f:dc:cb:63:d1:48: 81:da:96:ab:68:c6:29:ce:36:17:0b:4a:1f:26:6b: 49:d1:93:91:d0:eb:ff:70:59:e2:6d:21:9e:8a:21: fb:bb:b2:fa:2d:21:18:27:c0:26:44:28:3d:35:64: 67:3e:f7:7f:52:0b:34:a0:e4:0a:12:03:a9:e2:89: f4:5e:12:a2:e8:99:d7:69:58:9a:e9:2a:52:fb:10: 4b:13:9e:1e:95:d9:ef:30:d4:b1:a0:0e:9c:d6:09: a6:4a:7d:66:50:76:c1:44:53:3d:32:01:4e:5c:70: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:44:6E:02:B1:01:0D:C1:9E:05:CB:9C:38:86:14:99:58:17:CB:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e0:0b:2c:64:92:03:da:71:1f:70:60:f8:0b:d2:12:39:35: 78:57:8e:1c:1b:11:b4:ab:e6:52:1c:8b:69:32:0f:c8:4e:92: 06:e9:49:a2:9e:02:d6:6a:57:e6:74:66:ed:a0:d7:11:4c:28: 0f:d0:96:10:08:aa:57:4b:82:59:25:b7:55:82:f1:c2:df:8b: f8:04:d2:27:2e:c5:8a:94:1b:f4:e3:76:05:44:c0:e5:e9:cf: 96:bb:da:e6:0b:bb:67:94:8a:cc:8b:16:37:77:4b:27:da:ef: 4c:b7:ac:61:31:73:58:2c:1b:51:f8:7b:d2:2a:1f:5c:11:64: 03:1d:eb:e3:e2:86:ed:3e:7d:ae:a6:0f:05:cc:df:76:5e:3a: 15:d6:a4:80:8e:5f:21:b2:be:32:5a:27:47:43:e8:50:b7:b1: 7f:b2:a5:4d:4a:53:e9:ed:9e:32:0f:98:03:54:1d:88:0f:21: a8:ae:83:d4:10:7f:80:b5:74:4a:14:4b:05:af:e7:f5:a3:4a: 7d:0a:01:58:7f:34:e3:19:d5:05:7e:66:13:09:64:68:bc:1b: 3f:1a:60:9d:32:20:ef:74:48:92:b2:d8:62:31:dc:1a:cf:26: 5e:59:b5:b8:e2:42:1a:68:ed:42:d1:48:d6:29:dc:c8:4a:28: f0:6d:af:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf6CX/i/3XB3iUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQ4ZjI0NDYtOWVkZS00MGQwLWE3Y2UtMzMzZDRhY2EzYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZZyibSdUitb6uke9trin3pTMOVzVVofvNCa LSup4mNfdo1keXBV+9Qne1mgH7fxdYudLvkzRSsqA807q7iJXA0CyftwQv2XTTCH ZGAbPsppPtKdo+UuDclh+5TGSDV04ieAMUckc6XOSMGDI9F+gyua09wrc+t3CX3g 6c/7g6Cj+A31kK3NagIHy4CRXaif3Mtj0UiB2paraMYpzjYXC0ofJmtJ0ZOR0Ov/ cFnibSGeiiH7u7L6LSEYJ8AmRCg9NWRnPvd/Ugs0oOQKEgOp4on0XhKi6JnXaVia 6SpS+xBLE54eldnvMNSxoA6c1gmmSn1mUHbBRFM9MgFOXHA81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhEbgKxAQ3BngXLnDiGFJlYF8sAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDk2ZDVkMWMtM2M4NS0z YjZjLThmMzQtMTI0Njc1ZWFlN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTgCyxkkgPacR9wYPgL0hI5NXhXjhwbEbSr5lIci2kyD8hOkgbpSaKe AtZqV+Z0Zu2g1xFMKA/QlhAIqldLglklt1WC8cLfi/gE0icuxYqUG/TjdgVEwOXp z5a72uYLu2eUisyLFjd3Syfa70y3rGExc1gsG1H4e9IqH1wRZAMd6+Pihu0+fa6m DwXM33ZeOhXWpICOXyGyvjJaJ0dD6FC3sX+ypU1KU+ntnjIPmANUHYgPIaiug9QQ f4C1dEoUSwWv5/WjSn0KAVh/NOMZ1QV+ZhMJZGi8Gz8aYJ0yIO90SJKy2GIx3BrP Jl5ZtbjiQhpo7ULRSNYp3MhKKPBtr9M= -----END CERTIFICATE-----Generated at Sat Sep 26 08:18:10 2026 by rpki-client