$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa File: ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa (raw, json) Hash identifier: nIxHlfZU14IPfJ3nE93fHe6ZUtk9scC3fYp4X69dkp0= Subject key identifier: 35:0E:C3:CD:04:6A:D1:F4:70:C7:6D:C9:05:0D:CC:E3:24:27:4F:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584FB3A81BDA6243915D4DF60780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 33659 IP address blocks: 69.248.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a8:1b:da:62:43:91:5d:4d:f6:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=d2b1adbe-5460-4f1e-b06c-4a81526255d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:de:52:3c:53:91:7c:8c:b9:96:97:09:66:37: 3b:fb:a6:f8:66:31:33:7b:3e:ee:e2:b0:5f:19:a5: 00:f6:46:ed:29:89:82:70:b4:50:36:e0:53:3e:6e: 76:7f:91:3a:2a:74:66:f8:d7:2b:86:fe:33:a7:fd: b7:70:0f:0c:86:be:97:fe:a4:82:40:54:f9:1c:1b: ee:9a:d8:2f:dd:f5:1d:f4:cb:7e:8c:ff:32:d9:17: 5c:4d:cb:f8:e7:07:0c:28:3c:2a:9b:6b:0a:f4:38: b3:fd:5c:d7:67:36:d8:e5:10:af:8b:87:36:10:14: 14:de:af:cd:0b:3d:7a:24:13:47:c8:42:04:b8:f6: a4:ff:40:c0:9f:16:44:0e:26:7b:06:8b:85:89:f0: ec:47:ee:28:32:03:ac:bd:9f:63:95:f5:13:f8:b0: 59:8c:12:66:a2:86:2f:93:ba:6c:84:af:5b:4e:43: 69:89:0e:8a:6f:f0:96:ed:e3:c0:4a:99:3c:96:fd: 4c:12:b3:dc:7a:69:9e:61:f6:c1:60:e9:42:98:dd: 67:f1:b3:be:19:33:1f:68:e2:80:bd:ee:07:f2:62: 36:70:f4:be:f0:06:91:6a:05:43:bc:f3:67:83:6a: 3d:97:2d:dd:9f:6f:bf:9f:ad:d7:be:ec:c2:72:e7: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:C3:CD:04:6A:D1:F4:70:C7:6D:C9:05:0D:CC:E3:24:27:4F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6c8cc2-ccca-32e0-aa8a-c1e85b30dffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.248.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:93:76:2f:11:3e:1f:23:3b:11:6d:41:4f:e0:43:0f:59:1d: dc:88:8a:6b:66:38:e9:e9:6a:5f:b5:d5:f9:24:34:63:9d:51: 07:b8:cd:27:61:fb:35:e0:97:7f:9e:56:0d:20:05:5c:ef:48: 54:4c:e0:e2:a5:33:fa:56:2f:73:de:82:b5:05:47:ef:5a:1f: ec:af:f8:00:9f:a1:8d:a3:3a:a9:81:e2:46:be:1c:8f:c0:e1: a4:54:9b:b7:32:1f:78:20:4e:1f:3d:f4:8b:69:d3:0f:63:14: 69:82:48:34:de:43:26:32:20:2b:54:ed:79:1e:e6:27:15:79: 55:8d:0e:a6:18:10:b7:59:5d:da:f3:1b:1e:29:e3:9a:61:44: 83:6a:2b:68:74:92:23:74:1f:a2:f3:a3:0f:42:47:52:20:fa: 9e:c4:de:ac:db:e6:f8:81:20:6a:e4:11:00:f4:a4:f5:9c:84: fa:dc:0e:a3:f4:a2:e5:83:f7:20:58:5e:1c:b3:cc:ac:5b:a0: 04:23:ba:e8:78:44:7c:2d:2d:3e:90:fc:01:8c:3a:25:a7:8b: 30:bd:45:78:88:d6:28:a1:44:cf:7c:c0:7d:d5:44:75:80:fb: a0:2f:e6:70:f9:8e:38:fa:c7:a7:2c:13:60:74:90:0c:c8:a8: f8:e3:63:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqBvaYkORXU32B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDJiMWFkYmUtNTQ2MC00ZjFlLWIwNmMtNGE4MTUyNjI1NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht5SPFORfIy5lpcJZjc7+6b4ZjEzez7u4rBf GaUA9kbtKYmCcLRQNuBTPm52f5E6KnRm+Ncrhv4zp/23cA8Mhr6X/qSCQFT5HBvu mtgv3fUd9Mt+jP8y2RdcTcv45wcMKDwqm2sK9Diz/VzXZzbY5RCvi4c2EBQU3q/N Cz16JBNHyEIEuPak/0DAnxZEDiZ7BouFifDsR+4oMgOsvZ9jlfUT+LBZjBJmooYv k7pshK9bTkNpiQ6Kb/CW7ePASpk8lv1MErPcemmeYfbBYOlCmN1n8bO+GTMfaOKA ve4H8mI2cPS+8AaRagVDvPNng2o9ly3dn2+/n63XvuzCcucbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUOw80EatH0cMdtyQUNzOMkJ09xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmY2YzhjYzItY2NjYS0z MmUwLWFhOGEtYzFlODViMzBkZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRfgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiTdi8RPh8jOxFtQU/gQw9ZHdyIimtmOOnpal+11fkkNGOdUQe4zSdh +zXgl3+eVg0gBVzvSFRM4OKlM/pWL3PegrUFR+9aH+yv+ACfoY2jOqmB4ka+HI/A 4aRUm7cyH3ggTh899Itp0w9jFGmCSDTeQyYyICtU7Xke5icVeVWNDqYYELdZXdrz Gx4p45phRINqK2h0kiN0H6Lzow9CR1Ig+p7E3qzb5viBIGrkEQD0pPWchPrcDqP0 ouWD9yBYXhyzzKxboAQjuuh4RHwtLT6Q/AGMOiWnizC9RXiI1iihRM98wH3VRHWA +6Av5nD5jjj6x6csE2B0kAzIqPjjYyk= -----END CERTIFICATE-----Generated at Sun Nov 15 15:28:36 2026 by rpki-client