$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa File: a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json) Hash identifier: ZkIQzcBxP34jv0PCX+TqCyvu9w6kVz+GHhdk3YtZe/I= Subject key identifier: FE:25:92:E5:4C:84:E0:13:D2:8B:3C:83:1F:83:16:B0:4C:C9:10:72 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584F9FFDD367D23BDCC6B10D0E00 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 68.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:d3:67:d2:3b:dc:c6:b1:0d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=3176ff4d-5dd2-47a3-8c2f-82f7f45cf9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:b1:fc:cf:53:b3:55:9e:54:54:c1:47:b8: a0:c7:80:7d:8f:0b:52:19:b3:1a:3c:49:64:5c:84: 19:a2:30:41:2d:90:c3:04:cc:33:dc:03:50:b1:b0: 18:a0:82:81:d7:c2:e8:82:41:15:16:c1:94:c2:49: 5a:47:3f:e5:2e:f3:2f:54:94:2b:db:3d:97:b5:9c: a8:c6:e1:8f:36:7c:48:ea:27:4f:9f:6d:c2:b2:22: 92:e5:52:f1:bc:44:ff:2b:93:eb:92:2f:e2:7d:bd: 17:02:2b:ff:ad:62:ea:91:ae:8a:79:e2:1d:4a:03: 50:28:bb:ee:dd:46:0a:3e:c2:17:db:a4:b8:88:26: 93:d7:6a:2d:04:c8:ae:e0:ad:c2:79:b0:79:93:80: 38:dd:c4:9f:af:04:c8:82:89:23:83:34:6d:91:09: f5:63:27:65:31:ea:e7:7d:20:3f:80:38:b7:f4:2d: 94:f7:52:68:31:ba:ea:b5:25:52:20:58:dd:fc:95: 20:62:01:dd:dd:00:1f:a7:cd:44:28:cd:cc:03:ea: 59:31:9f:29:7e:7b:c8:79:28:38:39:a6:3f:21:20: 67:35:f2:fe:da:e3:96:89:b0:af:95:4e:b1:25:de: 63:b0:0e:60:a4:e9:8a:fa:c7:bc:ca:3f:d0:70:96: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:25:92:E5:4C:84:E0:13:D2:8B:3C:83:1F:83:16:B0:4C:C9:10:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cb:86:cc:7b:f7:90:e1:0d:b5:1b:d9:be:6b:65:38:94:5d: 10:75:ef:ea:2b:db:16:0b:74:a6:b2:cb:21:ca:f1:95:c0:3b: ed:a0:45:84:d3:c0:55:86:d7:10:b1:ee:16:3e:8c:ad:be:d2: 74:37:72:c4:90:25:f1:92:e7:3e:02:48:47:1d:17:e7:14:2a: f2:64:65:dd:37:3e:c0:ad:8e:b2:d8:b5:7e:9b:bb:1e:e0:77: 21:fa:86:86:48:40:50:15:61:a7:61:e0:a8:66:92:14:65:f2: e0:a4:19:ab:da:10:72:a4:bd:7d:4b:1f:c3:cf:b3:af:a4:50: 93:c7:a9:d2:4f:4f:17:fd:43:9d:66:48:c0:75:04:ba:02:28: ff:7e:b0:2d:8d:75:44:96:de:ed:6f:c1:33:c9:69:46:0f:2a: 19:b1:00:df:f7:6c:c5:e2:ca:23:7e:5e:1e:77:09:a2:4d:07: 68:4f:25:87:5c:52:7d:cb:6c:16:48:f2:68:86:80:fc:54:ec: ae:a3:03:b3:12:c0:82:60:18:1c:e4:4b:b3:f0:6a:12:03:36: 79:af:7b:26:46:c6:82:9a:cd:8c:e9:1e:d2:0f:36:0d:5e:c8: 58:70:15:3e:bb:24:e6:39:ef:42:a2:03:9e:4b:67:7f:b6:cd: 3f:be:04:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/dNn0jvcxrENDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk MzE3NmZmNGQtNWRkMi00N2EzLThjMmYtODJmN2Y0NWNmOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQux/M9Ts1WeVFTBR7igx4B9jwtSGbMaPElk XIQZojBBLZDDBMwz3ANQsbAYoIKB18LogkEVFsGUwklaRz/lLvMvVJQr2z2XtZyo xuGPNnxI6idPn23CsiKS5VLxvET/K5Prki/ifb0XAiv/rWLqka6KeeIdSgNQKLvu 3UYKPsIX26S4iCaT12otBMiu4K3CebB5k4A43cSfrwTIgokjgzRtkQn1YydlMern fSA/gDi39C2U91JoMbrqtSVSIFjd/JUgYgHd3QAfp81EKM3MA+pZMZ8pfnvIeSg4 OaY/ISBnNfL+2uOWibCvlU6xJd5jsA5gpOmK+se8yj/QcJbyYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4lkuVMhOAT0os8gx+DFrBMyRByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYTZjNDZkZTYtNDRhMC0z MDBkLWJmMTktZTYzNWU5MzQ3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnLhsx795DhDbUb2b5rZTiUXRB17+or2xYLdKayyyHK8ZXAO+2gRYTT wFWG1xCx7hY+jK2+0nQ3csSQJfGS5z4CSEcdF+cUKvJkZd03PsCtjrLYtX6bux7g dyH6hoZIQFAVYadh4KhmkhRl8uCkGavaEHKkvX1LH8PPs6+kUJPHqdJPTxf9Q51m SMB1BLoCKP9+sC2NdUSW3u1vwTPJaUYPKhmxAN/3bMXiyiN+Xh53CaJNB2hPJYdc Un3LbBZI8miGgPxU7K6jA7MSwIJgGBzkS7PwahIDNnmveyZGxoKazYzpHtIPNg1e yFhwFT67JOY570KiA55LZ3+2zT++BGo= -----END CERTIFICATE-----Generated at Sun Nov 15 12:20:10 2026 by rpki-client