$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa File: c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa (raw, json) Hash identifier: BfHyn9K1utiqwSHHHMjMHtyYebLONsqU4j4IY0b+Kdk= Subject key identifier: DC:7F:6C:81:51:53:3E:7E:99:0F:86:89:EB:21:EE:47:44:2D:02:2B Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584FB3A67E8FFFC266A3A93D6E00 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 68.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:7e:8f:ff:c2:66:a3:a9:3d:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=1e697faf-0b28-4f0d-9d2f-5b0fdb09f685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:91:c8:93:c7:30:c4:e8:94:a8:b1:fd:8b: fd:b8:4e:a9:9b:fd:d2:74:d8:29:f8:28:6f:e4:7d: da:cc:c5:34:a7:69:d0:d6:8e:18:f0:0f:92:bc:91: d9:cd:3d:9d:50:73:ff:b1:9b:4d:29:5e:bf:b5:76: 0e:35:01:e5:6b:a5:ba:a9:d1:98:c9:39:32:f4:c5: 6c:36:c9:69:06:56:4a:b3:0b:1c:1a:01:23:3f:a8: 48:a3:cc:98:a0:48:10:ce:04:e8:cd:d5:56:99:46: 0d:4c:6b:71:e1:6a:40:ee:5e:49:c7:9b:32:f1:84: 15:12:95:8d:c3:eb:04:34:e3:dc:4e:73:03:25:2b: 01:f7:52:ea:2f:43:33:8a:9a:c5:25:1f:ec:23:7b: 15:31:0e:b6:6d:c8:e2:e4:43:46:ea:8a:b7:cd:24: 59:93:7b:73:aa:95:f9:dc:d7:c3:1e:5c:b7:ad:ca: cd:d2:65:e1:dc:4c:d5:b5:18:65:b4:a3:79:40:89: 42:9e:91:5e:30:a6:cd:b3:48:24:9c:66:7e:6c:f3: ae:75:25:79:ae:c6:65:61:7b:ed:ba:1b:98:a5:1b: d2:cf:1a:15:e9:c0:ba:00:22:ae:fd:84:e0:3e:33: e6:c0:5a:46:3c:97:a2:f4:b6:3c:e2:47:d1:0b:23: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7F:6C:81:51:53:3E:7E:99:0F:86:89:EB:21:EE:47:44:2D:02:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:06:67:7c:ad:63:e9:75:ed:2b:fd:a0:bf:64:8d:0a:f8:83: 40:37:55:41:22:11:e0:e1:9e:75:aa:76:25:13:46:c6:94:fe: 57:6e:78:3a:39:de:64:31:e4:37:1c:3f:17:a4:66:39:7e:31: fb:b5:f3:88:ee:90:34:28:fa:d4:0c:16:f1:43:4e:3a:73:4b: d3:64:eb:1b:ba:3c:81:c5:de:63:d7:69:7c:52:fe:c5:09:95: d3:c1:66:34:70:29:05:82:ee:27:9f:99:aa:bf:ed:84:0d:cc: ff:cc:75:fe:a3:3c:ee:bc:09:f4:99:d4:9f:27:34:d7:70:e2: c8:5d:a6:8d:ac:69:d8:17:92:24:97:46:e3:1f:70:1c:11:e5: 51:fb:6c:7a:97:ea:66:08:6c:53:d8:7d:31:05:3b:06:fb:44: 57:c5:d5:2b:c8:71:61:a7:89:f1:37:6c:6d:ca:51:40:3e:df: 37:1a:c6:19:9a:ab:e9:c9:13:2f:a0:d5:a2:12:12:a5:3a:58: c1:f0:69:eb:b5:3b:d4:e5:55:26:34:b4:4f:27:aa:d6:d3:04: 43:08:b9:bc:64:87:d3:14:0a:3a:d1:1e:21:68:88:b3:8f:61: d7:9e:23:97:f4:cb:14:5a:18:11:84:9a:93:45:25:27:b4:59: 88:4a:aa:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpn6P/8Jmo6k9bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MWU2OTdmYWYtMGIyOC00ZjBkLTlkMmYtNWIwZmRiMDlmNjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/iRyJPHMMTolKix/Yv9uE6pm/3SdNgp+Chv 5H3azMU0p2nQ1o4Y8A+SvJHZzT2dUHP/sZtNKV6/tXYONQHla6W6qdGYyTky9MVs NslpBlZKswscGgEjP6hIo8yYoEgQzgTozdVWmUYNTGtx4WpA7l5Jx5sy8YQVEpWN w+sENOPcTnMDJSsB91LqL0MziprFJR/sI3sVMQ62bcji5ENG6oq3zSRZk3tzqpX5 3NfDHly3rcrN0mXh3EzVtRhltKN5QIlCnpFeMKbNs0gknGZ+bPOudSV5rsZlYXvt uhuYpRvSzxoV6cC6ACKu/YTgPjPmwFpGPJei9LY84kfRCyM/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx/bIFRUz5+mQ+Giesh7kdELQIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYzVlMDk1MWMtYWYwNi0z MmZkLTljNDEtZTJkNmYzMTdiZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIGZ3ytY+l17Sv9oL9kjQr4g0A3VUEiEeDhnnWqdiUTRsaU/ldueDo5 3mQx5DccPxekZjl+Mfu184jukDQo+tQMFvFDTjpzS9Nk6xu6PIHF3mPXaXxS/sUJ ldPBZjRwKQWC7iefmaq/7YQNzP/Mdf6jPO68CfSZ1J8nNNdw4shdpo2sadgXkiSX RuMfcBwR5VH7bHqX6mYIbFPYfTEFOwb7RFfF1SvIcWGnifE3bG3KUUA+3zcaxhma q+nJEy+g1aISEqU6WMHwaeu1O9TlVSY0tE8nqtbTBEMIubxkh9MUCjrRHiFoiLOP YdeeI5f0yxRaGBGEmpNFJSe0WYhKqvU= -----END CERTIFICATE-----Generated at Sun Nov 15 10:35:41 2026 by rpki-client