$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d5a1ca8-6c7b-35af-8703-6d4de282fb2b.roa File: 4d5a1ca8-6c7b-35af-8703-6d4de282fb2b.roa (raw, json) Hash identifier: +DO7qGQOUwQLp3wv5QTApEcB5mCdRNOxC4UwvLbc+QY= Subject key identifier: E4:24:D2:9A:09:4B:B3:23:8E:6F:C4:FB:90:87:CD:C7:39:54:E7:E1 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F5768304EE25FADD2C8EFFA80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d5a1ca8-6c7b-35af-8703-6d4de282fb2b.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 68.168.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:30:4e:e2:5f:ad:d2:c8:ef:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=f854848c-33ea-49e2-a7f6-ab3991214186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:2b:98:77:22:55:1a:b9:a7:4a:9a:3f:cb: 21:cb:3c:ed:2b:db:b9:7a:7e:b1:44:38:54:b2:d3: fe:d0:33:e2:bc:07:bf:7e:10:92:ee:9f:9e:50:90: 79:fa:12:ea:4a:e5:3b:15:57:b1:20:67:ae:54:22: 6c:1a:02:e1:c7:88:f5:d2:f3:aa:85:e4:1b:ca:f2: 9a:09:79:4b:85:b0:bb:4f:5c:0b:9f:bf:ae:ea:80: 19:a5:7d:a6:9c:68:56:8f:4f:fc:50:fe:d7:dd:ca: f5:3f:05:93:52:0a:7c:c4:d1:b1:c2:63:4a:65:5a: 99:d3:c0:e6:49:5a:7e:0f:75:3a:55:32:14:74:c8: f4:f5:c3:12:f7:d1:33:be:5b:c6:57:3d:0f:b4:a6: ac:a9:19:5b:4c:4f:17:c8:66:93:da:8e:a3:13:a7: 0d:92:ac:26:11:a3:1a:7f:e0:57:08:f9:e6:77:3b: f4:76:c0:64:45:49:71:df:4e:6e:e4:70:66:0a:29: 9a:42:97:b1:a8:a2:fd:8c:75:d0:e9:6b:ca:f7:63: 4a:b4:ae:23:d0:c7:2f:ba:15:4b:84:a7:4b:02:78: f9:1c:1e:87:b0:01:4b:20:c2:1e:33:a6:77:6f:a3: c1:c4:2a:e4:73:64:54:12:84:55:21:5a:d6:12:e9: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:D2:9A:09:4B:B3:23:8E:6F:C4:FB:90:87:CD:C7:39:54:E7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4d5a1ca8-6c7b-35af-8703-6d4de282fb2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 68.168.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1a:83:a8:34:89:e2:a3:8c:0b:8a:77:f3:df:f3:5a:62:74: 70:9f:84:f7:60:4e:1d:03:b3:1d:ce:aa:bc:81:29:81:ad:4f: d3:cc:f3:5e:01:f4:30:16:9e:07:f1:e9:d3:ee:81:22:16:e9: 5b:c6:66:32:fb:7c:2e:99:50:1d:fb:41:93:8b:e6:49:e6:24: f0:02:0c:51:a0:e2:42:d0:02:53:83:a8:65:1d:fd:44:8a:14: 01:6a:c1:78:69:c4:2d:6c:f7:89:57:e2:75:46:73:0b:a4:02: 4f:65:b7:2c:9a:a8:a2:71:fa:29:40:38:59:0e:64:b9:79:55: b0:79:26:d7:e6:ac:0c:bf:b3:8e:82:d6:d1:d5:04:16:8e:49: 09:79:f1:4b:35:34:81:1b:a1:0a:62:49:32:70:a2:58:7b:af: e4:85:96:ae:7c:94:12:78:33:f0:30:45:bf:06:6b:1f:db:bf: 8b:2d:df:95:ab:77:ff:c6:9d:01:88:5b:24:9e:5c:5b:47:36: c2:a1:45:03:11:69:28:ed:11:7a:4e:e3:7e:53:fe:b7:f5:be: 69:06:60:d5:2c:f8:39:73:ac:02:cc:14:45:d1:e9:d2:f0:df: b3:4b:eb:c6:3b:6d:8b:c3:4d:a1:2f:a7:52:f4:ca:f2:11:fd: 18:5d:e8:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaDBO4l+t0sjv+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk Zjg1NDg0OGMtMzNlYS00OWUyLWE3ZjYtYWIzOTkxMjE0MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfErmHciVRq5p0qaP8shyzztK9u5en6xRDhU stP+0DPivAe/fhCS7p+eUJB5+hLqSuU7FVexIGeuVCJsGgLhx4j10vOqheQbyvKa CXlLhbC7T1wLn7+u6oAZpX2mnGhWj0/8UP7X3cr1PwWTUgp8xNGxwmNKZVqZ08Dm SVp+D3U6VTIUdMj09cMS99EzvlvGVz0PtKasqRlbTE8XyGaT2o6jE6cNkqwmEaMa f+BXCPnmdzv0dsBkRUlx305u5HBmCimaQpexqKL9jHXQ6WvK92NKtK4j0McvuhVL hKdLAnj5HB6HsAFLIMIeM6Z3b6PBxCrkc2RUEoRVIVrWEumA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQk0poJS7Mjjm/E+5CHzcc5VOfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGQ1YTFjYTgtNmM3Yi0z NWFmLTg3MDMtNmQ0ZGUyODJmYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUag6g0ieKjjAuKd/Pf81pidHCfhPdgTh0Dsx3OqryBKYGtT9PM814B 9DAWngfx6dPugSIW6VvGZjL7fC6ZUB37QZOL5knmJPACDFGg4kLQAlODqGUd/USK FAFqwXhpxC1s94lX4nVGcwukAk9ltyyaqKJx+ilAOFkOZLl5VbB5JtfmrAy/s46C 1tHVBBaOSQl58Us1NIEboQpiSTJwolh7r+SFlq58lBJ4M/AwRb8Gax/bv4st35Wr d//GnQGIWySeXFtHNsKhRQMRaSjtEXpO435T/rf1vmkGYNUs+DlzrALMFEXR6dLw 37NL68Y7bYvDTaEvp1L0yvIR/Rhd6Fk= -----END CERTIFICATE-----Generated at Sat Oct 3 19:28:39 2026 by rpki-client