$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa File: c46b0c81-723c-3db5-a787-071d8144bf3c.roa (raw, json) Hash identifier: qdCoEal+LxjU4KTCS1g02M7aRw40CchyvtnOP7nDxyI= Subject key identifier: 75:D6:54:95:63:33:18:C2:50:26:A5:A4:E5:58:E1:D7:7A:60:6D:B2 Certificate issuer: /CN=286e84d2-4ed8-4fae-8d3b-745fc993eaa1 Certificate serial: 010D0C9F4328584F49879DAE35E564C883607090 Authority key identifier: 84:2D:05:B5:45:43:82:DD:F5:8C:81:AE:B0:AD:59:6B:CF:02:54:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 402123 IP address blocks: 68.67.123.0/24 maxlen: 24 2602:fbe2::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:9d:ae:35:e5:64:c8:83:60:70:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286e84d2-4ed8-4fae-8d3b-745fc993eaa1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c6483236-7b70-4eac-9de5-0e8967fa0a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:25:18:9e:7b:54:71:08:09:77:6d:3f:f3: fb:1d:3a:1c:a6:46:ea:f7:e5:1a:c7:b5:6c:47:b9: 39:83:ea:bc:5e:1b:37:58:81:5b:88:8a:0a:a4:d5: c8:f5:45:ef:1e:67:ae:6d:0d:c2:5b:62:26:9c:8d: 32:2d:d4:42:85:44:e8:a1:5a:68:12:d1:37:86:be: 49:4c:12:5a:b5:23:2f:ae:57:83:39:01:4a:7f:9e: ad:c8:1e:a2:32:28:e1:a1:e7:55:a0:71:8a:86:b5: e9:3c:05:dd:10:e8:39:cf:36:25:7c:0b:b6:39:28: a5:03:ab:e0:ac:03:56:9c:f5:ce:da:f2:73:b6:e4: 93:bd:64:0b:02:c2:1f:6f:1c:29:52:d2:60:9f:5e: b5:8d:75:16:a5:d6:39:5d:b2:c9:36:4f:0d:26:55: 6f:d3:26:ab:11:7e:89:bb:5d:0f:69:83:c6:39:06: 4b:c2:48:39:7f:eb:b3:13:dd:32:d3:55:b3:15:cf: b2:6a:c6:cb:fd:a6:65:00:96:a2:8a:64:a5:8f:a0: 9a:ae:1f:9b:f3:d8:28:fe:fc:fc:c1:12:d7:56:58: e9:59:d6:38:b4:14:e7:8c:3d:db:e9:f6:13:6a:80: 55:68:7f:7f:99:97:70:87:e0:af:bc:60:42:f3:40: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D6:54:95:63:33:18:C2:50:26:A5:A4:E5:58:E1:D7:7A:60:6D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/c46b0c81-723c-3db5-a787-071d8144bf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.crl X509v3 Authority Key Identifier: keyid:84:2D:05:B5:45:43:82:DD:F5:8C:81:AE:B0:AD:59:6B:CF:02:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/286e84d2-4ed8-4fae-8d3b-745fc993eaa1.cer sbgp-ipAddrBlock: critical IPv4: 68.67.123.0/24 IPv6: 2602:fbe2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5d:04:8b:5c:8a:6b:37:4c:17:29:17:62:14:20:ba:ee:94: 97:1e:82:0f:2a:12:91:07:72:8a:dc:7c:0d:ab:f3:ed:ee:f7: 7b:7e:05:00:5b:93:36:92:d3:4f:54:f8:54:da:5a:d5:62:32: bb:9d:a3:1b:cd:f1:94:75:2b:41:71:5e:3e:2c:af:5d:8d:19: 32:d1:54:83:77:23:03:b5:df:42:87:79:a9:32:d4:5a:08:f9: ea:61:4c:f8:17:4c:96:8f:bd:b2:56:24:a7:06:80:7b:4e:ac: d6:a7:ed:89:2b:88:ad:f8:62:9d:66:06:ce:4e:24:3f:3a:20: cc:a3:8b:49:33:20:5a:f8:27:a6:5e:73:b0:3f:33:5a:fa:62: 8e:86:24:ce:b9:89:93:ba:a4:7a:e4:45:1b:4e:3a:5d:94:59: 74:e4:fd:98:53:df:b7:6c:a9:fc:d6:87:d7:17:05:10:d8:65: 7c:df:96:44:e8:11:39:3a:5e:94:0d:33:e6:c2:0d:e2:3b:53: 8f:64:6a:e4:6b:85:ce:a9:c0:aa:61:3d:c5:50:30:f8:3a:91: 0a:45:d9:09:79:98:3b:8e:ba:e3:89:15:6d:66:a2:95:fd:27: 58:e4:c2:e9:e6:12:87:24:e1:9c:15:32:dc:7f:8b:00:78:8e: 01:36:49:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jh52uNeVkyINgcJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2ZTg0ZDItNGVkOC00ZmFlLThkM2ItNzQ1ZmM5OTNl YWExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY0ODMyMzYtN2I3MC00ZWFjLTlkZTUtMGU4OTY3ZmEwYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20UlGJ57VHEICXdtP/P7HTocpkbq9+Uax7Vs R7k5g+q8Xhs3WIFbiIoKpNXI9UXvHmeubQ3CW2ImnI0yLdRChUTooVpoEtE3hr5J TBJatSMvrleDOQFKf56tyB6iMijhoedVoHGKhrXpPAXdEOg5zzYlfAu2OSilA6vg rANWnPXO2vJztuSTvWQLAsIfbxwpUtJgn161jXUWpdY5XbLJNk8NJlVv0yarEX6J u10PaYPGOQZLwkg5f+uzE90y01WzFc+yasbL/aZlAJaiimSlj6Carh+b89go/vz8 wRLXVljpWdY4tBTnjD3b6fYTaoBVaH9/mZdwh+CvvGBC80ChBwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHXWVJVjMxjCUCalpOVY4dd6YG2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yODZl ODRkMi00ZWQ4LTRmYWUtOGQzYi03NDVmYzk5M2VhYTEvYzQ2YjBjODEtNzIzYy0z ZGI1LWE3ODctMDcxZDgxNDRiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjg2ZTg0ZDItNGVkOC00ZmFlLThk M2ItNzQ1ZmM5OTNlYWExLzI4NmU4NGQyLTRlZDgtNGZhZS04ZDNiLTc0NWZjOTkz ZWFhMS5jcmwwHwYDVR0jBBgwFoAUhC0FtUVDgt31jIGusK1Za88CVLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yODZlODRkMi00ZWQ4LTRmYWUtOGQzYi03NDVm Yzk5M2VhYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAREN7MA4E AgACMAgDBgAmAvviADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEXQSLXIprN0wXKRdiFCC67pSXHoIPKhKR B3KK3HwNq/Pt7vd7fgUAW5M2ktNPVPhU2lrVYjK7naMbzfGUdStBcV4+LK9djRky 0VSDdyMDtd9Ch3mpMtRaCPnqYUz4F0yWj72yViSnBoB7TqzWp+2JK4it+GKdZgbO TiQ/OiDMo4tJMyBa+CemXnOwPzNa+mKOhiTOuYmTuqR65EUbTjpdlFl05P2YU9+3 bKn81ofXFwUQ2GV835ZE6BE5Ol6UDTPmwg3iO1OPZGrka4XOqcCqYT3FUDD4OpEK RdkJeZg7jrrjiRVtZqKV/SdY5MLp5hKHJOGcFTLcf4sAeI4BNkmC -----END CERTIFICATE-----Generated at Fri Oct 2 11:34:45 2026 by rpki-client