$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6ad516-7e65-3763-82f1-8cc0c5f5f7d3.roa File: 0e6ad516-7e65-3763-82f1-8cc0c5f5f7d3.roa (raw, json) Hash identifier: 34IimMaVsF0ftcjNHAlayjPphRHBIRq6xraqRh8aXJA= Subject key identifier: BD:AE:67:78:D1:1C:C9:84:DF:48:65:EB:36:50:CC:D3:59:DE:D5:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498138F231877319D3DA7220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6ad516-7e65-3763-82f1-8cc0c5f5f7d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33667 IP address blocks: 68.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:38:f2:31:87:73:19:d3:da:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d57f6c91-1376-4d63-8aea-93a855b7516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:a5:32:bb:21:c5:f9:06:b7:c6:88:88:7b: 83:75:20:0c:85:a1:05:e0:b7:4c:06:c2:25:d1:59: 2e:7e:c3:cf:4f:8c:8b:d1:0f:27:5b:54:20:f0:a2: 2f:48:c6:1c:7d:3e:4d:a3:35:be:f7:ba:94:b0:16: 97:60:06:3e:0a:75:00:bf:e8:e4:84:32:9e:fb:e5: 57:4f:c7:42:40:98:f4:23:35:17:01:dc:46:df:e5: 68:95:e4:f0:0d:d9:85:ac:c8:5e:e2:6c:70:5e:b2: 02:30:59:b9:32:71:f8:5d:7f:bc:0f:59:74:b6:5e: 87:d8:44:62:8d:94:d9:b0:f9:ed:83:f8:7c:8b:31: ad:7e:5d:72:c2:2a:b7:d9:f4:f6:9f:c8:49:6f:e4: e7:29:a6:10:9f:2b:02:a7:a9:0e:e3:8d:84:8d:b2: 82:10:58:2c:61:c4:ac:3f:13:00:57:9d:c5:1e:fd: fc:93:38:09:47:f1:1b:99:8d:45:62:8c:e1:95:92: 84:d2:4d:96:25:62:a3:af:7f:82:53:c9:b2:00:b1: aa:cd:2e:f3:9e:86:59:ae:be:ba:91:32:32:1e:82: f4:66:cf:a5:45:dc:d3:7d:37:c8:3c:14:b5:32:b9: 25:ef:33:74:29:2a:07:96:15:9c:30:63:ef:95:18: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:67:78:D1:1C:C9:84:DF:48:65:EB:36:50:CC:D3:59:DE:D5:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e6ad516-7e65-3763-82f1-8cc0c5f5f7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:84:25:bb:9d:88:cc:5f:98:01:86:f6:4f:5a:07:6d:03:55: f7:6d:4e:cd:48:35:14:ea:2b:05:33:81:62:ed:e9:be:f4:37: bb:29:86:e4:4c:06:1c:fd:5b:27:34:a4:41:0e:d7:3f:97:ee: ed:8b:38:c7:50:da:f7:71:1a:88:24:28:d1:85:6b:4c:3a:6e: 4b:40:d4:f2:9e:39:d4:69:27:10:5d:b5:0d:1a:35:05:fb:ff: 68:f1:e0:23:fa:86:38:46:0f:d7:9e:8c:09:c0:7f:be:ad:ec: 32:8d:5c:10:97:e6:7d:5f:c3:67:5d:e2:a9:67:70:82:a9:d8: a8:df:8d:8f:a7:b8:92:2c:36:2a:37:14:12:73:fa:6c:96:97: de:c6:04:c8:70:af:80:70:f8:ac:d1:63:e8:0b:3a:68:81:01: a9:22:6f:1a:c7:6b:ad:6e:25:26:f6:c8:1a:9f:c7:14:88:86: 14:4f:2b:6f:2c:f7:0d:9f:3e:6b:6c:0a:ac:7b:a6:dd:32:d1: 4a:16:80:df:0f:8f:59:6c:2e:5f:7b:38:ed:eb:57:07:98:14: a4:d5:26:9f:c1:03:57:a1:89:ca:08:b5:29:05:24:22:1f:a9: 1e:90:fe:2e:ea:d7:b8:e4:a6:40:ad:c0:f7:ad:64:de:af:13: 17:28:f7:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgTjyMYdzGdPaciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU3ZjZjOTEtMTM3Ni00ZDYzLThhZWEtOTNhODU1Yjc1MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF6lMrshxfkGt8aIiHuDdSAMhaEF4LdMBsIl 0VkufsPPT4yL0Q8nW1Qg8KIvSMYcfT5NozW+97qUsBaXYAY+CnUAv+jkhDKe++VX T8dCQJj0IzUXAdxG3+VoleTwDdmFrMhe4mxwXrICMFm5MnH4XX+8D1l0tl6H2ERi jZTZsPntg/h8izGtfl1ywiq32fT2n8hJb+TnKaYQnysCp6kO442EjbKCEFgsYcSs PxMAV53FHv38kzgJR/EbmY1FYozhlZKE0k2WJWKjr3+CU8myALGqzS7znoZZrr66 kTIyHoL0Zs+lRdzTfTfIPBS1Mrkl7zN0KSoHlhWcMGPvlRhexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2uZ3jRHMmE30hl6zZQzNNZ3tXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU2YWQ1MTYtN2U2NS0z NzYzLTgyZjEtOGNjMGM1ZjVmN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSEJbudiMxfmAGG9k9aB20DVfdtTs1INRTqKwUzgWLt6b70N7sphuRM Bhz9Wyc0pEEO1z+X7u2LOMdQ2vdxGogkKNGFa0w6bktA1PKeOdRpJxBdtQ0aNQX7 /2jx4CP6hjhGD9eejAnAf76t7DKNXBCX5n1fw2dd4qlncIKp2KjfjY+nuJIsNio3 FBJz+myWl97GBMhwr4Bw+KzRY+gLOmiBAakibxrHa61uJSb2yBqfxxSIhhRPK28s 9w2fPmtsCqx7pt0y0UoWgN8Pj1lsLl97OO3rVweYFKTVJp/BA1ehicoItSkFJCIf qR6Q/i7q17jkpkCtwPetZN6vExco98Y= -----END CERTIFICATE-----Generated at Tue Sep 29 16:01:10 2026 by rpki-client