$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fbe2468-ca6b-3680-b076-fea797b24c1a.roa File: 0fbe2468-ca6b-3680-b076-fea797b24c1a.roa (raw, json) Hash identifier: CNFTjx2TMjzxZEZkI6GgG/Pb3SEYIg6zop7j3Ic8zoU= Subject key identifier: 8E:63:CC:A1:E0:E8:BF:FE:B9:D8:F1:9F:D8:0F:96:0A:C6:AE:07:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49795AE58D2582ECBF332080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fbe2468-ca6b-3680-b076-fea797b24c1a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 68.47.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:5a:e5:8d:25:82:ec:bf:33:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56fff3e6-9769-4927-97d2-29d85ed18829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:da:e2:65:02:9a:03:63:12:8e:4d:46:e3: 89:76:5f:d5:90:c7:07:1b:5e:d7:d5:e5:ec:f3:10: 90:80:3f:33:d4:95:97:7d:51:a6:cb:2d:17:5d:50: e9:04:b2:85:a1:a7:63:10:9d:cf:2a:ef:75:59:55: a1:45:65:0c:31:b0:fe:3d:f9:db:e0:13:e0:5c:3b: b6:a1:91:bf:4a:2f:52:a8:09:40:af:c3:41:b0:89: 21:40:f5:f8:63:54:b1:03:ee:dd:22:60:ce:35:c4: ea:9a:5c:a3:3e:98:14:2d:7d:7a:c7:32:1e:64:ed: 10:aa:ab:b0:5f:8d:7e:5d:00:8c:11:26:b9:c8:fe: 71:23:aa:76:11:85:6a:6a:fc:a1:0e:24:e3:84:42: 30:7d:db:5f:03:4a:38:42:4b:c2:3c:0a:f3:ec:5f: 18:3d:da:cd:29:f4:e2:68:1e:04:03:6b:23:b6:cf: 76:2f:de:e4:0d:43:50:e6:23:f6:af:8c:af:08:db: 20:8e:43:f5:2e:e9:de:2b:54:d8:6b:69:f6:aa:33: 2d:ed:74:b1:90:de:48:80:b1:39:fb:89:09:e8:f5: 23:1f:7d:c9:36:78:c6:bf:72:97:e6:c8:9d:61:6a: e1:fb:99:1f:92:16:59:f6:a2:a8:6b:c6:2c:dd:05: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:CC:A1:E0:E8:BF:FE:B9:D8:F1:9F:D8:0F:96:0A:C6:AE:07:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fbe2468-ca6b-3680-b076-fea797b24c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c6:e8:bb:8b:1e:36:ee:21:c8:9b:be:de:5f:71:76:86:d6: 40:b7:00:42:e2:d4:74:47:e5:ba:15:a6:44:82:d7:49:2a:17: ad:91:7d:4f:df:f9:56:6d:89:ce:63:68:aa:6d:08:72:69:73: 6e:87:78:69:e4:02:ce:e4:48:8e:82:83:45:7b:fc:bb:cf:be: e9:7b:4b:ef:3f:1d:97:54:94:fb:8d:0f:99:53:c6:cf:62:01: 11:d9:7f:38:e1:dd:5f:7a:c1:4e:87:6a:af:51:ae:99:5a:27: 49:4f:60:b8:d8:c8:74:8c:ce:b3:4d:85:5b:70:9a:bd:95:c1: 18:e9:77:92:27:04:f3:d8:92:4e:52:58:f0:51:f8:9a:97:17: 1e:da:f9:82:c3:c0:ea:ca:eb:2c:aa:47:45:5b:62:f3:0f:01: 9b:6a:6e:ee:2d:7d:ff:03:d3:5a:92:a6:13:d1:89:c6:cc:c5: 15:f8:73:1a:cf:e7:e4:c9:5a:f8:0b:63:94:ef:82:bd:cc:ca: b5:79:90:49:32:40:ff:d1:fe:af:93:d2:f1:95:85:41:46:8b: f8:9e:6b:c4:36:82:04:b2:ab:3e:d8:67:85:ae:32:e2:fb:d3: e2:d2:62:48:cc:d7:63:b0:80:36:06:32:ee:49:cf:6a:f4:d8: 05:64:79:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeVrljSWC7L8zIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZmZmYzZTYtOTc2OS00OTI3LTk3ZDItMjlkODVlZDE4ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJza4mUCmgNjEo5NRuOJdl/VkMcHG17X1eXs 8xCQgD8z1JWXfVGmyy0XXVDpBLKFoadjEJ3PKu91WVWhRWUMMbD+Pfnb4BPgXDu2 oZG/Si9SqAlAr8NBsIkhQPX4Y1SxA+7dImDONcTqmlyjPpgULX16xzIeZO0Qqquw X41+XQCMESa5yP5xI6p2EYVqavyhDiTjhEIwfdtfA0o4QkvCPArz7F8YPdrNKfTi aB4EA2sjts92L97kDUNQ5iP2r4yvCNsgjkP1LuneK1TYa2n2qjMt7XSxkN5IgLE5 +4kJ6PUjH33JNnjGv3KX5sidYWrh+5kfkhZZ9qKoa8Ys3QUSlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5jzKHg6L/+udjxn9gPlgrGrgclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZiZTI0NjgtY2E2Yi0z NjgwLWIwNzYtZmVhNzk3YjI0YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILG6LuLHjbuIcibvt5fcXaG1kC3AELi1HRH5boVpkSC10kqF62RfU/f +VZtic5jaKptCHJpc26HeGnkAs7kSI6Cg0V7/LvPvul7S+8/HZdUlPuND5lTxs9i ARHZfzjh3V96wU6Haq9RrplaJ0lPYLjYyHSMzrNNhVtwmr2VwRjpd5InBPPYkk5S WPBR+JqXFx7a+YLDwOrK6yyqR0VbYvMPAZtqbu4tff8D01qSphPRicbMxRX4cxrP 5+TJWvgLY5Tvgr3MyrV5kEkyQP/R/q+T0vGVhUFGi/iea8Q2ggSyqz7YZ4WuMuL7 0+LSYkjM12OwgDYGMu5Jz2r02AVkeWc= -----END CERTIFICATE-----Generated at Sat Sep 26 11:41:14 2026 by rpki-client