$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28197d1a-7f8e-365c-b7e2-165e6a2ccfde.roa File: 28197d1a-7f8e-365c-b7e2-165e6a2ccfde.roa (raw, json) Hash identifier: /s6vPUsxMub2Q96ffpZ6X2fLSskQz1sKrNvaC4cq3bg= Subject key identifier: 0A:C3:EB:67:6D:38:0A:32:02:0A:48:32:85:F0:1E:09:79:98:97:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D6C54AB0B232BD7FBBA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28197d1a-7f8e-365c-b7e2-165e6a2ccfde.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 68.81.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:6c:54:ab:0b:23:2b:d7:fb:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=df68d66d-8642-4bb0-b213-a15937c85d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:15:7f:35:e0:ca:05:48:bc:3d:ef:12:77: 22:ae:56:1a:f1:27:75:33:3e:16:3f:81:1d:38:ed: e9:d0:ad:3d:71:71:29:bf:af:74:ed:e2:b0:62:8a: 2e:4e:b6:b4:45:cf:0b:cd:1d:af:06:64:62:a0:4d: 7c:84:bb:20:4c:41:e0:9a:8e:7d:45:fc:94:f2:e8: d2:69:76:a6:02:ff:72:4b:79:e4:d5:b4:a5:d2:4c: be:9f:d0:81:4b:b8:c9:de:90:f9:67:5f:bd:a5:a4: 10:ae:0e:c9:85:0d:58:19:9a:e5:dd:52:f8:b7:46: 72:a1:e2:1a:86:61:e0:90:b0:fa:c3:74:1a:b4:f2: fc:98:f2:0b:ba:d4:2c:1d:02:b7:31:30:63:d3:30: e4:e5:31:53:96:29:9b:a7:47:03:a1:d0:d0:9d:22: 11:c5:16:35:d1:bd:34:a9:48:0c:f9:c9:55:83:d9: 48:c7:08:9e:90:83:7d:c2:67:6f:40:c3:8d:7f:24: e4:b6:a9:19:7d:83:b1:cd:73:98:d7:fa:30:fa:1b: 93:64:4e:26:40:fe:f8:77:02:72:ce:62:f5:96:3c: d2:37:26:93:2c:0f:73:5a:43:71:2c:ac:1b:ee:68: d1:c0:95:1e:f9:42:90:7e:cd:a7:f0:0a:cc:e6:fe: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C3:EB:67:6D:38:0A:32:02:0A:48:32:85:F0:1E:09:79:98:97:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28197d1a-7f8e-365c-b7e2-165e6a2ccfde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:92:47:4d:1e:87:0c:b9:5d:ee:b1:3d:1d:91:f1:5e:8a:c4: eb:b5:04:66:9b:8c:2e:d5:47:06:aa:21:ad:5b:de:a3:ba:a2: b6:ac:71:c7:35:65:2c:e0:b3:82:9e:18:83:6a:10:18:c0:45: 74:b6:c2:ac:a3:94:2d:87:20:79:ca:b4:a7:d7:69:7b:e7:46: e7:ab:36:a4:34:12:16:45:b3:b6:8d:3b:28:87:d4:4a:20:bc: 66:76:90:66:3f:82:88:bd:8e:d8:99:b8:49:6c:4b:99:0b:56: b8:65:aa:ae:c3:b6:d9:64:ac:9b:63:dd:31:3a:23:0e:f1:e3: 1d:47:55:fa:72:a2:dd:65:5f:42:4a:d5:80:ab:72:00:d8:c8: ee:8c:ce:51:f8:81:bd:94:5f:e7:a5:95:ce:67:91:a5:a9:b5: a4:2c:e8:0a:81:b3:6c:c1:1c:90:de:66:3b:95:94:c3:bd:5a: 32:f6:54:5a:86:a0:f1:2a:fc:ee:bc:2b:97:8c:e3:b7:9f:e9: e8:d6:2c:e9:74:9c:a9:f1:68:a6:d3:40:ac:6d:b3:06:74:f4: e8:f4:8f:f9:b2:6a:d8:cd:28:9a:3f:0a:d6:65:f8:05:bb:86: 12:89:07:c2:bd:e4:13:95:3e:bb:13:b3:28:e6:6f:19:6b:76: 3d:47:28:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnWxUqwsjK9f7ukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY2OGQ2NmQtODY0Mi00YmIwLWIyMTMtYTE1OTM3Yzg1ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8VfzXgygVIvD3vEncirlYa8Sd1Mz4WP4Ed OO3p0K09cXEpv6907eKwYoouTra0Rc8LzR2vBmRioE18hLsgTEHgmo59RfyU8ujS aXamAv9yS3nk1bSl0ky+n9CBS7jJ3pD5Z1+9paQQrg7JhQ1YGZrl3VL4t0ZyoeIa hmHgkLD6w3QatPL8mPILutQsHQK3MTBj0zDk5TFTlimbp0cDodDQnSIRxRY10b00 qUgM+clVg9lIxwiekIN9wmdvQMONfyTktqkZfYOxzXOY1/ow+huTZE4mQP74dwJy zmL1ljzSNyaTLA9zWkNxLKwb7mjRwJUe+UKQfs2n8ArM5v6bhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArD62dtOAoyAgpIMoXwHgl5mJd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjgxOTdkMWEtN2Y4ZS0z NjVjLWI3ZTItMTY1ZTZhMmNjZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmSR00ehwy5Xe6xPR2R8V6KxOu1BGabjC7VRwaqIa1b3qO6orasccc1 ZSzgs4KeGINqEBjARXS2wqyjlC2HIHnKtKfXaXvnRuerNqQ0EhZFs7aNOyiH1Eog vGZ2kGY/goi9jtiZuElsS5kLVrhlqq7DttlkrJtj3TE6Iw7x4x1HVfpyot1lX0JK 1YCrcgDYyO6MzlH4gb2UX+ellc5nkaWptaQs6AqBs2zBHJDeZjuVlMO9WjL2VFqG oPEq/O68K5eM47ef6ejWLOl0nKnxaKbTQKxtswZ09Oj0j/myatjNKJo/CtZl+AW7 hhKJB8K95BOVPrsTsyjmbxlrdj1HKII= -----END CERTIFICATE-----Generated at Thu Sep 24 13:12:08 2026 by rpki-client