$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa File: 2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa (raw, json) Hash identifier: t2NlHWmUOHywBlq0zqiKwLJ2rumrx2TttucJTbxZ4Bc= Subject key identifier: 2A:BA:8A:A3:95:28:0B:E1:48:C0:6C:0B:46:97:4F:DB:E4:77:C3:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78BD6C8F8B4493786F0E880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 68.60.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:d6:c8:f8:b4:49:37:86:f0:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=be017a65-a97f-406a-a210-1388f5365921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:20:2a:59:4b:2e:28:f2:2d:4a:4b:58:b0:0f: 3b:45:ea:2a:3d:e3:5d:3a:2b:9f:97:52:41:89:27: 14:52:76:eb:08:79:de:e4:0d:5f:0a:90:20:65:ca: 09:3c:ba:0e:83:83:eb:14:a2:13:2a:86:59:fc:bb: fc:3c:ba:e0:b6:5c:b7:3c:14:f0:a5:3f:cf:86:b5: a1:6b:f8:fa:32:76:0f:f8:41:96:be:0e:d8:00:84: 2d:14:fd:fc:31:91:d5:ea:30:d7:5f:7d:f2:f7:dd: 51:e8:e3:83:af:52:db:74:8b:45:9f:c4:da:bf:9a: 78:37:04:30:12:d8:33:7c:af:7e:8d:c4:95:14:d8: b0:5b:e2:28:b0:70:20:a1:17:76:99:32:5c:4d:f2: fc:f7:34:fd:2c:1c:8a:2e:a1:b2:8b:b3:03:79:73: 77:aa:0e:77:02:11:8e:1a:7b:6d:6b:fb:02:7b:6e: 27:08:ea:c3:9a:a4:ae:8a:9d:68:fa:11:91:f1:42: 5e:83:85:21:b8:18:cc:55:03:a2:f9:81:b8:64:82: cc:d1:25:d3:6b:cb:43:8c:b3:54:0c:46:8a:74:4e: 89:92:36:69:5c:a7:06:40:cd:a5:91:96:6d:2a:00: ca:7f:68:60:ea:06:d4:55:dd:8b:75:7b:ae:51:e4: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BA:8A:A3:95:28:0B:E1:48:C0:6C:0B:46:97:4F:DB:E4:77:C3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b89a3fc-8f56-3bfa-9e95-ca4f6fc36377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b1:dc:99:00:2d:95:00:09:b9:cd:d0:dd:c1:69:b7:c9:4f: 3e:83:36:99:10:03:d8:f5:80:a8:78:e3:12:e8:dd:d2:c4:81: a4:16:e2:e0:53:4f:16:6e:c9:df:23:05:e4:9d:67:d3:e0:99: 63:be:5d:7e:17:ca:e0:77:06:5c:d0:a8:d0:2a:c1:9d:9f:d4: b7:b9:70:ac:12:69:e5:da:93:c5:a9:24:54:e5:f9:7c:cf:37: 9d:08:0a:a7:9b:a3:99:a4:3d:31:2f:b0:a7:8b:46:25:08:44: 0e:1b:d2:90:7d:7d:5e:ee:58:83:e0:4e:2f:fc:cf:4b:d9:a8: 17:8e:cf:69:10:6b:3b:c6:b3:27:bd:10:98:b9:f9:95:30:37: fc:71:23:dc:ea:68:f4:d8:83:2d:d8:36:f7:aa:d4:3a:62:06: 2e:7e:f0:f7:7c:32:33:45:bd:a8:3a:c3:01:da:61:a2:57:c5: 95:63:15:f0:df:f1:87:b8:48:a8:46:89:66:93:2e:ba:d0:29: 21:e2:23:6f:fc:b0:17:d5:b1:27:ab:79:01:2d:e2:29:5d:54: d9:77:14:45:d2:05:32:df:26:b7:8f:04:f8:07:94:75:f4:54: 90:66:05:b6:39:48:e0:fb:43:b3:7d:18:2d:d4:af:27:ad:19: e3:53:16:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni9bI+LRJN4bw6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmUwMTdhNjUtYTk3Zi00MDZhLWEyMTAtMTM4OGY1MzY1OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCAqWUsuKPItSktYsA87ReoqPeNdOiufl1JB iScUUnbrCHne5A1fCpAgZcoJPLoOg4PrFKITKoZZ/Lv8PLrgtly3PBTwpT/PhrWh a/j6MnYP+EGWvg7YAIQtFP38MZHV6jDXX33y991R6OODr1LbdItFn8Tav5p4NwQw EtgzfK9+jcSVFNiwW+IosHAgoRd2mTJcTfL89zT9LByKLqGyi7MDeXN3qg53AhGO Gntta/sCe24nCOrDmqSuip1o+hGR8UJeg4UhuBjMVQOi+YG4ZILM0SXTa8tDjLNU DEaKdE6JkjZpXKcGQM2lkZZtKgDKf2hg6gbUVd2LdXuuUeSqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq6iqOVKAvhSMBsC0aXT9vkd8NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI4OWEzZmMtOGY1Ni0z YmZhLTllOTUtY2E0ZjZmYzM2Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJax3JkALZUACbnN0N3BabfJTz6DNpkQA9j1gKh44xLo3dLEgaQW4uBT TxZuyd8jBeSdZ9PgmWO+XX4XyuB3BlzQqNAqwZ2f1Le5cKwSaeXak8WpJFTl+XzP N50ICqebo5mkPTEvsKeLRiUIRA4b0pB9fV7uWIPgTi/8z0vZqBeOz2kQazvGsye9 EJi5+ZUwN/xxI9zqaPTYgy3YNveq1DpiBi5+8Pd8MjNFvag6wwHaYaJXxZVjFfDf 8Ye4SKhGiWaTLrrQKSHiI2/8sBfVsSereQEt4ildVNl3FEXSBTLfJrePBPgHlHX0 VJBmBbY5SOD7Q7N9GC3UryetGeNTFsc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:09 2026 by rpki-client