$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa File: 2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa (raw, json) Hash identifier: 6YvkhB8U6WneNYqPpJfz7/eZ2O9TOR//ogYz5XCWCl8= Subject key identifier: 3D:7D:FE:65:40:69:E4:20:E4:AB:AD:DA:CE:5A:C1:F6:CC:A0:E4:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78B033693D42D58A37A8800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33491 IP address blocks: 68.58.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:03:36:93:d4:2d:58:a3:7a:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2a61e5f9-0b80-4872-b77f-56669fc03fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:88:3a:0a:eb:6a:1d:2e:9d:56:22:3f:77: 68:07:5e:fc:7b:33:9d:30:7c:5a:9f:e8:d0:06:60: d1:58:50:40:0f:44:da:2a:b3:72:46:2c:91:e2:2b: 8d:16:81:c5:37:2f:9d:db:73:62:e0:e3:c6:9c:f0: 16:09:a5:62:55:d5:b7:d2:84:75:df:b3:08:2d:f9: 21:a7:a0:30:23:95:c5:b5:a9:26:a7:a7:50:98:26: ee:0b:1a:01:c8:f1:fc:24:67:fc:1f:d1:d0:78:45: 2c:83:80:48:f0:a4:5c:a2:fb:1b:24:88:12:27:1d: 6f:5b:d9:b4:02:99:b3:e2:2d:60:b4:0a:24:0f:06: a5:83:d4:6d:16:77:4b:70:8e:c9:eb:6d:b9:95:ee: 31:e2:43:e7:9c:08:99:82:1e:cc:5f:24:c8:a3:ea: d6:05:64:b7:75:4a:92:98:cf:d1:f9:ad:d0:2f:50: 12:10:74:33:f7:fc:92:da:26:4d:cc:8e:6b:24:08: 73:ad:51:bb:10:94:f7:56:c1:fe:4f:27:25:8a:c2: d8:67:86:83:45:7b:e1:34:71:54:3f:ec:98:7c:81: b2:7e:87:54:da:d8:2b:09:44:47:1c:25:3d:e3:55: cf:55:50:82:41:69:da:6e:9a:76:ab:af:78:99:28: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7D:FE:65:40:69:E4:20:E4:AB:AD:DA:CE:5A:C1:F6:CC:A0:E4:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dd:23:a8:7f:62:e0:5b:ee:fc:58:f9:36:fa:18:63:8a:a9: 65:4a:3a:09:70:42:35:a0:6a:3a:a3:5e:3f:c4:30:a4:7c:ba: ab:f0:24:e9:9f:ce:a4:02:9b:52:3e:69:86:00:ac:e1:53:0e: 97:e1:1a:64:18:4b:0f:f7:af:eb:33:5c:41:b1:5c:17:df:f3: b2:35:d3:0c:03:fb:d3:0e:b3:0a:9a:40:7b:bb:08:07:dd:1b: d6:9b:4d:29:54:51:6f:16:32:d9:4b:00:40:39:f1:88:cd:9e: cc:a9:24:08:07:f8:db:c9:95:ae:48:2a:df:32:18:a7:d1:c3: c2:2b:46:ba:e1:c3:ec:73:4a:eb:1e:f5:da:2b:82:69:0f:9b: ab:fe:a3:72:33:5c:50:bc:ed:55:4b:3a:b1:a4:55:4b:de:62: 87:e7:7a:b7:a1:67:27:34:af:d0:83:a1:ca:e1:7e:b1:54:39: 9e:1d:96:43:e6:01:a0:02:75:07:5f:2c:64:e3:c5:e7:99:d8: 79:dd:63:41:68:f8:49:57:50:77:7c:d0:b9:d7:fa:e7:c8:fb: a9:97:fd:15:6d:db:9b:61:04:16:46:e1:ba:21:62:b2:c3:83: ba:65:f7:ae:3d:2e:82:4b:3e:c4:9d:8d:ad:c5:67:a9:36:56: d4:4b:41:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niwM2k9QtWKN6iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmE2MWU1ZjktMGI4MC00ODcyLWI3N2YtNTY2NjlmYzAzZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivuIOgrrah0unVYiP3doB178ezOdMHxan+jQ BmDRWFBAD0TaKrNyRiyR4iuNFoHFNy+d23Ni4OPGnPAWCaViVdW30oR137MILfkh p6AwI5XFtakmp6dQmCbuCxoByPH8JGf8H9HQeEUsg4BI8KRcovsbJIgSJx1vW9m0 Apmz4i1gtAokDwalg9RtFndLcI7J6225le4x4kPnnAiZgh7MXyTIo+rWBWS3dUqS mM/R+a3QL1ASEHQz9/yS2iZNzI5rJAhzrVG7EJT3VsH+TyclisLYZ4aDRXvhNHFU P+yYfIGyfodU2tgrCURHHCU941XPVVCCQWnabpp2q694mSik0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD19/mVAaeQg5Kut2s5awfbMoOSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNkMzQ5NmMtNDgxOS0z NDg0LTg3MTItYjIxZWJmOWU2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRDoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTdI6h/YuBb7vxY+Tb6GGOKqWVKOglwQjWgajqjXj/EMKR8uqvwJOmf zqQCm1I+aYYArOFTDpfhGmQYSw/3r+szXEGxXBff87I10wwD+9MOswqaQHu7CAfd G9abTSlUUW8WMtlLAEA58YjNnsypJAgH+NvJla5IKt8yGKfRw8IrRrrhw+xzSuse 9dorgmkPm6v+o3IzXFC87VVLOrGkVUveYofnerehZyc0r9CDocrhfrFUOZ4dlkPm AaACdQdfLGTjxeeZ2HndY0Fo+ElXUHd80LnX+ufI+6mX/RVt25thBBZG4bohYrLD g7pl9649LoJLPsSdja3FZ6k2VtRLQec= -----END CERTIFICATE-----Generated at Wed Jul 29 04:37:02 2026 by rpki-client