$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3350e25a-3033-32e4-8d60-6e9777018940.roa File: 3350e25a-3033-32e4-8d60-6e9777018940.roa (raw, json) Hash identifier: dvHgV9XDP/73bNDKmnfgGZzsr4oZ40BOjO4qT8NRsG0= Subject key identifier: A8:4A:49:B9:B6:6E:2C:DA:2C:B4:82:6C:6D:52:AD:58:3C:7A:32:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49776E0CEC449E5208015500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3350e25a-3033-32e4-8d60-6e9777018940.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.47.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:6e:0c:ec:44:9e:52:08:01:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9a4d44fe-2879-492d-9cd3-3693dbe3f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:cf:f8:73:73:2d:69:b2:e7:26:5a:04:91: 44:6a:d2:12:54:c1:c0:7c:f9:31:b9:7b:8e:1d:da: 05:9c:e9:ec:e1:ea:96:f8:f3:63:e8:6a:72:72:be: c3:9f:7b:af:0b:c1:b5:ad:55:cb:0b:ea:d8:66:2f: 69:8a:48:9c:71:be:41:1e:7e:8f:46:81:70:15:78: 9e:8c:82:39:59:05:7f:3a:24:81:34:35:f7:9f:88: d5:fb:9f:73:fc:af:b4:26:8d:72:0c:6c:dd:7c:73: aa:7a:62:27:c3:b2:aa:29:d0:55:87:4c:4e:ac:fd: 29:57:d3:92:0f:f7:bc:60:8d:56:b8:c5:97:7c:f1: c7:74:c5:1b:07:77:42:7a:8b:66:c5:a6:fa:23:5c: 0c:81:18:28:43:67:9e:fb:36:c0:7f:e0:76:75:19: 6d:2c:c8:84:6d:28:71:14:31:75:ba:05:96:69:0b: 8d:fe:06:f0:41:60:be:28:dd:dd:8c:6f:3b:ad:e2: da:92:59:5e:c4:51:91:49:b3:9b:ce:7f:3b:a1:94: 3a:df:a7:f6:57:8e:4d:db:3f:ec:74:6b:e8:ad:c8: 3d:aa:23:4c:dc:c1:de:b5:4a:0d:e4:a2:0c:8d:f9: d9:9a:c8:85:cf:21:73:2b:1a:54:2c:3c:05:e3:b1: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:49:B9:B6:6E:2C:DA:2C:B4:82:6C:6D:52:AD:58:3C:7A:32:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3350e25a-3033-32e4-8d60-6e9777018940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ed:dc:85:e7:05:c6:76:77:17:f4:9b:a7:cc:4f:1d:5a:f7: cf:f5:5d:23:0f:36:2b:0d:bb:14:c5:a1:40:66:65:4a:d1:3f: 66:7d:20:70:cc:eb:6d:90:bc:d3:bd:3e:bb:90:de:0a:17:40: 8e:ac:a3:80:7e:74:30:14:8e:a7:f3:c2:1c:69:28:33:ce:ce: ef:85:3c:1d:fc:fb:36:88:77:e8:ad:e0:21:f8:23:97:47:61: c6:c7:84:5e:41:63:e5:5d:26:7f:f7:56:2a:a2:90:95:2e:5f: d7:ea:1b:e4:d9:55:d0:cf:24:a2:32:82:d2:7b:1b:4b:7c:76: e4:61:64:ae:12:b7:68:4d:a5:a8:72:b7:c3:7e:31:62:2d:79: d0:68:73:0b:6d:26:19:2a:bf:8f:33:68:0e:2c:88:30:6b:37: 6c:64:d1:d3:d6:84:e9:49:2b:a4:9f:c5:de:3d:b7:a9:c3:18: d6:39:18:13:02:e1:90:80:5e:ec:c0:f6:31:b4:b1:59:2c:8f: d7:86:80:db:f2:01:ad:67:72:81:41:5a:a0:e4:f4:f9:a3:8c: 1f:f0:54:f9:0d:eb:0c:36:a1:ac:43:b1:cc:66:0c:dd:b0:2d: b3:c2:ea:4b:6a:7f:79:8f:a1:75:b9:6e:d7:9c:1d:66:91:83: a8:13:fb:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd24M7ESeUggBVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE0ZDQ0ZmUtMjg3OS00OTJkLTljZDMtMzY5M2RiZTNmOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk73P+HNzLWmy5yZaBJFEatISVMHAfPkxuXuO HdoFnOns4eqW+PNj6Gpycr7Dn3uvC8G1rVXLC+rYZi9pikiccb5BHn6PRoFwFXie jII5WQV/OiSBNDX3n4jV+59z/K+0Jo1yDGzdfHOqemInw7KqKdBVh0xOrP0pV9OS D/e8YI1WuMWXfPHHdMUbB3dCeotmxab6I1wMgRgoQ2ee+zbAf+B2dRltLMiEbShx FDF1ugWWaQuN/gbwQWC+KN3djG87reLakllexFGRSbObzn87oZQ636f2V45N2z/s dGvorcg9qiNM3MHetUoN5KIMjfnZmsiFzyFzKxpULDwF47FflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhKSbm2bizaLLSCbG1SrVg8ejJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzM1MGUyNWEtMzAzMy0z MmU0LThkNjAtNmU5Nzc3MDE4OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRC/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADt3IXnBcZ2dxf0m6fMTx1a98/1XSMPNisNuxTFoUBmZUrRP2Z9IHDM 622QvNO9PruQ3goXQI6so4B+dDAUjqfzwhxpKDPOzu+FPB38+zaId+it4CH4I5dH YcbHhF5BY+VdJn/3ViqikJUuX9fqG+TZVdDPJKIygtJ7G0t8duRhZK4St2hNpahy t8N+MWItedBocwttJhkqv48zaA4siDBrN2xk0dPWhOlJK6Sfxd49t6nDGNY5GBMC 4ZCAXuzA9jG0sVksj9eGgNvyAa1ncoFBWqDk9PmjjB/wVPkN6ww2oaxDscxmDN2w LbPC6ktqf3mPoXW5btecHWaRg6gT+5Y= -----END CERTIFICATE-----Generated at Sun Sep 27 01:28:41 2026 by rpki-client