$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa File: 4133bf93-c44a-3770-983c-eef6abfaca5b.roa (raw, json) Hash identifier: 7E6KFqZI2+lzPTyg6ONioA2HAHnDDmQV3rgU5azXQsY= Subject key identifier: B5:07:0F:D8:75:0C:EF:D7:48:FE:A6:F7:C7:12:A3:BC:A7:2D:C1:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FB39EBB935A352DF3B1E4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.54.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:b3:9e:bb:93:5a:35:2d:f3:b1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a0d484c-0c3b-4da5-80f8-e3f57088cf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:20:e0:0c:b8:4f:ac:a2:3c:06:6e:f2:d5: b3:a2:3b:32:91:34:31:f3:78:3b:da:08:e2:f2:27: 75:46:c7:13:9c:6b:13:73:d8:23:ac:34:d5:21:df: 26:72:00:1a:a1:42:61:ea:08:19:1f:3d:a2:c8:1c: ad:5c:b4:8d:d8:fb:d3:65:0b:f9:cd:88:8c:2d:2e: 0d:6c:b3:29:13:9f:69:d8:d1:28:60:23:65:82:83: ef:16:95:6a:50:75:91:b6:ac:46:46:cd:7c:b4:38: 26:07:58:bd:da:41:b7:00:4a:07:14:e6:dd:ea:37: 55:f8:cc:67:ab:8d:7c:73:91:3d:12:f4:85:f6:50: bc:12:ba:4f:c3:6f:b4:b7:49:8e:73:22:87:7e:80: 8c:f5:55:6b:8b:85:3a:32:ff:a9:d4:15:bd:fa:b5: 5d:74:a7:d0:4c:c7:17:7f:0b:ab:bd:4a:9a:77:17: 0a:01:a8:42:86:76:ba:3f:e5:c4:94:e6:00:bf:5e: 8d:47:d9:74:e8:48:a9:25:ca:87:ac:b4:90:35:0a: 91:7c:47:a4:b2:e8:35:e9:77:06:28:4d:54:0f:4d: 5c:c6:ea:7a:c3:a7:4b:d6:0e:a0:12:e0:d7:23:17: 89:0f:5a:b3:34:fd:b7:75:a2:80:b0:35:07:22:a1: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:07:0F:D8:75:0C:EF:D7:48:FE:A6:F7:C7:12:A3:BC:A7:2D:C1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a9:20:95:88:dc:2f:a7:60:89:b5:81:c5:de:84:5a:67:83: 75:96:40:15:7f:31:e5:b7:34:b1:33:01:cf:79:0a:50:20:90: fe:14:71:4d:80:69:7f:c0:aa:f4:6c:91:73:89:02:ee:ea:14: 83:bc:b4:d1:ac:81:48:d0:23:e6:e0:c8:81:c6:ef:75:d6:20: bd:a3:c5:86:cb:b1:38:f6:2f:e2:1f:d4:67:02:45:a1:9a:3d: 7e:a4:ac:6e:20:84:20:33:c2:c0:fe:33:af:af:a3:10:52:13: a4:14:1c:5c:1e:b2:59:bc:a3:ab:1e:5f:86:bb:48:dd:55:0c: 6b:0e:91:8b:44:ea:34:dc:7f:6a:93:2e:22:56:55:45:1e:92: 8d:b2:60:72:48:b9:38:f6:1c:09:72:d4:3f:7b:1e:97:9e:af: 6a:7d:a3:ed:6f:e9:ad:b4:f6:91:19:ac:72:8d:a7:02:01:21: 06:b5:f4:0d:01:e3:b0:b5:10:72:08:c6:26:c5:fd:76:9e:e6: d6:9a:8d:d7:2b:c5:e5:11:ed:84:dd:bd:ba:02:1b:04:96:fa: ad:4a:f2:7d:03:f0:9d:aa:33:73:e6:93:04:a7:fe:84:33:91: 88:97:c8:4f:41:af:63:e9:99:04:a2:af:24:dc:d9:dc:8e:4e: f8:6c:9a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf7Oeu5NaNS3zseQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2EwZDQ4NGMtMGMzYi00ZGE1LTgwZjgtZTNmNTcwODhjZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy4g4Ay4T6yiPAZu8tWzojsykTQx83g72gji 8id1RscTnGsTc9gjrDTVId8mcgAaoUJh6ggZHz2iyBytXLSN2PvTZQv5zYiMLS4N bLMpE59p2NEoYCNlgoPvFpVqUHWRtqxGRs18tDgmB1i92kG3AEoHFObd6jdV+Mxn q418c5E9EvSF9lC8ErpPw2+0t0mOcyKHfoCM9VVri4U6Mv+p1BW9+rVddKfQTMcX fwurvUqadxcKAahChna6P+XElOYAv16NR9l06EipJcqHrLSQNQqRfEeksug16XcG KE1UD01cxup6w6dL1g6gEuDXIxeJD1qzNP23daKAsDUHIqF1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUHD9h1DO/XSP6m98cSo7ynLcEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEzM2JmOTMtYzQ0YS0z NzcwLTk4M2MtZWVmNmFiZmFjYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERDbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKpIJWI3C+nYIm1gcXehFpng3WWQBV/MeW3NLEzAc95ClAgkP4UcU2A aX/AqvRskXOJAu7qFIO8tNGsgUjQI+bgyIHG73XWIL2jxYbLsTj2L+If1GcCRaGa PX6krG4ghCAzwsD+M6+voxBSE6QUHFweslm8o6seX4a7SN1VDGsOkYtE6jTcf2qT LiJWVUUeko2yYHJIuTj2HAly1D97Hpeer2p9o+1v6a209pEZrHKNpwIBIQa19A0B 47C1EHIIxibF/Xae5taajdcrxeUR7YTdvboCGwSW+q1K8n0D8J2qM3PmkwSn/oQz kYiXyE9Br2PpmQSiryTc2dyOTvhsmkw= -----END CERTIFICATE-----Generated at Sat Sep 26 00:05:21 2026 by rpki-client