$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa File: 65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa (raw, json) Hash identifier: EZOm5fIzpbAVKW6/PXO1EoW/OMGhgduUV9CeA98PEOs= Subject key identifier: CB:69:D0:AB:81:3E:1B:BE:5D:49:05:61:AC:05:59:45:41:2C:26:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49776886928235A1A42FDA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.32.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:68:86:92:82:35:a1:a4:2f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=be3c3351-9cd0-4b88-8a27-2ea3c5dadbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:89:e7:07:46:80:09:17:df:2f:63:cf:c1: 25:20:2d:77:51:ef:c4:ba:6f:b6:bb:e0:1a:99:ba: 7b:c8:91:e8:61:fe:a3:11:fa:e8:68:f7:30:76:23: 8d:6a:8b:31:75:f7:6e:3b:19:0f:73:a0:4b:9c:6a: e5:fe:0c:e1:37:bd:26:88:04:d5:73:ad:2c:8d:61: 7f:26:82:b2:6a:cb:ac:7a:ae:be:cf:12:a3:87:fc: fb:9e:46:f9:a4:ad:0a:97:89:7e:0b:8b:03:19:a4: bc:1b:01:7b:81:5d:89:61:42:f8:d1:75:df:a5:87: 18:fe:0b:b9:36:8b:d7:c2:5b:47:29:fe:4a:f5:e7: 35:e1:35:a8:c9:31:a0:70:33:e5:38:53:fa:58:a5: 0d:b9:ea:7a:b2:ee:09:85:64:53:0a:81:4f:77:99: af:03:27:7a:8b:a0:ae:38:22:b2:2e:15:a2:b9:81: 40:36:9f:c9:69:82:0d:ba:98:48:a0:64:13:cf:f9: b4:93:c0:cb:f0:48:05:54:a7:5b:9d:82:8b:c1:cc: e6:e1:84:6a:c2:47:24:63:bc:7e:1c:79:5c:25:1a: 8b:d0:19:c0:94:5c:16:7a:bf:ca:f1:a6:95:c9:59: 5d:6d:e4:af:06:08:20:63:d4:a9:b7:46:b4:94:85: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:D0:AB:81:3E:1B:BE:5D:49:05:61:AC:05:59:45:41:2C:26:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65c8f395-afe5-30b6-8367-ebafe4d13b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:d0:89:23:73:9e:c3:fc:f3:b6:f5:c0:02:22:47:00:68:97: 1f:e0:de:7e:e9:ba:39:d9:d9:34:d0:5f:32:25:a1:c2:5a:91: cb:fa:b6:e2:82:99:91:a4:f2:fe:d3:ed:ff:9f:1e:17:8c:c6: 7e:79:e8:e0:8b:42:73:e7:ab:00:e0:e5:89:6b:b3:5c:e9:8f: bb:bc:bb:d6:49:b5:51:f3:c6:c4:68:eb:33:ed:a4:ae:6f:c1: 1b:c0:3d:95:71:b2:ce:53:da:3a:7f:13:b9:eb:58:ab:9a:5b: cc:16:0f:e8:64:84:51:d1:6b:a1:fc:e6:9f:2d:04:12:41:6f: e5:32:71:24:60:37:b7:1c:2a:81:a6:e9:7a:02:a8:35:4c:40: d2:2d:6b:66:49:1c:6f:86:a2:df:57:d1:54:29:6a:8d:85:07: 4a:44:41:3e:b4:86:7a:25:70:72:62:da:ca:25:0c:42:53:d7: 45:05:a8:89:2b:b4:8c:95:b8:6d:5b:5c:8d:89:43:ad:ae:81: cc:94:ea:50:b9:12:8d:9d:54:f0:36:3a:5f:19:3b:0d:3c:c9: ff:16:8e:32:7a:c0:25:fc:2e:ba:8e:2e:f1:1c:8d:e5:03:2d: 13:5b:fa:24:d7:81:cf:85:c2:d5:e0:b6:36:3a:a2:28:44:15: b5:b5:f3:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd2iGkoI1oaQv2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmUzYzMzNTEtOWNkMC00Yjg4LThhMjctMmVhM2M1ZGFkYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRiJ5wdGgAkX3y9jz8ElIC13Ue/Eum+2u+Aa mbp7yJHoYf6jEfroaPcwdiONaosxdfduOxkPc6BLnGrl/gzhN70miATVc60sjWF/ JoKyasuseq6+zxKjh/z7nkb5pK0Kl4l+C4sDGaS8GwF7gV2JYUL40XXfpYcY/gu5 NovXwltHKf5K9ec14TWoyTGgcDPlOFP6WKUNuep6su4JhWRTCoFPd5mvAyd6i6Cu OCKyLhWiuYFANp/JaYINuphIoGQTz/m0k8DL8EgFVKdbnYKLwczm4YRqwkckY7x+ HHlcJRqL0BnAlFwWer/K8aaVyVldbeSvBgggY9Spt0a0lIVklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtp0KuBPhu+XUkFYawFWUVBLCa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVjOGYzOTUtYWZlNS0z MGI2LTgzNjctZWJhZmU0ZDEzYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfQiSNznsP887b1wAIiRwBolx/g3n7pujnZ2TTQXzIlocJakcv6tuKC mZGk8v7T7f+fHheMxn556OCLQnPnqwDg5Ylrs1zpj7u8u9ZJtVHzxsRo6zPtpK5v wRvAPZVxss5T2jp/E7nrWKuaW8wWD+hkhFHRa6H85p8tBBJBb+UycSRgN7ccKoGm 6XoCqDVMQNIta2ZJHG+Got9X0VQpao2FB0pEQT60hnolcHJi2solDEJT10UFqIkr tIyVuG1bXI2JQ62ugcyU6lC5Eo2dVPA2Ol8ZOw08yf8WjjJ6wCX8LrqOLvEcjeUD LRNb+iTXgc+FwtXgtjY6oihEFbW18+o= -----END CERTIFICATE-----Generated at Sat Sep 26 07:18:40 2026 by rpki-client