$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/804305ef-fa80-316a-80eb-a722f8447237.roa File: 804305ef-fa80-316a-80eb-a722f8447237.roa (raw, json) Hash identifier: o3f1YbOPdjFTQ4M1z7pJM2C5cLDAudDi2yfLn1aQmKg= Subject key identifier: 1B:9C:AA:A8:C8:BF:CF:9C:30:C1:61:AE:51:4E:19:07:4A:EF:9B:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B42F6C1797B1E9B8D880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/804305ef-fa80-316a-80eb-a722f8447237.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.43.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b4:2f:6c:17:97:b1:e9:b8:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=40f92060-c890-40ff-b7ef-81d48b93e470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:0f:68:3d:6e:79:e3:5e:01:98:20:39:65: cb:43:eb:35:c2:38:c5:44:8e:6d:f8:7f:04:b8:49: c2:02:c9:b5:2e:02:19:9f:ea:b2:3e:10:98:65:35: 92:fe:e8:50:56:68:02:c1:34:de:7c:57:2b:2e:76: 89:d9:e7:a6:1f:ce:33:ba:06:5b:f5:60:ea:fb:1c: 63:97:c7:ec:96:5a:5b:59:5a:a8:1f:3a:91:54:74: 67:77:49:24:da:dc:e1:6e:fe:02:19:2c:be:49:23: 8f:b8:8e:dc:40:43:a0:d9:86:5b:4b:bf:89:7e:3f: 22:46:90:e9:f8:99:62:6f:12:10:f5:92:f4:3f:c3: a8:5f:eb:36:92:52:c1:dd:45:cd:65:d6:d8:36:52: e2:25:4a:c4:51:57:f0:8a:6b:fc:65:65:9f:1e:e3: 06:e5:5a:ba:d7:3b:1a:22:02:0c:5c:24:7d:36:ee: d0:8e:0e:3a:18:8b:dc:5a:2a:86:b8:c4:a8:5a:67: 78:33:7f:35:a8:a4:87:49:cd:7c:94:18:34:5f:47: aa:60:79:3d:15:23:f4:92:16:5b:71:5a:8e:fb:d5: 8d:ff:28:6b:2b:08:c1:b7:fd:95:69:1e:7f:e6:89: 4d:5f:a7:12:a4:a9:0c:3e:bf:d1:17:39:f9:10:89: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9C:AA:A8:C8:BF:CF:9C:30:C1:61:AE:51:4E:19:07:4A:EF:9B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/804305ef-fa80-316a-80eb-a722f8447237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8a:43:9e:c7:e3:0f:96:c1:f2:40:67:73:65:53:3d:1a:4b: d5:9f:a4:2f:1c:de:b2:eb:42:fd:9e:29:44:74:b4:a4:b4:99: 65:f2:c6:58:5a:86:b1:54:a1:d6:96:81:20:67:dd:df:37:9b: d4:97:ad:b9:41:45:e8:0a:a5:78:84:34:7d:5a:d6:f9:84:f4: 01:2e:ba:60:16:97:04:ff:a6:09:b5:ba:c7:d5:d1:2a:10:3a: 68:89:2b:1a:99:9d:20:e5:cb:5d:c2:c9:a9:94:02:a5:4c:8c: 92:9b:47:07:32:14:48:fd:a1:9a:e6:8d:fd:21:97:42:f9:3d: 1e:0f:bf:df:32:a8:3a:29:6d:00:ab:33:c2:6f:dc:c3:e9:56: 17:83:fb:2b:13:55:0d:f1:f5:7f:0e:9f:62:55:6d:70:6f:34: a4:ac:ce:aa:b2:10:63:e8:e5:f5:0f:39:4b:44:aa:1e:7c:75: c2:4a:ba:55:6a:3a:37:ae:9d:95:8f:08:35:da:37:05:ae:b9: ef:06:f5:bf:42:bb:7c:29:12:ae:1d:07:83:d1:eb:c2:12:c4: 94:77:22:47:87:95:d8:71:cb:d2:ec:c6:c5:83:22:2f:aa:d2: 39:a2:5a:f2:fc:90:21:ea:69:0a:7e:cf:9d:70:fa:33:ed:50: f8:dc:71:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrQvbBeXsem42IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDBmOTIwNjAtYzg5MC00MGZmLWI3ZWYtODFkNDhiOTNlNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4PaD1ueeNeAZggOWXLQ+s1wjjFRI5t+H8E uEnCAsm1LgIZn+qyPhCYZTWS/uhQVmgCwTTefFcrLnaJ2eemH84zugZb9WDq+xxj l8fsllpbWVqoHzqRVHRnd0kk2tzhbv4CGSy+SSOPuI7cQEOg2YZbS7+Jfj8iRpDp +JlibxIQ9ZL0P8OoX+s2klLB3UXNZdbYNlLiJUrEUVfwimv8ZWWfHuMG5Vq61zsa IgIMXCR9Nu7Qjg46GIvcWiqGuMSoWmd4M381qKSHSc18lBg0X0eqYHk9FSP0khZb cVqO+9WN/yhrKwjBt/2VaR5/5olNX6cSpKkMPr/RFzn5EIlcCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBucqqjIv8+cMMFhrlFOGQdK75sGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODA0MzA1ZWYtZmE4MC0z MTZhLTgwZWItYTcyMmY4NDQ3MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmKQ57H4w+WwfJAZ3NlUz0aS9WfpC8c3rLrQv2eKUR0tKS0mWXyxlha hrFUodaWgSBn3d83m9SXrblBRegKpXiENH1a1vmE9AEuumAWlwT/pgm1usfV0SoQ OmiJKxqZnSDly13CyamUAqVMjJKbRwcyFEj9oZrmjf0hl0L5PR4Pv98yqDopbQCr M8Jv3MPpVheD+ysTVQ3x9X8On2JVbXBvNKSszqqyEGPo5fUPOUtEqh58dcJKulVq OjeunZWPCDXaNwWuue8G9b9Cu3wpEq4dB4PR68ISxJR3IkeHldhxy9LsxsWDIi+q 0jmiWvL8kCHqaQp+z51w+jPtUPjccdo= -----END CERTIFICATE-----Generated at Sun Sep 27 00:24:45 2026 by rpki-client