$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f0723-d535-3a80-981a-6e773bf7abe0.roa File: 8b6f0723-d535-3a80-981a-6e773bf7abe0.roa (raw, json) Hash identifier: CVnSIRfCTAoYYj71AJcwN6oj2YfsDGXN9z2DzgC+ILA= Subject key identifier: 2E:AD:DA:48:35:61:F3:72:5B:BA:15:45:47:AF:C5:1B:AE:85:36:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E94D404A8D8BB8E97CD7C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f0723-d535-3a80-981a-6e773bf7abe0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 68.83.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:94:d4:04:a8:d8:bb:8e:97:cd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=69adaa8a-0b38-4174-a4f8-fba074b6c826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:33:10:70:36:69:63:93:e3:d0:e1:2c:cb: bf:51:cc:6f:6f:d0:b9:4c:7b:8f:b1:ab:83:0c:0a: ea:2f:63:20:3b:8e:2d:98:79:57:e9:db:4a:79:b5: 1d:98:9f:46:df:4c:0e:26:90:b4:13:0f:12:d5:fc: 46:e0:fc:7d:0d:28:bb:64:74:63:a4:e9:26:17:35: c1:3c:0e:0b:79:16:74:f4:7a:f7:21:83:45:74:06: 11:a7:0f:3e:f9:16:47:c1:67:a3:8f:50:7c:30:36: 73:e4:4d:5c:98:04:dd:b9:7c:62:c2:ca:d1:57:59: 1f:ee:84:51:22:3c:ab:87:9b:af:8d:d2:53:f2:7e: 0a:a3:a9:8d:7f:1b:e4:a8:02:57:92:64:e7:9a:2a: 64:43:9c:0d:24:58:2c:6a:b2:f4:8b:f8:fa:3a:df: 77:ac:3d:37:b0:9e:eb:70:4b:b3:27:79:cc:6b:79: 1b:72:86:05:4e:d1:5c:db:89:8b:4b:66:c2:20:dc: 9e:3c:6a:d0:34:84:68:ed:16:ff:a4:8e:54:5b:92: 74:51:67:62:63:7d:05:49:20:ea:52:ad:9d:d6:fe: 8f:00:9a:63:2b:ab:c1:75:ed:b9:a4:a9:22:ab:c8: 29:02:ad:0c:a1:de:cc:62:fc:c0:37:4f:41:06:cb: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:DA:48:35:61:F3:72:5B:BA:15:45:47:AF:C5:1B:AE:85:36:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b6f0723-d535-3a80-981a-6e773bf7abe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:fd:e3:9e:b2:db:92:b7:55:bf:f7:d9:ea:b8:64:d5:19:72: 30:2d:d3:be:2f:0d:77:4e:67:7b:37:90:85:67:0e:72:41:9a: f2:33:af:b2:6d:4d:00:cf:68:86:fd:b4:73:bd:23:fe:86:7b: 2f:33:0f:57:62:2c:d9:fe:72:0d:da:dc:a3:b4:e2:8a:66:24: 33:5b:05:9c:37:76:b5:99:62:da:d2:84:33:8e:60:ce:c4:37: c6:da:5c:6c:88:b9:0e:5f:41:4f:2f:f6:e7:66:21:3c:43:f1: 88:00:c0:77:6b:d7:5f:ab:2e:cb:64:91:10:22:a3:d2:6c:fa: 93:36:51:49:d8:29:68:a7:71:0d:08:29:47:30:19:20:c1:d9: b8:33:83:2b:6d:50:b1:cf:ab:39:63:da:60:fe:e6:a3:65:6c: 56:dc:5c:68:80:58:29:55:16:f6:6f:e1:cf:04:2e:d4:c1:cf: c6:a6:e4:17:39:b9:5d:9d:67:a9:9d:e3:db:37:b9:82:44:e0: 8b:22:be:66:06:b4:8c:02:73:5e:b3:81:2b:7a:5d:7f:61:7c: 1c:4b:f8:f7:4b:19:a2:67:88:6d:b6:e5:ba:42:f0:e9:ab:cf: 5d:c3:c5:1e:33:fd:93:af:12:9e:59:30:2f:de:62:a8:83:74: a2:4b:62:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnpTUBKjYu46XzXwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NjlhZGFhOGEtMGIzOC00MTc0LWE0ZjgtZmJhMDc0YjZjODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZQzEHA2aWOT49DhLMu/Ucxvb9C5THuPsauD DArqL2MgO44tmHlX6dtKebUdmJ9G30wOJpC0Ew8S1fxG4Px9DSi7ZHRjpOkmFzXB PA4LeRZ09Hr3IYNFdAYRpw8++RZHwWejj1B8MDZz5E1cmATduXxiwsrRV1kf7oRR Ijyrh5uvjdJT8n4Ko6mNfxvkqAJXkmTnmipkQ5wNJFgsarL0i/j6Ot93rD03sJ7r cEuzJ3nMa3kbcoYFTtFc24mLS2bCINyePGrQNIRo7Rb/pI5UW5J0UWdiY30FSSDq Uq2d1v6PAJpjK6vBde25pKkiq8gpAq0Mod7MYvzAN09BBsvHxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6t2kg1YfNyW7oVRUevxRuuhTY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI2ZjA3MjMtZDUzNS0z YTgwLTk4MWEtNmU3NzNiZjdhYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFNzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKD9456y25K3Vb/32eq4ZNUZcjAt074vDXdOZ3s3kIVnDnJBmvIzr7Jt TQDPaIb9tHO9I/6Gey8zD1diLNn+cg3a3KO04opmJDNbBZw3drWZYtrShDOOYM7E N8baXGyIuQ5fQU8v9udmITxD8YgAwHdr11+rLstkkRAio9Js+pM2UUnYKWincQ0I KUcwGSDB2bgzgyttULHPqzlj2mD+5qNlbFbcXGiAWClVFvZv4c8ELtTBz8am5Bc5 uV2dZ6md49s3uYJE4IsivmYGtIwCc16zgSt6XX9hfBxL+PdLGaJniG225bpC8Omr z13DxR4z/ZOvEp5ZMC/eYqiDdKJLYkQ= -----END CERTIFICATE-----Generated at Mon Sep 21 17:25:49 2026 by rpki-client