$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa File: 9f6af8af-cb0a-3795-84aa-124d2805c128.roa (raw, json) Hash identifier: qobWtbUYiMkWkVh6+Qtyxm6lY9BvKsnBSfq30CLhUpc= Subject key identifier: 21:59:BF:FD:5D:83:12:DA:3E:BC:46:2D:98:A1:28:CF:DF:F2:DE:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863D826AE8137F00443C420 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.37.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:d8:26:ae:81:37:f0:04:43:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=414cd306-ecb0-402e-be70-8974e7e986f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:2e:e3:5e:cc:18:c7:c9:50:01:6e:4a:a3: de:2d:3e:e8:d0:36:cc:75:b4:db:f7:8b:08:24:08: 9b:fb:e2:6c:ca:6f:78:d5:37:7c:26:27:bb:3c:0a: 83:9e:1d:43:bc:90:ed:62:68:02:df:ee:9c:e4:c0: 4a:a9:cf:7c:5a:a1:a3:f0:93:28:a3:c0:5f:87:42: 93:52:af:cf:4d:61:33:1f:e1:ff:d8:bc:f0:82:f7: 8b:a2:a4:9c:c0:dc:c7:98:5c:c6:52:e6:76:49:17: ad:1d:c6:db:05:e3:f6:02:6e:8e:5d:10:33:c7:da: 75:eb:7d:c8:f9:4e:d3:5b:0b:51:5e:bb:46:73:19: b0:c6:d8:92:61:24:59:9f:36:91:26:e0:6a:ba:7f: 9b:06:3c:26:1c:4e:13:15:0d:06:c5:23:0f:66:39: ad:be:b4:27:64:3f:46:05:5b:03:24:74:c4:8e:58: d1:61:14:35:74:c3:04:fe:e8:48:3a:73:74:b3:1c: f0:38:2c:5f:4d:93:82:ae:33:1c:8e:95:fc:fe:fa: 69:25:c9:9c:86:9f:3b:ef:22:1b:b7:2c:03:0c:99: 59:65:84:f0:26:fe:7d:c9:ff:88:6e:85:6f:b1:30: 2f:90:d8:02:8e:0d:30:82:fe:dd:31:90:20:46:4e: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:59:BF:FD:5D:83:12:DA:3E:BC:46:2D:98:A1:28:CF:DF:F2:DE:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:61:c7:bf:ec:17:5e:a5:b4:f3:c2:b9:a0:04:1d:ac:75:35: 37:8c:f1:c7:fc:b2:d0:8b:b2:56:e3:fb:d9:dc:50:ff:63:20: 03:26:8e:e5:39:9f:9c:2c:2a:3e:98:ea:a2:93:70:00:06:3c: d0:ac:38:c7:4e:19:92:44:45:bc:80:8c:56:7d:7d:49:a2:a9: 65:1e:a4:a1:52:dd:17:2f:4e:90:f0:37:2d:09:80:f7:48:25: f6:ca:3e:7a:d0:37:c0:4b:d5:02:97:3b:3b:ee:0a:bb:c0:10: 59:0a:5b:21:9c:3c:90:c9:dd:2e:c7:a1:eb:89:5c:da:79:55: 3c:d4:bd:b6:07:92:0c:94:f7:34:eb:13:87:8d:b0:77:40:a6: 88:36:d6:e8:a0:b6:da:1a:57:9a:cd:37:18:e0:33:f0:a8:4e: 96:62:8c:c4:a6:24:b7:bc:b2:19:59:b3:08:c8:cd:b1:a2:f3: b3:2e:b5:7e:1b:e8:b4:ac:72:39:3a:20:c1:2f:19:bc:c4:58: 10:d0:a0:f3:92:32:de:af:4a:72:b4:f6:61:48:e4:31:b6:c9: 34:d6:36:b0:d3:94:45:3e:8b:80:c9:c7:da:3c:d5:89:1b:d4: 59:c9:b8:2c:12:00:6b:3b:bc:cd:96:0d:53:c1:58:97:80:ff: 3b:f7:46:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9gmroE38ARDxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDE0Y2QzMDYtZWNiMC00MDJlLWJlNzAtODk3NGU3ZTk4NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs44u417MGMfJUAFuSqPeLT7o0DbMdbTb94sI JAib++Jsym941Td8Jie7PAqDnh1DvJDtYmgC3+6c5MBKqc98WqGj8JMoo8Bfh0KT Uq/PTWEzH+H/2LzwgveLoqScwNzHmFzGUuZ2SRetHcbbBeP2Am6OXRAzx9p1633I +U7TWwtRXrtGcxmwxtiSYSRZnzaRJuBqun+bBjwmHE4TFQ0GxSMPZjmtvrQnZD9G BVsDJHTEjljRYRQ1dMME/uhIOnN0sxzwOCxfTZOCrjMcjpX8/vppJcmchp877yIb tywDDJlZZYTwJv59yf+IboVvsTAvkNgCjg0wgv7dMZAgRk5LvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFZv/1dgxLaPrxGLZihKM/f8t6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY2YWY4YWYtY2IwYS0z Nzk1LTg0YWEtMTI0ZDI4MDVjMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJhx7/sF16ltPPCuaAEHax1NTeM8cf8stCLslbj+9ncUP9jIAMmjuU5 n5wsKj6Y6qKTcAAGPNCsOMdOGZJERbyAjFZ9fUmiqWUepKFS3RcvTpDwNy0JgPdI JfbKPnrQN8BL1QKXOzvuCrvAEFkKWyGcPJDJ3S7HoeuJXNp5VTzUvbYHkgyU9zTr E4eNsHdApog21uigttoaV5rNNxjgM/CoTpZijMSmJLe8shlZswjIzbGi87MutX4b 6LSscjk6IMEvGbzEWBDQoPOSMt6vSnK09mFI5DG2yTTWNrDTlEU+i4DJx9o81Ykb 1FnJuCwSAGs7vM2WDVPBWJeA/zv3Rmk= -----END CERTIFICATE-----Generated at Sun Oct 4 12:23:54 2026 by rpki-client