$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa File: bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa (raw, json) Hash identifier: Nk+T0hfxh9c5xCavSG3Zri8dGk7LQk49uYvfTrFW3GE= Subject key identifier: 25:4F:BE:32:FF:93:B5:C5:06:69:C2:F5:12:B9:71:37:C3:C4:C5:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA788E041181CF02832B6DBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 68.47.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:e0:41:18:1c:f0:28:32:b6:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=61cbaadc-3186-49a8-9ba8-b3ce12fcbe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:51:4d:59:64:2a:af:93:19:79:d5:9f:f3: 15:97:78:c4:2c:8f:88:e7:26:84:4d:da:d8:4a:e8: 8a:12:9b:70:cf:8f:0e:9d:fa:f2:5e:e8:f9:a3:af: 51:e4:09:f2:dd:07:6c:8c:80:f5:19:be:46:19:7e: 7b:13:73:9a:2c:c5:af:ea:3c:a3:a3:38:f4:a9:8b: 29:d9:48:7f:78:6e:10:e8:6d:60:90:3a:1d:7f:d4: 18:bb:c4:c6:1c:2f:73:fb:68:d9:71:1e:98:f4:f0: d8:15:4a:2e:78:78:d7:15:63:73:df:59:02:70:f7: d0:7f:25:63:4b:34:37:23:3d:4f:7b:3d:24:0b:8e: 00:06:95:78:be:f4:19:b5:4a:06:27:ff:99:24:46: 12:a8:72:77:34:06:96:69:eb:3a:2d:54:99:68:90: da:32:b1:54:16:c2:5e:26:81:12:cd:3c:50:d2:4f: fc:29:7a:02:50:6d:0b:c7:62:f6:18:51:d8:fa:23: a0:63:b9:74:c4:64:b4:06:08:ff:b8:86:b5:55:c9: 71:01:b2:5b:1b:3c:e9:14:f8:9e:bf:34:41:d4:39: aa:6d:01:af:10:4a:49:46:fb:81:20:3a:bd:d7:c6: fa:e4:f5:7f:80:e2:ca:b7:17:4f:96:1d:28:2f:49: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:BE:32:FF:93:B5:C5:06:69:C2:F5:12:B9:71:37:C3:C4:C5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf3c6cd9-e82e-34dd-b6fd-5c0f9be99ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.47.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:50:f2:cf:25:8b:d9:0d:91:51:ea:6d:1e:6e:0b:61:a0:83: bc:98:5d:cb:65:e9:e0:70:d5:ab:80:84:af:da:13:6b:c8:b0: d6:61:37:54:00:11:c7:da:0a:ef:88:fc:93:d9:cb:d8:07:a4: 4e:2c:c2:03:61:56:dd:06:d7:97:52:07:67:4b:cc:5d:ea:14: f1:1e:bd:d2:5e:e2:77:89:bb:d1:f0:d8:6a:0c:04:47:55:53: 17:3c:5b:65:13:d2:31:42:12:d1:7f:ae:39:08:1a:5e:26:d9: fe:91:df:44:ca:b6:98:cb:eb:76:89:88:ab:a3:65:fd:ca:a4: 00:1f:d3:0f:46:b9:29:4f:f1:2e:42:28:46:15:1d:65:02:fe: f1:96:af:0d:18:a9:c3:75:62:34:e6:4d:c6:94:da:57:9e:19: 51:b0:05:31:6e:e1:c8:8e:3c:1f:67:95:bf:e2:0a:94:55:23: 81:fd:9f:f2:71:d9:b8:cf:fe:eb:b2:f1:bc:b2:29:ea:95:e1: db:8f:3c:92:0e:03:56:ca:76:91:cc:61:af:7c:c9:00:36:83: 8a:a6:87:14:ad:b7:6f:71:83:e9:3d:bb:bf:f7:34:a5:a9:a3: 27:33:56:42:01:b0:6e:81:04:ad:6c:db:99:06:20:45:23:b8: cd:f2:aa:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niOBBGBzwKDK228AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjFjYmFhZGMtMzE4Ni00OWE4LTliYTgtYjNjZTEyZmNiZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAtRTVlkKq+TGXnVn/MVl3jELI+I5yaETdrY SuiKEptwz48OnfryXuj5o69R5Any3QdsjID1Gb5GGX57E3OaLMWv6jyjozj0qYsp 2Uh/eG4Q6G1gkDodf9QYu8TGHC9z+2jZcR6Y9PDYFUoueHjXFWNz31kCcPfQfyVj SzQ3Iz1Pez0kC44ABpV4vvQZtUoGJ/+ZJEYSqHJ3NAaWaes6LVSZaJDaMrFUFsJe JoESzTxQ0k/8KXoCUG0Lx2L2GFHY+iOgY7l0xGS0Bgj/uIa1VclxAbJbGzzpFPie vzRB1DmqbQGvEEpJRvuBIDq918b65PV/gOLKtxdPlh0oL0l7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVPvjL/k7XFBmnC9RK5cTfDxMV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYzYzZjZDktZTgyZS0z NGRkLWI2ZmQtNWMwZjliZTk5Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARC+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENQ8s8li9kNkVHqbR5uC2Ggg7yYXctl6eBw1auAhK/aE2vIsNZhN1QA EcfaCu+I/JPZy9gHpE4swgNhVt0G15dSB2dLzF3qFPEevdJe4neJu9Hw2GoMBEdV Uxc8W2UT0jFCEtF/rjkIGl4m2f6R30TKtpjL63aJiKujZf3KpAAf0w9GuSlP8S5C KEYVHWUC/vGWrw0YqcN1YjTmTcaU2leeGVGwBTFu4ciOPB9nlb/iCpRVI4H9n/Jx 2bjP/uuy8byyKeqV4duPPJIOA1bKdpHMYa98yQA2g4qmhxStt29xg+k9u7/3NKWp oyczVkIBsG6BBK1s25kGIEUjuM3yqgc= -----END CERTIFICATE-----Generated at Thu Sep 24 11:15:20 2026 by rpki-client