$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa File: ca1924da-51f0-31cd-8feb-164b030dd38a.roa (raw, json) Hash identifier: oAi4O0e7V9d4mLJSt+8IL6yhi99CF1f9/U0R1VnrYVg= Subject key identifier: C4:28:99:40:4C:E7:E1:6A:45:8F:20:CC:B2:01:0F:56:A7:26:96:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D6056F997D0A3E78F1380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33668 IP address blocks: 68.86.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:60:56:f9:97:d0:a3:e7:8f:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=35f0c82d-dbdb-4925-ae94-89f1a518be76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:38:63:ea:58:47:59:5d:9b:f4:5d:f9:02: 9f:1d:25:57:73:a3:d1:be:a4:47:c6:57:c5:3f:71: b4:1a:bc:cb:81:6c:36:91:e7:ff:4a:8d:6d:75:46: ea:5a:b6:37:6f:1e:20:4f:c9:5f:81:e5:78:24:a6: da:40:80:73:55:41:5a:55:ea:dc:6b:ad:47:4b:45: e5:cb:f8:d5:af:02:d6:f5:77:2e:2e:fd:8f:20:b5: 37:f8:f9:d2:38:b2:fd:7f:f5:26:59:1e:35:ab:12: e6:67:c7:50:d2:cc:9f:12:0a:4c:8b:97:73:6a:bc: 89:83:eb:74:ea:65:42:e5:b0:69:98:c1:36:f9:1e: 32:e6:4e:75:d9:f4:ae:ab:67:08:44:25:fc:89:58: ad:dd:24:8e:d6:32:5d:39:4f:d8:7c:17:0a:6c:af: 43:d8:66:57:ca:57:1b:d2:bb:4f:f0:af:34:87:30: d0:42:c3:0b:91:75:dc:32:fc:f9:3c:ad:13:36:e7: 3d:4e:97:2e:dd:99:e4:5d:5d:75:96:01:77:71:8d: 05:b0:51:61:6b:84:11:e6:37:7c:61:86:fe:28:ec: ea:f1:f8:07:ff:01:0e:50:9c:86:0c:4c:2d:5a:d1: cf:bf:42:0b:f3:c3:c0:1a:71:12:ca:da:c5:63:3d: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:28:99:40:4C:E7:E1:6A:45:8F:20:CC:B2:01:0F:56:A7:26:96:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1924da-51f0-31cd-8feb-164b030dd38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8d:1b:94:dd:d9:20:83:d2:02:e0:eb:18:5b:b6:f0:3b:e7: cc:57:4d:eb:36:38:54:54:a8:de:1c:1c:e7:e9:a9:8d:c1:a3: e8:1e:72:04:90:1b:72:d2:c9:d9:70:56:01:cf:c8:ed:13:1a: 63:aa:fe:ff:d5:80:57:3d:45:77:fd:4d:53:38:0a:ec:23:35: a6:72:f0:9e:1c:f8:71:b7:5a:c9:ef:42:c0:96:2f:41:77:3d: 27:ef:f4:0d:cb:4f:35:88:82:39:4b:a0:19:69:48:af:16:a1: 9c:2f:0b:2c:85:7b:58:bf:5d:af:8f:76:e7:b5:65:5b:a2:d7: b2:54:7f:26:aa:e8:82:8b:5f:b8:1f:85:97:57:df:79:ce:9b: 40:9b:09:87:dc:91:5f:a9:72:02:a8:6c:d9:da:98:c0:ac:1c: 6e:e9:9f:be:41:17:0a:87:88:7b:3f:27:b7:a2:58:98:52:11: f0:44:71:41:f6:37:84:99:28:4e:92:8b:96:69:97:da:91:b7: 58:8a:85:3a:27:ca:4c:a7:b9:4d:84:7d:cd:c6:4b:8c:fc:62: c9:27:85:1f:3b:32:46:bf:4b:ab:b1:e9:aa:3e:7a:99:f1:ed: 3b:a3:ba:f8:99:03:c9:11:c9:ae:78:62:d8:02:a5:61:b9:e3: 36:5f:3a:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njWBW+ZfQo+ePE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzVmMGM4MmQtZGJkYi00OTI1LWFlOTQtODlmMWE1MThiZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh84Y+pYR1ldm/Rd+QKfHSVXc6PRvqRHxlfF P3G0GrzLgWw2kef/So1tdUbqWrY3bx4gT8lfgeV4JKbaQIBzVUFaVerca61HS0Xl y/jVrwLW9XcuLv2PILU3+PnSOLL9f/UmWR41qxLmZ8dQ0syfEgpMi5dzaryJg+t0 6mVC5bBpmME2+R4y5k512fSuq2cIRCX8iVit3SSO1jJdOU/YfBcKbK9D2GZXylcb 0rtP8K80hzDQQsMLkXXcMvz5PK0TNuc9Tpcu3ZnkXV11lgF3cY0FsFFha4QR5jd8 YYb+KOzq8fgH/wEOUJyGDEwtWtHPv0IL88PAGnESytrFYz0LuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQomUBM5+FqRY8gzLIBD1anJpahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ExOTI0ZGEtNTFmMC0z MWNkLThmZWItMTY0YjAzMGRkMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmNG5Td2SCD0gLg6xhbtvA758xXTes2OFRUqN4cHOfpqY3Bo+gecgSQ G3LSydlwVgHPyO0TGmOq/v/VgFc9RXf9TVM4CuwjNaZy8J4c+HG3WsnvQsCWL0F3 PSfv9A3LTzWIgjlLoBlpSK8WoZwvCyyFe1i/Xa+Pdue1ZVui17JUfyaq6IKLX7gf hZdX33nOm0CbCYfckV+pcgKobNnamMCsHG7pn75BFwqHiHs/J7eiWJhSEfBEcUH2 N4SZKE6Si5Zpl9qRt1iKhTonykynuU2Efc3GS4z8YsknhR87Mka/S6ux6ao+epnx 7TujuviZA8kRya54YtgCpWG54zZfOl4= -----END CERTIFICATE-----Generated at Wed Jul 29 08:17:07 2026 by rpki-client