$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf04de2-f8ae-3417-b849-a42269ea7314.roa File: caf04de2-f8ae-3417-b849-a42269ea7314.roa (raw, json) Hash identifier: XuyxNk27EepR/6ZyHu4IIQPuz26AwLuQYgxypKF0aFc= Subject key identifier: B6:7C:BC:39:84:CE:DA:5B:BC:86:E1:7E:AE:4B:81:DA:35:5F:D1:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78DD2CF54CF393E2509A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf04de2-f8ae-3417-b849-a42269ea7314.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 13367 IP address blocks: 68.85.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:d2:cf:54:cf:39:3e:25:09:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e51c3aa3-94a7-4fab-bffc-ecde38b9dea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:4d:34:d3:bb:a1:56:58:cf:79:66:e8:30: 77:b6:9e:ae:21:01:36:72:f5:7d:2f:4d:14:c0:56: cd:18:a8:16:1b:31:12:b8:74:89:82:6c:3d:27:df: ba:0b:4b:84:eb:e6:1d:ef:ab:40:b3:86:70:77:82: d3:78:8d:23:22:d5:15:26:8f:12:42:ad:36:33:6c: 46:5b:90:74:ef:b5:d8:30:e9:20:e4:e8:1e:fc:6a: 07:24:a6:44:48:40:6c:43:ec:10:f1:da:ec:68:ec: 98:df:1b:f5:ab:6b:07:61:71:3b:d2:8b:df:b8:1c: 82:11:b7:12:52:0c:12:ae:36:85:5b:d8:72:d0:55: 27:a2:48:5e:fe:e0:e4:a7:fd:34:c3:24:6d:28:b9: 0f:7d:a3:8f:d2:a4:60:9d:39:0d:96:b6:dc:a0:b9: 9a:ac:af:5e:a7:65:fd:8f:f6:cf:a9:19:bb:91:f8: 9f:22:10:ad:1c:95:ca:8c:f8:a4:e3:de:ab:ba:39: 2b:bb:0f:cc:24:1b:fe:2a:b1:2e:55:8b:48:d2:94: 8d:bb:dc:18:09:f0:14:52:8e:c8:41:02:79:d0:bf: 23:f8:d1:d2:90:77:7c:31:fe:20:c5:7b:6a:c2:d8: b9:cf:f8:ec:09:6e:90:66:a9:e0:39:9c:a5:e6:1e: 71:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:BC:39:84:CE:DA:5B:BC:86:E1:7E:AE:4B:81:DA:35:5F:D1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf04de2-f8ae-3417-b849-a42269ea7314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:b3:3a:4b:fb:d6:1c:76:e7:f1:4f:f4:f5:18:cd:89:6b:68: 18:d5:0e:1f:3f:55:55:7a:b8:12:ff:a1:38:9d:e5:5b:e7:2e: fb:b8:33:75:30:b1:ea:05:a7:05:98:5c:92:c0:a2:60:76:3d: ea:81:98:85:13:f3:bb:e9:23:dc:41:0c:cd:84:19:21:19:a0: 16:6d:3e:91:2b:c8:e2:78:45:2d:fa:8c:8d:35:3d:04:f2:dc: 04:f6:6c:e4:62:1d:4c:c9:aa:c1:38:b8:e5:66:ba:d7:69:b5: f9:6a:a4:95:a5:fd:d0:bd:cd:46:ad:00:34:ad:f8:d9:45:bc: 38:c5:15:4d:8d:9a:3f:e5:b1:a4:bc:1b:03:a4:ad:29:e5:e0: 10:ad:d3:1f:bd:40:e1:e9:51:6b:b2:df:06:e9:e0:21:6b:9b: 66:76:73:3b:e7:59:40:f1:24:c2:4d:af:a1:6e:36:47:b4:05: ef:16:d1:cd:cf:3d:b8:92:ea:11:3c:a8:23:73:9a:c7:8b:7b: 96:c3:13:b7:3a:14:d3:17:1f:4f:5b:db:0e:d1:b6:de:20:91: c4:c3:91:98:d4:0f:18:e2:34:bb:cd:8d:9a:75:bf:cd:d2:80: 25:f6:5c:e6:5b:c5:59:fc:ad:ed:6a:79:db:f5:83:ec:b6:35: c4:41:1f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njdLPVM85PiUJooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTUxYzNhYTMtOTRhNy00ZmFiLWJmZmMtZWNkZTM4YjlkZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ZNNNO7oVZYz3lm6DB3tp6uIQE2cvV9L00U wFbNGKgWGzESuHSJgmw9J9+6C0uE6+Yd76tAs4Zwd4LTeI0jItUVJo8SQq02M2xG W5B077XYMOkg5Oge/GoHJKZESEBsQ+wQ8drsaOyY3xv1q2sHYXE70ovfuByCEbcS UgwSrjaFW9hy0FUnokhe/uDkp/00wyRtKLkPfaOP0qRgnTkNlrbcoLmarK9ep2X9 j/bPqRm7kfifIhCtHJXKjPik496rujkruw/MJBv+KrEuVYtI0pSNu9wYCfAUUo7I QQJ50L8j+NHSkHd8Mf4gxXtqwti5z/jsCW6QZqngOZyl5h5xcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ8vDmEztpbvIbhfq5Lgdo1X9HzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FmMDRkZTItZjhhZS0z NDE3LWI4NDktYTQyMjY5ZWE3MzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGzOkv71hx25/FP9PUYzYlraBjVDh8/VVV6uBL/oTid5VvnLvu4M3Uw seoFpwWYXJLAomB2PeqBmIUT87vpI9xBDM2EGSEZoBZtPpEryOJ4RS36jI01PQTy 3AT2bORiHUzJqsE4uOVmutdptflqpJWl/dC9zUatADSt+NlFvDjFFU2Nmj/lsaS8 GwOkrSnl4BCt0x+9QOHpUWuy3wbp4CFrm2Z2czvnWUDxJMJNr6FuNke0Be8W0c3P PbiS6hE8qCNzmseLe5bDE7c6FNMXH09b2w7Rtt4gkcTDkZjUDxjiNLvNjZp1v83S gCX2XOZbxVn8re1qedv1g+y2NcRBH+M= -----END CERTIFICATE-----Generated at Wed Jul 29 03:42:26 2026 by rpki-client