$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa File: cd520bef-42d3-3f61-ae02-704de30c779d.roa (raw, json) Hash identifier: oT7oKhk8qyOUytWacHZbTXlKxF1XtE7BVIE66FK+l/s= Subject key identifier: CF:15:A9:07:7A:8B:68:3F:D1:94:69:9C:64:5B:BF:9B:96:47:4E:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B033C01D036CD842B280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.41.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b0:33:c0:1d:03:6c:d8:42:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6113e975-4c9e-49a2-8140-9a9641d18caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:61:52:e9:fb:13:f5:41:9d:ba:13:db:81: e2:15:c7:73:03:62:8e:5c:f0:bb:3e:03:7f:3d:8c: 6c:82:7f:ea:78:e8:26:29:69:df:a6:a1:b3:eb:db: c6:7e:ab:5a:ce:be:d1:3b:86:17:dc:9e:d9:9c:5e: c3:55:e0:74:c4:23:bd:b5:e9:36:39:54:42:13:80: 04:59:60:b6:a7:ef:4f:a7:43:69:98:a5:b8:55:5d: 2c:eb:bf:9b:41:43:66:e0:10:0b:58:18:46:e0:ed: 43:56:ef:30:af:c7:25:37:7c:6f:67:5f:d1:ae:2b: f9:fc:9d:21:2b:4c:45:e8:0a:43:80:6a:42:75:46: 0d:ef:c7:99:91:ad:c5:b0:f2:19:a4:4c:df:a3:23: 62:85:80:41:ad:df:bb:14:cd:d9:1a:51:91:dc:7e: 3c:61:d4:7a:9e:22:e8:5f:7e:bd:27:f5:24:c5:6e: a8:2b:3d:74:07:3f:39:c3:4b:fe:87:12:97:88:d9: 9b:39:c2:9c:72:31:0e:a8:a9:3f:55:ca:24:3f:35: 31:46:1f:ef:91:c7:08:b0:95:52:37:56:d2:e9:88: 44:be:bd:b8:48:11:c5:30:7b:2d:42:18:f2:0f:59: e5:21:fe:eb:d1:da:f4:0e:19:7e:a0:2d:26:bd:89: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:15:A9:07:7A:8B:68:3F:D1:94:69:9C:64:5B:BF:9B:96:47:4E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd520bef-42d3-3f61-ae02-704de30c779d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:23:42:73:86:f8:ee:19:a9:d4:c9:40:27:6e:6c:85:10:b4: 69:66:9e:2c:d9:26:58:26:0a:9e:81:f3:40:86:5d:8c:6d:fe: 73:d1:5f:f2:a6:f4:fa:cb:ff:0b:e0:41:98:c1:f8:05:79:55: 61:1a:ac:89:ac:91:cc:01:3c:9f:64:de:fb:43:f1:65:4b:96: 94:fa:36:ea:df:f0:76:7b:ba:5a:24:26:49:6d:ea:c4:cb:5c: 99:a8:96:80:42:75:29:f3:91:09:0d:77:b6:25:80:3d:c9:28: ad:fb:84:c0:14:a3:1e:f7:2d:07:fb:d1:2d:f7:09:34:6b:16: 99:4a:a6:5e:92:d6:0e:c2:2d:e6:d2:b6:42:3e:f2:4b:6a:29: 43:a3:7a:ce:ec:9c:c7:81:d6:d9:9e:e7:8e:12:b6:ac:56:c9: c5:24:d4:54:23:cf:50:ea:06:07:d6:fa:55:af:02:d4:80:56: 4e:45:21:59:d9:3c:02:d7:c6:73:d3:05:1e:0c:a5:35:c2:17: dd:f2:dd:aa:72:99:17:59:fa:86:9b:6d:1d:96:ee:9f:a0:51: 4b:21:78:df:2f:cf:be:18:c3:b6:72:ac:33:36:d3:16:1a:fd: 90:fa:33:73:58:65:79:cf:91:28:71:e7:f8:c7:16:f5:f6:65: 3e:76:4c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrAzwB0DbNhCsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NjExM2U5NzUtNGM5ZS00OWEyLTgxNDAtOWE5NjQxZDE4Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5hUun7E/VBnboT24HiFcdzA2KOXPC7PgN/ PYxsgn/qeOgmKWnfpqGz69vGfqtazr7RO4YX3J7ZnF7DVeB0xCO9tek2OVRCE4AE WWC2p+9Pp0NpmKW4VV0s67+bQUNm4BALWBhG4O1DVu8wr8clN3xvZ1/Rriv5/J0h K0xF6ApDgGpCdUYN78eZka3FsPIZpEzfoyNihYBBrd+7FM3ZGlGR3H48YdR6niLo X369J/UkxW6oKz10Bz85w0v+hxKXiNmbOcKccjEOqKk/VcokPzUxRh/vkccIsJVS N1bS6YhEvr24SBHFMHstQhjyD1nlIf7r0dr0Dhl+oC0mvYmmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8VqQd6i2g/0ZRpnGRbv5uWR06uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Q1MjBiZWYtNDJkMy0z ZjYxLWFlMDItNzA0ZGUzMGM3NzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcjQnOG+O4ZqdTJQCdubIUQtGlmnizZJlgmCp6B80CGXYxt/nPRX/Km 9PrL/wvgQZjB+AV5VWEarImskcwBPJ9k3vtD8WVLlpT6Nurf8HZ7ulokJklt6sTL XJmoloBCdSnzkQkNd7YlgD3JKK37hMAUox73LQf70S33CTRrFplKpl6S1g7CLebS tkI+8ktqKUOjes7snMeB1tme544StqxWycUk1FQjz1DqBgfW+lWvAtSAVk5FIVnZ PALXxnPTBR4MpTXCF93y3apymRdZ+oabbR2W7p+gUUsheN8vz74Yw7ZyrDM20xYa /ZD6M3NYZXnPkShx5/jHFvX2ZT52TEI= -----END CERTIFICATE-----Generated at Thu Sep 24 23:07:50 2026 by rpki-client