$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eed3a7e1-8716-3a17-8c44-0fd62fb8a0c5.roa File: eed3a7e1-8716-3a17-8c44-0fd62fb8a0c5.roa (raw, json) Hash identifier: e35VSzzA7P7g131evNkCH1OhxB6BHw1sewkMZXWgwAU= Subject key identifier: E0:23:B6:8D:42:0E:98:8A:E6:4B:D8:8D:09:F4:40:96:0D:8C:BD:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA795449889118B1DAFA2ECB3 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eed3a7e1-8716-3a17-8c44-0fd62fb8a0c5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7922 IP address blocks: 68.87.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:44:98:89:11:8b:1d:af:a2:ec:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fd85d409-1505-4adb-9cfa-a826f3863022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:6f:6c:56:08:da:b4:cd:24:67:b9:1f:77: 4f:46:2d:2d:80:c3:42:7b:26:0d:a0:04:fe:29:f1: ba:e4:d2:13:fc:23:f8:6d:08:28:c9:d9:5a:3f:a4: 8f:58:01:a2:a5:60:b4:bc:13:46:e3:60:02:a5:8d: 2a:1a:05:a0:ca:b0:da:8d:f5:da:11:43:60:71:51: ad:82:f6:8f:43:02:22:ee:cc:d5:9f:bd:74:7f:8f: 06:59:00:f2:6e:c8:25:f4:f0:ed:fb:99:11:ea:ed: 6f:93:ae:6a:46:fd:78:ca:2a:af:ea:cf:08:f0:f8: 4b:8b:5c:58:d9:75:8c:c7:f9:ef:73:62:c2:65:b5: 1d:e5:72:3a:80:1f:a0:37:20:2f:c0:0d:65:72:21: 38:85:f3:fb:4f:16:42:fb:28:04:c8:d3:8b:48:57: c4:c0:27:bc:cb:b6:b0:4a:ec:4b:c2:dc:4f:8c:00: 30:a4:68:e2:1b:3a:29:0c:68:fd:4e:9c:98:dc:0b: 22:d2:55:e6:af:a5:ca:99:5b:08:1f:3d:c4:bd:28: 29:0e:17:61:d9:90:7f:b9:2d:46:bf:dd:bb:15:cd: 1e:ef:3b:48:c3:d6:8b:36:74:2f:da:de:74:c4:70: 57:d7:cf:51:3b:5c:f3:b7:e5:21:c3:e3:a2:3f:7a: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:23:B6:8D:42:0E:98:8A:E6:4B:D8:8D:09:F4:40:96:0D:8C:BD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eed3a7e1-8716-3a17-8c44-0fd62fb8a0c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.87.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:f6:50:53:1d:af:8c:d9:6a:ab:1d:98:2b:20:44:9b:2a: d7:9a:67:53:60:b4:d3:18:b5:e7:e7:f6:89:9a:4b:d9:a3:4b: 25:a6:6d:7b:ea:07:40:df:ac:4d:62:40:f4:e5:57:d5:ab:45: 56:0a:f4:c4:08:e9:ba:06:09:58:c5:e2:00:df:d3:16:af:90: e2:da:ce:39:fe:65:11:45:b0:de:cf:28:82:8c:5b:ab:59:65: ae:5b:4c:7f:dd:14:4b:8c:17:ad:70:dd:83:c8:ad:09:91:b8: 16:22:c5:40:0d:50:64:1f:52:18:68:5d:5b:0c:31:8a:8d:b3: 9b:7e:c3:d5:83:50:bf:f0:e4:e1:d8:2b:f5:64:0e:62:36:80: 83:81:0e:67:b5:cf:b4:b7:79:74:82:3d:fc:15:a0:1a:0b:22: 7a:a7:5c:14:5c:e9:f3:21:a1:34:c7:78:28:5f:89:54:bc:30: eb:67:c5:fc:59:bc:ee:77:b8:0f:5e:e9:a9:f6:83:4b:67:93: 98:9e:93:83:31:31:5b:af:f2:94:ca:08:1e:5e:98:c2:24:37: 70:17:1f:c6:e3:25:da:c6:a9:65:19:84:ee:45:98:08:d5:ed: 24:b4:0c:03:e4:68:f1:b8:87:59:5c:9b:4f:40:4a:df:9e:8f: 9f:e6:d0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlUSYiRGLHa+i7LMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmQ4NWQ0MDktMTUwNS00YWRiLTljZmEtYTgyNmYzODYzMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEpvbFYI2rTNJGe5H3dPRi0tgMNCeyYNoAT+ KfG65NIT/CP4bQgoydlaP6SPWAGipWC0vBNG42ACpY0qGgWgyrDajfXaEUNgcVGt gvaPQwIi7szVn710f48GWQDybsgl9PDt+5kR6u1vk65qRv14yiqv6s8I8PhLi1xY 2XWMx/nvc2LCZbUd5XI6gB+gNyAvwA1lciE4hfP7TxZC+ygEyNOLSFfEwCe8y7aw SuxLwtxPjAAwpGjiGzopDGj9TpyY3Asi0lXmr6XKmVsIHz3EvSgpDhdh2ZB/uS1G v927Fc0e7ztIw9aLNnQv2t50xHBX189RO1zzt+Uhw+OiP3pUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAjto1CDpiK5kvYjQn0QJYNjL3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWVkM2E3ZTEtODcxNi0z YTE3LThjNDQtMGZkNjJmYjhhMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQV9lBTHa+M2WqrHZgrIESbKteaZ1NgtNMYtefn9omaS9mjSyWmbXvq B0DfrE1iQPTlV9WrRVYK9MQI6boGCVjF4gDf0xavkOLazjn+ZRFFsN7PKIKMW6tZ Za5bTH/dFEuMF61w3YPIrQmRuBYixUANUGQfUhhoXVsMMYqNs5t+w9WDUL/w5OHY K/VkDmI2gIOBDme1z7S3eXSCPfwVoBoLInqnXBRc6fMhoTTHeChfiVS8MOtnxfxZ vO53uA9e6an2g0tnk5iek4MxMVuv8pTKCB5emMIkN3AXH8bjJdrGqWUZhO5FmAjV 7SS0DAPkaPG4h1lcm09ASt+ej5/m0Cg= -----END CERTIFICATE-----Generated at Wed Jul 29 05:07:15 2026 by rpki-client