$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: hh4dCN0EuJ31GKbRsldpV2jKWSciZjwMQfmBIdVM2Uk= Subject key identifier: 8C:4C:E8:1A:84:B3:A9:85:3B:7D:38:5B:86:2A:74:A2:22:F1:73:09 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584F1467A1AC72CC8CD2FD5E3DC0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a1:ac:72:cc:8c:d2:fd:5e:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=1296d4bb-a087-456b-b6b1-3ee74a5a97d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:a6:d9:04:f0:a3:39:42:8b:fd:78:bb:17: 4e:19:11:74:55:6a:be:59:94:f1:01:2c:5e:c3:d2: 3a:33:7f:08:6e:dd:10:bd:fc:ed:b7:1c:80:5a:f4: 53:a9:6f:11:e2:6d:e3:cf:01:c1:c1:9f:4f:14:78: f7:45:11:ca:a8:6b:3f:ab:bc:2e:5c:d0:ec:b8:9f: b1:e0:38:97:cb:e0:3e:0a:c6:c0:bd:28:7b:7c:43: 6a:a7:f2:07:74:d2:fe:63:87:ea:bf:85:e5:8a:14: 6f:f9:93:4a:07:7f:b0:47:4a:d9:f2:0b:20:d7:70: c2:d8:73:ae:fb:1e:2e:57:bc:3f:70:f2:a0:10:33: 88:62:12:20:32:a4:e2:01:2f:00:df:cb:b5:02:69: 48:cd:1d:02:0a:7c:4d:7b:79:be:4e:2c:77:3e:41: 26:b0:45:87:0c:25:5b:22:c0:11:58:1e:c1:37:21: 64:be:99:0d:2c:07:45:57:2b:4d:58:42:9f:05:31: bb:f9:f6:07:b9:8a:a1:11:fc:26:68:46:88:4a:95: 51:18:a8:4c:02:ae:63:f2:82:95:25:85:08:dc:bb: 5a:26:7a:c6:cc:e9:d2:ed:07:cd:42:5d:a8:98:dd: 70:b9:8b:91:96:c0:a7:ad:d6:b2:c8:88:b1:c6:4c: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:E8:1A:84:B3:A9:85:3B:7D:38:5B:86:2A:74:A2:22:F1:73:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1d:be:4e:36:04:65:13:f1:85:b4:ed:4d:8a:fd:6e:c0:dd: 86:83:b4:11:1b:f8:3a:b9:2b:01:7a:b1:2b:c5:fa:15:d9:bd: ce:1a:fe:3a:de:63:87:43:84:fd:12:d3:ba:97:74:95:90:16: cc:5a:b4:f4:c6:bb:4e:48:00:4d:48:b4:dc:0b:dc:95:cf:2e: 95:99:c0:96:43:e7:2f:11:44:ed:8f:28:28:fc:d4:80:c6:f2: fc:05:56:19:db:38:ca:b6:f5:7d:d7:94:26:3b:ad:d2:5f:45: 96:11:49:6a:14:77:29:08:53:31:10:73:82:2b:2f:7c:da:43: 7e:5d:ff:bf:9f:0f:a1:da:04:eb:d7:14:3a:0f:c4:77:4d:87: 8b:1c:11:89:fe:de:e2:7e:87:17:b2:70:8a:4b:8a:19:b0:2a: 5b:f5:7f:48:0f:6a:2e:52:10:9b:df:35:21:95:98:d3:cf:e3: 40:68:ec:12:67:6a:39:c8:28:44:b4:71:4c:25:6b:9f:24:40: 8d:5b:a0:bf:75:87:88:a7:80:70:27:5d:fd:33:af:00:95:55: b2:97:69:9f:5b:5d:b8:0b:42:b7:42:21:61:f9:ef:8c:8c:d4: 70:b0:b7:d9:30:e3:fb:07:cf:0e:14:4e:dd:f6:7f:ff:06:88: 17:f7:ba:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6GscsyM0v1ePcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTI5NmQ0YmItYTA4Ny00NTZiLWI2YjEtM2VlNzRhNWE5N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo+m2QTwozlCi/14uxdOGRF0VWq+WZTxASxe w9I6M38Ibt0QvfzttxyAWvRTqW8R4m3jzwHBwZ9PFHj3RRHKqGs/q7wuXNDsuJ+x 4DiXy+A+CsbAvSh7fENqp/IHdNL+Y4fqv4XlihRv+ZNKB3+wR0rZ8gsg13DC2HOu +x4uV7w/cPKgEDOIYhIgMqTiAS8A38u1AmlIzR0CCnxNe3m+Tix3PkEmsEWHDCVb IsARWB7BNyFkvpkNLAdFVytNWEKfBTG7+fYHuYqhEfwmaEaISpVRGKhMAq5j8oKV JYUI3LtaJnrGzOnS7QfNQl2omN1wuYuRlsCnrdayyIixxkxlPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxM6BqEs6mFO304W4YqdKIi8XMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgdvk42BGUT8YW07U2K/W7A3YaDtBEb+Dq5KwF6sSvF+hXZvc4a/jre Y4dDhP0S07qXdJWQFsxatPTGu05IAE1ItNwL3JXPLpWZwJZD5y8RRO2PKCj81IDG 8vwFVhnbOMq29X3XlCY7rdJfRZYRSWoUdykIUzEQc4IrL3zaQ35d/7+fD6HaBOvX FDoPxHdNh4scEYn+3uJ+hxeycIpLihmwKlv1f0gPai5SEJvfNSGVmNPP40Bo7BJn ajnIKES0cUwla58kQI1boL91h4ingHAnXf0zrwCVVbKXaZ9bXbgLQrdCIWH574yM 1HCwt9kw4/sHzw4UTt32f/8GiBf3un8= -----END CERTIFICATE-----Generated at Mon Sep 21 10:09:56 2026 by rpki-client