$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa File: f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json) Hash identifier: TYCuwZy60xfGw+fBJp0XbLtPPjgZ4j1Y8BHDUstwciY= Subject key identifier: F7:40:17:14:A9:46:B6:8B:40:0A:CC:FA:EB:93:60:B9:C9:4A:63:67 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584F119D0436A2B57D2CB251F400 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 68.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:04:36:a2:b5:7d:2c:b2:51:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f4477640-fd42-4a6b-bbfd-1a96cd5fc909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:c5:38:ad:56:21:68:b0:21:4d:6e:61:e6: 7c:aa:d6:a7:55:ae:21:0b:5b:d4:e8:54:fa:0a:08: 12:66:3d:25:14:39:19:73:ce:65:52:63:ee:2e:af: 52:91:8c:a4:79:da:98:fc:bf:26:49:23:3a:ff:e1: 93:62:c8:8e:e3:13:4f:fa:c3:7d:6b:2d:d7:d6:09: e8:1a:9a:1b:fa:18:33:bb:24:67:1f:bf:ae:85:52: 99:a8:0d:59:7b:83:ab:dc:9b:38:29:28:04:be:82: 32:9d:7c:e2:fa:99:15:80:db:f8:58:0a:6a:cd:9a: 61:24:76:4d:00:f5:b0:4a:27:32:36:24:87:1a:49: 85:55:a0:74:92:81:60:49:74:e7:d4:1f:22:b1:b7: 4d:3a:95:fe:41:3a:07:81:4d:03:e4:75:82:86:73: a8:e6:18:98:ad:4d:cb:84:2c:87:2a:5a:82:0c:10: 3f:9a:62:6f:b6:75:7f:9f:06:4e:52:e5:15:4f:04: a7:bb:cb:48:78:65:05:c9:2d:19:b3:03:a2:37:ec: f0:d2:07:00:78:ab:58:f5:ee:5e:a1:4c:e4:0e:e5: bb:7b:31:09:c7:d0:5c:fe:1e:2d:b2:ed:c5:56:60: 03:50:dd:0e:94:c5:a5:89:2e:aa:3d:2d:d7:14:72: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:17:14:A9:46:B6:8B:40:0A:CC:FA:EB:93:60:B9:C9:4A:63:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9e:81:8a:90:39:d5:f2:4a:0d:0d:cd:48:cb:f7:86:14:c4: 00:16:dc:11:12:43:e0:8a:6b:5d:22:0f:09:a6:fa:43:7b:98: 0b:be:94:64:3f:43:68:64:98:6e:3b:38:13:e6:3b:eb:2c:8b: bd:e8:8c:e8:b1:d0:aa:42:8f:b8:d7:f9:f2:b4:d7:31:8e:ca: 42:ea:54:9f:22:bc:21:8b:67:dd:81:ad:0a:18:8f:37:02:13: e7:61:7e:ab:77:4b:f9:8e:48:31:44:09:30:d5:a4:ae:78:1b: d5:5c:2e:fd:eb:f7:76:ab:4c:65:94:c6:bb:23:ae:17:92:1d: c2:07:0e:77:56:7d:ce:0a:d9:3d:b2:a6:86:2b:a1:2b:9c:98: a2:36:f8:f9:b3:91:5b:33:c8:d5:0d:89:f9:fd:96:2a:7d:e9: ee:2c:c8:17:13:5a:5f:68:63:d5:c3:77:14:72:7f:b2:54:74: ab:70:a9:97:e7:65:85:3d:64:b0:49:94:df:0f:4f:27:29:13: aa:f5:8e:8a:15:cd:ca:8b:e6:74:8e:69:71:15:e7:7d:eb:0d: 84:51:b5:87:58:0e:b9:fb:08:9c:02:d1:99:43:3a:9b:64:16: 7f:fe:c7:5d:14:80:c9:d4:aa:42:8f:24:cf:16:fd:63:34:b6: f3:c3:b7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQQ2orV9LLJR9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ0Nzc2NDAtZmQ0Mi00YTZiLWJiZmQtMWE5NmNkNWZjOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FHFOK1WIWiwIU1uYeZ8qtanVa4hC1vU6FT6 CggSZj0lFDkZc85lUmPuLq9SkYykedqY/L8mSSM6/+GTYsiO4xNP+sN9ay3X1gno Gpob+hgzuyRnH7+uhVKZqA1Ze4Or3Js4KSgEvoIynXzi+pkVgNv4WApqzZphJHZN APWwSicyNiSHGkmFVaB0koFgSXTn1B8isbdNOpX+QToHgU0D5HWChnOo5hiYrU3L hCyHKlqCDBA/mmJvtnV/nwZOUuUVTwSnu8tIeGUFyS0ZswOiN+zw0gcAeKtY9e5e oUzkDuW7ezEJx9Bc/h4tsu3FVmADUN0OlMWliS6qPS3XFHIffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdAFxSpRraLQArM+uuTYLnJSmNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvZjRiMzA1NWYtZTAxYi0z MjEyLWFmNzgtYjFhOWMyYTFmYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyegYqQOdXySg0NzUjL94YUxAAW3BESQ+CKa10iDwmm+kN7mAu+lGQ/ Q2hkmG47OBPmO+ssi73ojOix0KpCj7jX+fK01zGOykLqVJ8ivCGLZ92BrQoYjzcC E+dhfqt3S/mOSDFECTDVpK54G9VcLv3r93arTGWUxrsjrheSHcIHDndWfc4K2T2y poYroSucmKI2+PmzkVszyNUNifn9lip96e4syBcTWl9oY9XDdxRyf7JUdKtwqZfn ZYU9ZLBJlN8PTycpE6r1jooVzcqL5nSOaXEV533rDYRRtYdYDrn7CJwC0ZlDOptk Fn/+x10UgMnUqkKPJM8W/WM0tvPDt/U= -----END CERTIFICATE-----Generated at Sun Sep 20 19:35:28 2026 by rpki-client