$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa File: 91aa241e-8896-32fb-a614-33e9e2acc913.roa (raw, json) Hash identifier: 4DqOsCrokcO5X54/fx8BzLa+5yzaZjro2iSqu0RJfkI= Subject key identifier: AC:E5:8B:DE:5B:CE:F5:61:DE:15:1E:7C:03:21:8B:72:60:ED:0F:30 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584F23C24F5F50F52BD13FAB57E0 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 36744 IP address blocks: 68.68.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4f:5f:50:f5:2b:d1:3f:ab:57:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=44631523-e305-4313-b180-67de818232c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:95:7b:76:49:66:71:d3:f0:58:e1:d7:99: 65:d6:28:f9:83:f4:ad:e8:63:30:84:be:73:0c:74: 4d:cf:6a:e5:8f:4e:c6:f1:03:4e:1d:e3:e4:b2:56: 68:ea:24:02:06:68:99:49:19:25:73:a9:2a:f1:05: 21:1f:ac:e9:76:7c:62:40:17:b0:e5:90:12:a2:a7: e2:90:67:9b:9f:a1:3c:92:78:7d:3d:f0:ba:49:9b: 6b:b5:3e:0d:5b:ea:f1:ac:ef:28:df:10:11:a5:15: d8:a9:92:e4:6e:f8:3d:fc:0a:a5:73:7b:49:55:32: ea:b7:e4:d7:94:74:5c:1f:67:f2:e4:ff:e9:f5:98: b9:0d:80:d1:66:46:54:bb:7a:26:4f:23:f3:a3:54: e0:ad:2d:3c:22:d4:2e:10:62:63:59:5a:b4:69:a7: 89:b1:9e:78:2a:73:ce:2b:fb:ee:07:e4:67:51:0f: d5:a2:92:c5:db:a5:da:11:cc:b8:47:50:9a:99:3b: 6f:53:c7:01:fe:04:5f:5c:4d:99:2a:56:46:7a:86: 25:63:7f:ab:13:a1:6b:95:cd:f5:62:61:29:92:86: 58:aa:dd:3f:90:45:3f:ab:a5:ae:22:48:03:54:ef: 49:1b:6a:cd:5b:a7:99:7f:65:04:e8:ba:a4:bf:20: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E5:8B:DE:5B:CE:F5:61:DE:15:1E:7C:03:21:8B:72:60:ED:0F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/91aa241e-8896-32fb-a614-33e9e2acc913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 68.68.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:31:9e:ea:aa:92:53:fa:fb:d5:b6:90:97:26:71:e2:c8:84: e3:51:9b:68:25:cd:6d:93:a3:f4:7b:c8:db:16:fd:0a:77:02: 58:48:ca:77:22:77:ae:10:a4:fb:3e:b8:e6:87:15:c8:45:7f: e4:af:1d:66:6d:d6:12:58:d0:4f:22:89:c9:8a:c5:04:05:f7: be:93:1c:32:ec:7e:31:93:49:cb:08:c0:39:73:e2:19:fe:9a: 45:79:0e:e9:cf:63:54:00:d2:b9:8d:de:b8:79:6b:26:15:d8: d8:ae:63:b0:3f:ac:b0:70:5e:b9:5a:5a:53:85:88:e5:2b:dd: f5:87:5e:a8:68:42:52:d2:34:d4:71:87:47:d8:cd:b8:ef:4e: 40:eb:b3:14:18:95:68:c2:04:0f:87:55:ad:69:8a:fb:09:34: 31:d5:eb:4c:08:1f:73:3f:37:9d:cf:3d:27:0f:96:3b:48:f1: 56:27:9b:49:c7:a9:f6:66:b2:65:15:9d:49:0b:76:11:9a:fd: aa:0a:a5:4b:71:28:d1:d2:8d:90:c2:f5:25:22:29:f4:81:cc: 7b:c6:ea:e6:e0:53:97:cd:42:e3:a0:ca:df:70:fe:c0:ed:4c: 46:f9:e9:0d:c4:5d:36:e8:fd:c3:8a:80:cf:8f:ee:0d:4c:f7: 76:dc:eb:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwk9fUPUr0T+rV+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NDQ2MzE1MjMtZTMwNS00MzEzLWIxODAtNjdkZTgxODIzMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOVe3ZJZnHT8Fjh15ll1ij5g/St6GMwhL5z DHRNz2rlj07G8QNOHePkslZo6iQCBmiZSRklc6kq8QUhH6zpdnxiQBew5ZASoqfi kGebn6E8knh9PfC6SZtrtT4NW+rxrO8o3xARpRXYqZLkbvg9/Aqlc3tJVTLqt+TX lHRcH2fy5P/p9Zi5DYDRZkZUu3omTyPzo1TgrS08ItQuEGJjWVq0aaeJsZ54KnPO K/vuB+RnUQ/VopLF26XaEcy4R1CamTtvU8cB/gRfXE2ZKlZGeoYlY3+rE6Frlc31 YmEpkoZYqt0/kEU/q6WuIkgDVO9JG2rNW6eZf2UE6LqkvyDyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzli95bzvVh3hUefAMhi3Jg7Q8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvOTFhYTI0MWUtODg5Ni0z MmZiLWE2MTQtMzNlOWUyYWNjOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQxnuqqklP6+9W2kJcmceLIhONRm2glzW2To/R7yNsW/Qp3AlhIynci d64QpPs+uOaHFchFf+SvHWZt1hJY0E8iicmKxQQF976THDLsfjGTScsIwDlz4hn+ mkV5DunPY1QA0rmN3rh5ayYV2NiuY7A/rLBwXrlaWlOFiOUr3fWHXqhoQlLSNNRx h0fYzbjvTkDrsxQYlWjCBA+HVa1pivsJNDHV60wIH3M/N53PPScPljtI8VYnm0nH qfZmsmUVnUkLdhGa/aoKpUtxKNHSjZDC9SUiKfSBzHvG6ubgU5fNQuOgyt9w/sDt TEb56Q3EXTbo/cOKgM+P7g1M93bc6xM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:06:04 2026 by rpki-client