$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d3ab32-62cb-3f1d-b9d9-303e2d70d8ac.roa File: 01d3ab32-62cb-3f1d-b9d9-303e2d70d8ac.roa (raw, json) Hash identifier: AdOen/VkOqdC9VS5Bdn6w4H0mHxcvBDpQy9IQQdV8ew= Subject key identifier: 37:27:E1:02:AA:24:DD:68:3A:FB:42:D9:BA:E9:5A:F6:C6:27:D8:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DAE4041D03CE3DF3906B4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d3ab32-62cb-3f1d-b9d9-303e2d70d8ac.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 68.38.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:ae:40:41:d0:3c:e3:df:39:06:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=859fdc9c-c54e-40ec-b570-f96049b0089f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:ea:bf:cd:19:0e:e5:db:b2:ae:27:f4:33: 78:7c:4b:6b:6f:94:08:0e:c4:39:33:6a:7c:54:16: c4:7a:6c:55:c4:df:6c:09:17:7b:11:1a:25:9e:96: ea:da:2f:ad:cb:4d:ff:0c:95:dc:7f:6d:f6:39:b9: 79:e2:d6:97:5d:c0:0e:cd:72:e7:9c:6f:79:7e:b6: 90:bd:1a:3a:aa:91:7a:21:65:57:75:b5:d0:33:97: 60:c7:1a:5d:a2:29:f6:13:e5:84:95:f4:ee:c9:1c: f0:10:64:5b:dd:34:f0:37:c0:3b:b5:1b:4b:2c:bd: ef:f0:f1:ef:70:0b:b2:96:ea:a7:00:4a:9a:c7:05: 73:16:2a:8c:ad:ee:19:9f:ab:ae:e3:b0:12:b2:38: 8d:b6:28:76:8c:8d:80:e2:d9:3d:d8:49:20:90:30: 47:aa:b5:e5:17:33:b5:d4:8e:38:e3:51:a0:c1:5e: 01:0a:7e:42:aa:8e:60:32:b9:f9:b8:fb:44:90:19: b9:e9:f4:4d:59:c3:07:35:4e:c9:33:91:22:36:06: 23:8a:13:6f:bd:c8:41:e3:38:d9:ec:53:fc:43:c0: 8a:57:96:d8:b1:3a:3b:db:39:a6:9b:b4:24:2a:37: a3:23:ad:e4:40:30:4b:0c:cd:41:4a:d5:c9:5c:61: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:E1:02:AA:24:DD:68:3A:FB:42:D9:BA:E9:5A:F6:C6:27:D8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d3ab32-62cb-3f1d-b9d9-303e2d70d8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2d:cd:e3:ce:2c:48:79:9d:85:47:cd:2e:2d:54:17:9e:06: 50:f0:f9:05:a5:de:a1:57:57:7b:22:a7:98:0e:b8:3e:8f:20: 0b:aa:39:83:7e:61:bc:68:70:14:6d:7c:4c:d3:93:84:4c:d3: d0:a4:64:89:c2:54:7d:e5:07:78:6d:19:7f:2f:8f:d5:d4:f0: 7c:3d:c0:4e:d9:35:eb:df:5b:25:47:fa:2d:6d:4a:c8:3a:a0: 05:4c:1c:11:76:e3:5f:94:5d:63:01:b6:89:0e:9a:d5:15:47: da:0a:17:e5:23:f2:12:13:45:97:61:57:20:48:ef:d1:42:53: 14:a2:39:e8:a9:a7:21:21:ee:f0:ac:bb:67:9e:f4:65:e5:6c: 3e:7c:fe:90:6b:b3:6e:c4:66:43:77:ac:3a:8e:b6:66:5b:8d: 4f:9c:bc:a2:02:5b:5d:15:ca:0f:f7:3a:39:d4:3b:c4:87:ab: 53:62:7d:97:d6:4c:5f:12:bb:58:d7:f0:11:a8:59:31:78:69: 1c:da:7e:86:54:fb:da:54:07:10:14:78:81:82:de:9d:03:5d: 8e:40:61:d7:6f:5f:a8:7f:7c:55:e9:44:2f:6d:1b:4a:dd:20: ca:43:66:dd:1b:5e:d4:fb:80:57:fe:1c:a0:e1:c7:21:39:4b: fc:4e:d3:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rna5AQdA84985BrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODU5ZmRjOWMtYzU0ZS00MGVjLWI1NzAtZjk2MDQ5YjAwODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cbqv80ZDuXbsq4n9DN4fEtrb5QIDsQ5M2p8 VBbEemxVxN9sCRd7ERolnpbq2i+ty03/DJXcf232Obl54taXXcAOzXLnnG95fraQ vRo6qpF6IWVXdbXQM5dgxxpdoin2E+WElfTuyRzwEGRb3TTwN8A7tRtLLL3v8PHv cAuyluqnAEqaxwVzFiqMre4Zn6uu47ASsjiNtih2jI2A4tk92EkgkDBHqrXlFzO1 1I4441GgwV4BCn5Cqo5gMrn5uPtEkBm56fRNWcMHNU7JM5EiNgYjihNvvchB4zjZ 7FP8Q8CKV5bYsTo72zmmm7QkKjejI63kQDBLDM1BStXJXGFOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcn4QKqJN1oOvtC2brpWvbGJ9gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFkM2FiMzItNjJjYi0z ZjFkLWI5ZDktMzAzZTJkNzBkOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKstzePOLEh5nYVHzS4tVBeeBlDw+QWl3qFXV3sip5gOuD6PIAuqOYN+ YbxocBRtfEzTk4RM09CkZInCVH3lB3htGX8vj9XU8Hw9wE7ZNevfWyVH+i1tSsg6 oAVMHBF241+UXWMBtokOmtUVR9oKF+Uj8hITRZdhVyBI79FCUxSiOeippyEh7vCs u2ee9GXlbD58/pBrs27EZkN3rDqOtmZbjU+cvKICW10Vyg/3OjnUO8SHq1NifZfW TF8Su1jX8BGoWTF4aRzafoZU+9pUBxAUeIGC3p0DXY5AYddvX6h/fFXpRC9tG0rd IMpDZt0bXtT7gFf+HKDhxyE5S/xO044= -----END CERTIFICATE-----Generated at Sat Sep 5 11:11:46 2026 by rpki-client