$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa File: 07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa (raw, json) Hash identifier: nmwdSFCGJ+FaL8x/3x/k6JAdc0HqS8zDJp9SGi3YCOI= Subject key identifier: 5B:CE:3E:F7:6B:18:A6:F7:19:F9:4D:0C:3D:6F:46:DC:98:12:FB:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E7646DD39558FC26BA600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.60.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:76:46:dd:39:55:8f:c2:6b:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=05676e32-a555-4f71-977f-de468befb29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:c1:1a:70:33:c7:8a:89:46:9f:7f:31:56: d1:34:53:b9:7d:1a:5c:6e:d4:78:63:6c:85:78:0b: 2b:0a:7c:93:95:2d:3d:fa:4d:e9:00:b4:a1:02:99: 19:7c:69:d3:07:d0:ec:59:20:4b:80:33:23:c6:67: 93:10:ed:81:a5:62:6d:51:b3:b0:1e:28:e9:e4:96: 0f:af:55:b9:9d:9a:78:2b:68:32:79:23:60:bb:29: 65:22:46:88:73:00:f1:dc:e8:22:a9:55:03:45:de: b5:d5:60:b0:29:49:08:ab:c0:b9:eb:85:99:2a:ca: 44:8c:06:bd:7b:2a:3d:8f:0b:58:76:e8:b9:94:91: 88:b3:51:7e:ab:7e:b1:1d:0d:15:a5:9a:80:10:f4: 8d:33:6b:c7:e4:30:56:93:31:07:bb:b4:b8:53:79: b6:d8:4f:2a:fe:b4:f5:97:39:f7:09:55:57:13:3d: 11:74:e5:26:7c:81:3c:40:83:f7:c3:38:c0:40:10: 58:67:ba:48:22:55:a5:76:4b:91:1e:f3:77:5c:c3: a5:88:6e:4b:6a:e8:be:57:d0:62:e3:0c:9b:f7:6b: cd:93:96:53:da:ce:40:10:1c:ff:e5:c4:24:32:81: 39:d8:c9:9f:6b:e7:dc:63:23:69:2e:6a:1f:65:a1: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CE:3E:F7:6B:18:A6:F7:19:F9:4D:0C:3D:6F:46:DC:98:12:FB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:15:b3:68:eb:c6:97:ee:96:a9:3f:65:71:eb:96:ef:02:c8: f7:06:27:36:c0:d0:9e:57:66:0d:30:62:2b:9f:54:90:da:74: 14:ef:4d:11:a6:5e:cc:65:ef:5d:6b:8b:80:dd:63:98:91:09: 5a:a0:4d:74:24:19:65:0b:d9:36:d1:f2:3b:d5:7f:5d:0b:1e: f3:b5:c9:54:b4:4a:4a:bf:f5:02:82:b0:25:8b:d0:11:76:66: bf:37:49:0b:8d:d8:3f:4e:81:4a:b5:43:db:3b:35:7e:3f:7b: bf:d5:e7:61:d3:67:f4:9e:58:e2:bc:b6:d6:fa:53:36:47:94: e9:b3:4a:47:a0:fd:cf:bc:40:03:eb:d0:1c:f7:d8:f4:0c:89: 5b:39:83:41:fa:fa:eb:fb:6a:04:20:5b:0a:d3:39:56:a7:c0: 4a:e4:5a:3b:86:0d:ee:4d:de:01:b3:4d:86:9f:32:29:70:e4: a8:c0:c0:cd:60:7b:5f:2c:45:37:cf:f1:fe:bd:53:ea:f1:01: bf:e5:16:96:09:35:58:70:68:ec:d6:a7:81:d3:ce:24:2c:f1: 30:dc:ef:6b:17:38:1c:08:06:3c:da:4b:5a:e8:30:7a:84:3e: c7:9a:6a:6b:14:93:01:2b:e0:e4:5c:a9:02:f2:25:f5:f5:e9: 18:b9:68:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TnZG3TlVj8JrpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDU2NzZlMzItYTU1NS00ZjcxLTk3N2YtZGU0NjhiZWZiMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8HBGnAzx4qJRp9/MVbRNFO5fRpcbtR4Y2yF eAsrCnyTlS09+k3pALShApkZfGnTB9DsWSBLgDMjxmeTEO2BpWJtUbOwHijp5JYP r1W5nZp4K2gyeSNguyllIkaIcwDx3OgiqVUDRd611WCwKUkIq8C564WZKspEjAa9 eyo9jwtYdui5lJGIs1F+q36xHQ0VpZqAEPSNM2vH5DBWkzEHu7S4U3m22E8q/rT1 lzn3CVVXEz0RdOUmfIE8QIP3wzjAQBBYZ7pIIlWldkuRHvN3XMOliG5Laui+V9Bi 4wyb92vNk5ZT2s5AEBz/5cQkMoE52Mmfa+fcYyNpLmofZaE08wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvOPvdrGKb3GflNDD1vRtyYEvtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdmMmJkMDEtYTQ0NC0z NGYzLWFiN2EtMWQyMGM3NWI5OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAVs2jrxpfulqk/ZXHrlu8CyPcGJzbA0J5XZg0wYiufVJDadBTvTRGm Xsxl711ri4DdY5iRCVqgTXQkGWUL2TbR8jvVf10LHvO1yVS0Skq/9QKCsCWL0BF2 Zr83SQuN2D9OgUq1Q9s7NX4/e7/V52HTZ/SeWOK8ttb6UzZHlOmzSkeg/c+8QAPr 0Bz32PQMiVs5g0H6+uv7agQgWwrTOVanwErkWjuGDe5N3gGzTYafMilw5KjAwM1g e18sRTfP8f69U+rxAb/lFpYJNVhwaOzWp4HTziQs8TDc72sXOBwIBjzaS1roMHqE PseaamsUkwEr4ORcqQLyJfX16Ri5aK8= -----END CERTIFICATE-----Generated at Wed Oct 21 05:07:42 2026 by rpki-client