$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e034d04-de6b-37a0-a882-89875baefeeb.roa File: 0e034d04-de6b-37a0-a882-89875baefeeb.roa (raw, json) Hash identifier: 34TibLaWS4Qiby/ahOmlrUGZcs0gebZuvCGGTOq7A1c= Subject key identifier: D6:DA:9D:D3:D3:40:54:D1:1E:61:E4:55:9D:65:1C:81:2F:A6:16:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5F8D92EEE0665F080580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e034d04-de6b-37a0-a882-89875baefeeb.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.36.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5f:8d:92:ee:e0:66:5f:08:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=aee96e93-a8b9-43a6-8c51-f69ae188b7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:ff:96:ad:fd:6c:2d:b0:1a:b6:11:e9:d5: e1:25:a3:cb:ac:9b:06:d1:5e:5c:50:15:4b:12:2e: 42:96:b1:7b:43:23:5f:e3:54:3e:b5:01:8e:eb:b2: f8:da:6a:f9:0f:6d:d3:81:ab:34:29:65:f7:61:f3: 87:db:f1:d8:33:c0:d6:6e:7c:89:c1:0e:27:b7:ed: 4a:88:91:ec:cf:7e:9f:10:7c:13:bf:c9:66:a0:b6: ac:40:90:a9:cf:24:c2:3e:8d:2a:61:48:20:bd:d7: 1b:8d:2f:83:53:73:b3:7d:fc:1a:7e:2f:1e:e6:4e: 4c:8b:ad:ca:65:3f:1f:00:d0:b0:e2:48:65:66:79: 16:80:f3:c2:c5:55:11:9d:57:b2:fe:21:be:b1:e6: 15:2a:50:3f:08:f4:91:45:42:f4:54:e9:c0:f3:b5: 79:0b:2c:e2:e5:73:67:ae:db:96:7a:9c:68:a8:61: 6a:cf:ef:44:9f:07:a9:1b:4c:ba:34:85:d8:d0:35: 9b:60:ff:f7:1d:6a:0e:40:d5:0c:31:84:6f:bc:bc: 31:c7:90:5d:97:75:a9:ce:17:7a:c0:72:98:7d:47: b2:1e:40:15:5a:bf:c1:9a:6a:49:95:b8:d4:35:e7: 69:b0:0c:6c:eb:04:a4:97:dc:24:e4:aa:3f:97:58: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DA:9D:D3:D3:40:54:D1:1E:61:E4:55:9D:65:1C:81:2F:A6:16:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e034d04-de6b-37a0-a882-89875baefeeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e9:0e:12:7e:c4:25:1e:ec:99:70:ab:2c:af:1d:5f:16:fb: 7d:62:95:f5:01:11:2d:d5:66:3d:6a:c4:7b:ef:34:03:fb:b9: db:41:93:a4:4d:4a:84:bc:d1:c1:61:a8:95:cc:ac:27:93:7e: 5c:e2:26:b8:14:18:9d:d8:6d:ec:99:44:69:cf:27:d5:fa:17: 4e:b4:79:63:07:7c:1f:dc:72:ee:b0:0a:72:8e:fb:de:b1:2b: 57:73:0f:6f:3b:cf:08:c8:f2:72:77:5d:fb:e0:ff:d9:5c:f0: e3:45:b7:41:6b:a9:7f:d1:cf:65:22:fd:eb:81:66:29:72:48: f6:a9:3e:88:3a:f3:76:76:ad:6f:01:33:73:5c:90:c7:63:d9: 66:15:e1:88:82:e5:fc:3f:9e:c5:8a:97:21:b4:53:c7:b0:35: 89:40:89:e8:b6:ab:59:41:2c:91:2d:c4:f4:4e:cd:6e:fb:3e: 83:a0:d9:31:74:3c:3e:bd:0d:57:4b:21:fe:9d:4a:b3:22:1a: 83:96:9d:a0:ba:3a:f7:d8:79:13:93:8e:50:25:d3:dc:1f:ba: 8f:eb:f3:87:a7:65:30:ce:d1:c5:7e:29:54:03:49:c3:23:90: 51:06:aa:92:2b:2e:8f:b7:b1:d2:d2:93:36:66:7d:54:e9:84: c2:23:a1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tl+Nku7gZl8IBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWVlOTZlOTMtYThiOS00M2E2LThjNTEtZjY5YWUxODhiN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV7/lq39bC2wGrYR6dXhJaPLrJsG0V5cUBVL Ei5ClrF7QyNf41Q+tQGO67L42mr5D23Tgas0KWX3YfOH2/HYM8DWbnyJwQ4nt+1K iJHsz36fEHwTv8lmoLasQJCpzyTCPo0qYUggvdcbjS+DU3Ozffwafi8e5k5Mi63K ZT8fANCw4khlZnkWgPPCxVURnVey/iG+seYVKlA/CPSRRUL0VOnA87V5Cyzi5XNn rtuWepxoqGFqz+9EnwepG0y6NIXY0DWbYP/3HWoOQNUMMYRvvLwxx5Bdl3Wpzhd6 wHKYfUeyHkAVWr/BmmpJlbjUNedpsAxs6wSkl9wk5Ko/l1jbQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbandPTQFTRHmHkVZ1lHIEvphbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUwMzRkMDQtZGU2Yi0z N2EwLWE4ODItODk4NzViYWVmZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3pDhJ+xCUe7JlwqyyvHV8W+31ilfUBES3VZj1qxHvvNAP7udtBk6RN SoS80cFhqJXMrCeTflziJrgUGJ3YbeyZRGnPJ9X6F060eWMHfB/ccu6wCnKO+96x K1dzD287zwjI8nJ3Xfvg/9lc8ONFt0FrqX/Rz2Ui/euBZilySPapPog683Z2rW8B M3NckMdj2WYV4YiC5fw/nsWKlyG0U8ewNYlAiei2q1lBLJEtxPROzW77PoOg2TF0 PD69DVdLIf6dSrMiGoOWnaC6OvfYeROTjlAl09wfuo/r84enZTDO0cV+KVQDScMj kFEGqpIrLo+3sdLSkzZmfVTphMIjofA= -----END CERTIFICATE-----Generated at Fri Oct 23 05:20:35 2026 by rpki-client