$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa7c57f-d27c-3353-a702-13352ca4cb2f.roa File: 0fa7c57f-d27c-3353-a702-13352ca4cb2f.roa (raw, json) Hash identifier: 1/BmsoBGXBeEG+FKYIu0G1L0XeW5fZfrjHFLE5yOLg0= Subject key identifier: F2:22:30:DC:A4:1E:C1:57:64:2F:FF:60:94:3B:84:DA:03:28:7E:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F8C18DCC5FA55C8D32440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa7c57f-d27c-3353-a702-13352ca4cb2f.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.32.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:8c:18:dc:c5:fa:55:c8:d3:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bbeafe9f-c505-4a23-ac4f-1fde2c0984f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:16:ee:a5:ba:a6:b0:75:87:dd:28:ca:ae: 0e:01:29:08:d8:1a:af:de:cb:46:63:fc:36:ff:93: 97:dc:b4:f5:7e:fa:9b:21:6c:0e:19:4b:40:4b:ee: c8:c6:a8:2f:eb:de:43:79:ca:1a:cf:74:bc:c3:4b: ae:12:15:da:4e:8f:c8:7c:99:cc:ed:c4:d3:f8:b3: 78:27:6a:b2:0d:0c:78:60:8e:73:88:77:ef:2c:25: 57:5e:1c:a6:1a:dd:8b:21:82:7d:d1:6c:b4:79:91: 27:37:cd:60:89:18:14:1e:72:fd:46:18:2c:f5:a7: ae:e4:66:8d:4f:86:b8:b1:bc:91:a7:fc:5a:18:c4: 15:e7:f7:2b:b5:6d:94:38:58:6a:82:be:52:e3:d6: 98:15:86:4b:a7:8c:71:2f:06:45:a5:c2:1a:da:87: 8a:e9:3e:2d:a0:8a:ba:98:d6:e9:5c:fc:b3:07:81: 19:aa:28:2b:0a:bf:d2:ee:1f:0c:8c:9c:7a:c5:19: d8:1a:1f:3b:b0:1d:42:a0:27:0a:c3:22:bd:85:ad: 0c:d8:ca:a3:cc:ed:b1:4c:f3:39:ad:8a:22:e3:11: 57:3d:00:47:06:69:3a:14:21:95:b5:2a:8d:2e:3e: dd:11:94:68:94:22:99:68:ac:96:a9:4b:ce:02:c7: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:30:DC:A4:1E:C1:57:64:2F:FF:60:94:3B:84:DA:03:28:7E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fa7c57f-d27c-3353-a702-13352ca4cb2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d8:04:96:f7:87:80:07:df:d5:b4:39:a8:d1:a8:95:c9:87: 11:52:ea:ac:1c:e3:96:80:e2:33:f2:bf:31:f7:f0:f7:2f:30: 8e:b8:7c:a3:65:b4:d6:56:e0:42:88:69:98:ec:69:49:6f:d8: b5:f0:46:31:13:6e:95:0e:0a:b1:90:9c:c2:32:e9:1a:41:61: 2f:22:dd:b8:53:f1:12:ac:8d:10:2a:ec:6e:7e:75:4b:35:fa: 5e:42:51:e3:96:aa:39:23:83:86:f2:82:42:b3:65:f0:7a:01: 4c:c2:25:71:10:d5:26:42:99:f0:57:57:27:65:c9:9b:12:60: 5c:5a:18:8f:c1:e1:59:c6:ae:73:da:a4:a8:f2:cc:5c:44:e0: 1a:0b:2e:94:3d:3f:ac:bf:f0:91:8e:63:f8:f9:bb:24:e8:d0: bf:f0:e6:8e:6a:81:6b:e7:d6:a4:61:17:78:61:3e:11:e1:99: 88:ba:64:65:45:af:54:b5:3a:5a:54:43:02:04:dc:d7:97:1a: cc:e9:70:1e:88:23:91:2d:e2:ba:d5:71:53:c7:15:bd:e0:c5: 29:2b:61:b7:ed:8b:81:1b:7f:a0:d2:f1:78:ca:bd:0f:cf:b6: 21:4f:a8:b2:b2:10:54:c3:c4:a4:f8:0c:31:5d:a9:d1:9e:d5: 75:78:43:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T4wY3MX6VcjTJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmJlYWZlOWYtYzUwNS00YTIzLWFjNGYtMWZkZTJjMDk4NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUsW7qW6prB1h90oyq4OASkI2Bqv3stGY/w2 /5OX3LT1fvqbIWwOGUtAS+7Ixqgv695Decoaz3S8w0uuEhXaTo/IfJnM7cTT+LN4 J2qyDQx4YI5ziHfvLCVXXhymGt2LIYJ90Wy0eZEnN81giRgUHnL9Rhgs9aeu5GaN T4a4sbyRp/xaGMQV5/crtW2UOFhqgr5S49aYFYZLp4xxLwZFpcIa2oeK6T4toIq6 mNbpXPyzB4EZqigrCr/S7h8MjJx6xRnYGh87sB1CoCcKwyK9ha0M2MqjzO2xTPM5 rYoi4xFXPQBHBmk6FCGVtSqNLj7dEZRolCKZaKyWqUvOAseK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIiMNykHsFXZC//YJQ7hNoDKH4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZhN2M1N2YtZDI3Yy0z MzUzLWE3MDItMTMzNTJjYTRjYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTYBJb3h4AH39W0OajRqJXJhxFS6qwc45aA4jPyvzH38PcvMI64fKNl tNZW4EKIaZjsaUlv2LXwRjETbpUOCrGQnMIy6RpBYS8i3bhT8RKsjRAq7G5+dUs1 +l5CUeOWqjkjg4bygkKzZfB6AUzCJXEQ1SZCmfBXVydlyZsSYFxaGI/B4VnGrnPa pKjyzFxE4BoLLpQ9P6y/8JGOY/j5uyTo0L/w5o5qgWvn1qRhF3hhPhHhmYi6ZGVF r1S1OlpUQwIE3NeXGszpcB6II5Et4rrVcVPHFb3gxSkrYbfti4Ebf6DS8XjKvQ/P tiFPqLKyEFTDxKT4DDFdqdGe1XV4Q4I= -----END CERTIFICATE-----Generated at Wed Oct 21 17:38:03 2026 by rpki-client