$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa File: 10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa (raw, json) Hash identifier: Ou6Zw/YdiIN9toRAzrm+U9kuj/wpUYYWGDBIFWMEyWI= Subject key identifier: 28:BF:73:FA:53:A4:75:0C:A9:5E:C8:6A:C5:15:4B:D4:FD:E1:D6:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F9A334AA14507CA9D0100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:9a:33:4a:a1:45:07:ca:9d:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b2ef8071-92e4-4cb9-a8e6-a1b26f81b132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:dd:a8:d8:eb:a1:ce:4e:45:2d:5b:bf:03: ec:2d:eb:84:b3:6e:ce:47:76:fc:04:aa:45:5d:4e: d1:ed:ac:84:35:8f:f4:ac:a0:e9:2a:a2:cc:7c:d9: 90:b3:fa:5c:02:66:27:81:61:68:e5:b9:d6:ac:d5: 98:3d:cb:57:5f:b3:3a:83:bd:24:51:ea:42:d7:02: e4:ea:73:63:15:b4:aa:d0:e0:19:e0:78:8c:27:86: c6:5a:56:3a:75:86:f3:b6:67:7d:7d:84:75:98:5a: 25:a3:f1:d0:2a:ce:5a:d8:36:e2:40:17:05:11:26: 66:75:73:13:94:f1:9b:9e:6b:b4:cd:de:b7:aa:6e: 06:6f:5c:d6:bc:0e:a1:be:ca:b3:99:79:41:a5:c0: d4:91:76:db:a4:f9:f4:ce:e8:3b:d6:ca:1b:41:cd: a3:0e:28:66:e2:b9:d0:63:c2:14:3d:58:31:2f:45: 05:74:1e:9c:9c:f1:88:be:0f:50:fd:d4:31:d4:6a: 4b:77:ae:1c:dd:21:92:b2:e3:11:89:65:1a:64:a5: fd:d9:25:d6:25:3b:e9:51:78:0b:28:b0:ff:6a:dc: eb:e7:10:a7:01:f2:e0:fe:c7:b7:2d:58:81:56:b1: fc:23:6e:9a:6a:d1:79:a4:ac:85:12:d6:05:77:0a: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BF:73:FA:53:A4:75:0C:A9:5E:C8:6A:C5:15:4B:D4:FD:E1:D6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10921a88-109b-36a1-9dd1-8bb66a7e0c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c8:7d:dc:9c:26:1a:33:e8:24:e8:fe:77:1d:bb:7b:88:17: c6:9c:6e:fb:09:a5:94:a9:1a:a1:b8:03:41:c7:ec:2d:ce:47: dd:91:e0:54:fc:73:a4:5d:2f:ae:95:9a:b8:fd:48:cb:0a:db: ec:a0:0e:a5:c6:63:17:77:84:85:58:55:58:b3:8c:1e:5b:19: 85:0c:42:8c:28:b7:a4:58:12:ad:b9:10:43:7d:03:a0:26:cd: d1:e4:d9:0a:ab:0e:08:0a:4c:9d:ae:c1:c3:e6:87:ed:a0:9b: 35:d5:1f:12:ff:1e:84:cc:74:eb:13:7a:0e:2d:4d:ec:34:64: ef:22:fd:dd:c7:e5:87:20:dc:08:33:09:9b:37:03:11:1d:93: 78:5c:f5:97:fa:8f:87:9f:47:2a:10:f4:2c:ba:c9:cb:1b:77: 24:ca:f2:8c:b2:65:0b:ce:f1:54:27:ca:05:3b:ed:96:da:5a: 95:40:1e:44:3d:e1:81:c3:38:89:15:57:9f:ed:21:f2:63:1c: e9:6a:df:93:8c:a6:e1:2f:d0:26:b6:b8:20:eb:52:fd:97:1a: 89:fe:03:af:e9:cc:f5:2f:77:e5:b9:d5:7c:12:67:90:00:52: 3e:83:37:23:db:4a:d0:82:d8:f4:59:82:3a:dc:0e:d0:26:75: 41:2a:b9:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5ozSqFFB8qdAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjJlZjgwNzEtOTJlNC00Y2I5LWE4ZTYtYTFiMjZmODFiMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfDdqNjroc5ORS1bvwPsLeuEs27OR3b8BKpF XU7R7ayENY/0rKDpKqLMfNmQs/pcAmYngWFo5bnWrNWYPctXX7M6g70kUepC1wLk 6nNjFbSq0OAZ4HiMJ4bGWlY6dYbztmd9fYR1mFolo/HQKs5a2DbiQBcFESZmdXMT lPGbnmu0zd63qm4Gb1zWvA6hvsqzmXlBpcDUkXbbpPn0zug71sobQc2jDihm4rnQ Y8IUPVgxL0UFdB6cnPGIvg9Q/dQx1GpLd64c3SGSsuMRiWUaZKX92SXWJTvpUXgL KLD/atzr5xCnAfLg/se3LViBVrH8I26aatF5pKyFEtYFdwqJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi/c/pTpHUMqV7IasUVS9T94db5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA5MjFhODgtMTA5Yi0z NmExLTlkZDEtOGJiNjZhN2UwYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCtHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzIfdycJhoz6CTo/ncdu3uIF8acbvsJpZSpGqG4A0HH7C3OR92R4FT8 c6RdL66Vmrj9SMsK2+ygDqXGYxd3hIVYVVizjB5bGYUMQowot6RYEq25EEN9A6Am zdHk2QqrDggKTJ2uwcPmh+2gmzXVHxL/HoTMdOsTeg4tTew0ZO8i/d3H5Ycg3Agz CZs3AxEdk3hc9Zf6j4efRyoQ9Cy6ycsbdyTK8oyyZQvO8VQnygU77ZbaWpVAHkQ9 4YHDOIkVV5/tIfJjHOlq35OMpuEv0Ca2uCDrUv2XGon+A6/pzPUvd+W51XwSZ5AA Uj6DNyPbStCC2PRZgjrcDtAmdUEqucE= -----END CERTIFICATE-----Generated at Sat Oct 24 19:08:13 2026 by rpki-client