$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1288f931-5e41-318e-b672-e85e8e8c2535.roa File: 1288f931-5e41-318e-b672-e85e8e8c2535.roa (raw, json) Hash identifier: h4r4MFEI7WtJ/BHpVVZhMWEQxFMo6cRHIMXZQmWzDeo= Subject key identifier: 35:F2:AD:D5:AF:19:67:E6:4C:2E:67:03:C2:D5:D9:6D:67:05:6A:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DBDCB492CF0548F509F60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1288f931-5e41-318e-b672-e85e8e8c2535.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 68.60.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:bd:cb:49:2c:f0:54:8f:50:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4f69eba3-d73b-4d4e-a1be-58f45771ff14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:44:71:bc:fb:99:32:3d:8c:9a:94:6e:50: 1e:45:e8:12:99:73:d5:c0:d2:54:73:bf:09:0b:33: ff:73:12:c1:cb:a2:ea:23:8c:f2:27:82:24:71:28: da:4c:42:0d:07:a6:df:58:ac:4f:00:b5:dd:98:18: 21:17:c8:c2:54:ae:3d:e5:c7:86:77:66:54:d8:82: 8e:b9:58:2d:1f:2f:97:3a:a2:e3:40:38:0b:ee:ef: 2f:8e:56:1a:19:1b:82:10:b3:70:1a:74:eb:c7:b3: 25:8c:86:90:ab:c4:2a:5b:fd:42:32:b4:15:37:21: ce:b0:c5:2b:d3:2a:28:58:0a:4b:88:1b:b7:38:0b: 1d:e4:7f:a1:75:35:45:37:b5:11:d6:61:61:a5:a1: b8:79:2a:8f:57:6e:01:15:3d:61:2f:e2:a1:08:bb: 4e:68:45:fd:96:85:ed:9f:2c:61:a8:4c:8d:8a:83: 30:d9:bf:68:b7:7e:bf:0e:f4:2c:82:61:93:ba:e1: 4f:cf:2d:d7:61:c4:4d:88:2e:42:28:23:79:c8:fa: 27:53:0f:b4:6e:e2:36:1b:cb:bc:d2:2f:ee:d8:c1: fb:7a:5c:2c:94:ff:5c:8e:93:50:24:47:41:16:77: 6a:49:f4:e4:d9:cb:9c:97:73:86:b9:74:46:e5:29: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F2:AD:D5:AF:19:67:E6:4C:2E:67:03:C2:D5:D9:6D:67:05:6A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1288f931-5e41-318e-b672-e85e8e8c2535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:1c:78:fe:83:7a:da:77:de:ca:ea:6d:64:fe:58:48:76:57: aa:69:32:11:11:b5:72:cc:c2:d7:8b:84:40:fc:10:1f:52:e6: 6c:d4:85:af:ef:23:4d:f1:73:38:5b:d9:08:48:ac:b9:df:8f: 34:f9:13:55:ae:9c:c5:b6:e2:bb:d7:ca:ad:52:6b:bb:48:f5: 34:aa:e6:9b:2a:39:32:af:e1:50:72:8f:77:90:43:c8:99:ed: d1:ef:54:4f:a4:4d:33:95:6b:41:f8:84:b9:d5:82:71:f5:ae: 07:05:77:96:8b:78:aa:96:e7:b7:b2:a5:fa:d6:4a:fc:42:94: 3a:a1:fa:66:92:58:6e:bd:16:53:54:bb:e8:87:f3:35:27:c8: 60:c1:0e:54:a2:2e:ff:94:e8:09:bc:4d:ab:55:14:b1:d6:f9: ef:85:50:59:db:67:01:43:0d:9d:b1:b3:88:db:23:f2:f6:a3: a3:aa:8d:f5:5d:02:b6:ea:96:bf:26:c1:c7:ab:ca:9c:29:69: da:54:dd:b6:ac:29:fc:62:1b:c5:f2:1f:66:82:54:95:4a:bd: 3a:eb:b5:43:a0:fb:ba:ac:1c:56:29:ca:e1:53:a7:88:7e:f7: 98:c9:61:96:a8:78:70:be:8e:86:09:e7:97:a7:ee:61:ce:b0: 80:f7:57:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnb3LSSzwVI9Qn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGY2OWViYTMtZDczYi00ZDRlLWExYmUtNThmNDU3NzFmZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUVEcbz7mTI9jJqUblAeRegSmXPVwNJUc78J CzP/cxLBy6LqI4zyJ4IkcSjaTEINB6bfWKxPALXdmBghF8jCVK495ceGd2ZU2IKO uVgtHy+XOqLjQDgL7u8vjlYaGRuCELNwGnTrx7MljIaQq8QqW/1CMrQVNyHOsMUr 0yooWApLiBu3OAsd5H+hdTVFN7UR1mFhpaG4eSqPV24BFT1hL+KhCLtOaEX9loXt nyxhqEyNioMw2b9ot36/DvQsgmGTuuFPzy3XYcRNiC5CKCN5yPonUw+0buI2G8u8 0i/u2MH7elwslP9cjpNQJEdBFndqSfTk2cucl3OGuXRG5SlA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXyrdWvGWfmTC5nA8LV2W1nBWrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI4OGY5MzEtNWU0MS0z MThlLWI2NzItZTg1ZThlOGMyNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIceP6Detp33srqbWT+WEh2V6ppMhERtXLMwteLhED8EB9S5mzUha/v I03xczhb2QhIrLnfjzT5E1WunMW24rvXyq1Sa7tI9TSq5psqOTKv4VByj3eQQ8iZ 7dHvVE+kTTOVa0H4hLnVgnH1rgcFd5aLeKqW57eypfrWSvxClDqh+maSWG69FlNU u+iH8zUnyGDBDlSiLv+U6Am8TatVFLHW+e+FUFnbZwFDDZ2xs4jbI/L2o6OqjfVd Arbqlr8mwcerypwpadpU3basKfxiG8XyH2aCVJVKvTrrtUOg+7qsHFYpyuFTp4h+ 95jJYZaoeHC+joYJ55en7mHOsID3V6c= -----END CERTIFICATE-----Generated at Sat Sep 5 14:19:06 2026 by rpki-client