$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a86e2a-74a3-317a-95e9-37db7e2fe446.roa File: 13a86e2a-74a3-317a-95e9-37db7e2fe446.roa (raw, json) Hash identifier: RqOXNtGKrj7HqQW9nbdb0dguHbscLJHI9Cxwv2W1b3g= Subject key identifier: CF:E3:B9:F8:46:47:BE:D0:C7:76:71:7E:05:F4:CD:BD:60:E6:C8:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3AD955BBA1FE2FCE745B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a86e2a-74a3-317a-95e9-37db7e2fe446.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 68.39.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:d9:55:bb:a1:fe:2f:ce:74:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=27cbb47e-8c7f-4b27-8c4b-8fe6eea60e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:9f:ca:c4:21:b1:2a:b4:46:2b:b2:50:90: 46:f0:5c:47:b6:5d:29:6e:7f:75:f7:bf:e3:31:ca: d4:9b:79:38:38:88:8c:ce:c3:ce:44:3c:4c:35:c5: 53:3c:2d:f2:f4:a8:87:78:da:5e:c7:52:42:86:2c: 55:14:2a:6f:61:36:db:a4:3c:b4:5d:d0:13:89:55: 1d:69:07:74:79:32:39:56:0d:09:c0:17:ab:48:22: a5:78:d0:da:21:c7:67:9a:5e:2f:a9:03:7c:04:b2: 53:44:ca:04:50:f0:9b:ff:6d:9d:fe:47:ac:ec:11: 7a:20:a5:c5:44:63:39:f6:e0:35:47:0a:48:f0:68: ed:72:9a:df:78:ef:df:73:58:31:c1:94:de:51:d2: 1d:2a:ca:f5:84:f7:cc:0f:b9:70:cd:e4:6d:56:ec: ee:e9:2c:a1:ee:40:c1:63:87:20:e2:93:60:43:00: a6:24:68:c6:ff:3f:2e:f9:9e:4b:c0:0e:89:59:18: 42:de:34:b4:3c:92:41:42:e8:35:d3:84:c3:47:0d: af:13:cc:a2:56:40:ef:55:f0:a1:e9:1a:e8:e6:54: cc:88:b6:46:ea:22:68:c7:a5:19:c7:84:7c:ef:10: 1f:75:a2:03:af:cf:1b:22:af:b5:50:73:72:df:43: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:B9:F8:46:47:BE:D0:C7:76:71:7E:05:F4:CD:BD:60:E6:C8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a86e2a-74a3-317a-95e9-37db7e2fe446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:aa:0f:63:5c:63:10:22:54:fa:26:7f:03:e9:ec:6d:98:f1: 7c:e6:35:db:bf:fc:1d:34:f1:15:7e:60:6b:22:df:ff:d7:48: c1:73:fa:29:c0:a0:57:18:30:63:4a:48:c7:8a:f2:39:70:9c: 6d:be:f5:ab:a8:c6:1e:ac:3c:a7:73:cd:a5:ba:08:52:36:41: 0a:5d:0e:0e:7e:07:f2:0d:e4:f7:aa:6e:b0:e3:ee:ae:d1:4d: 0e:13:79:3e:f1:bc:38:d0:de:ad:18:0b:b8:da:51:3c:50:83: 60:38:3d:e7:0d:61:9f:8c:f0:0d:2d:28:41:a8:fa:6d:f8:74: 0f:61:4d:c9:9e:a4:68:95:09:99:a3:e3:d0:1e:0e:12:c8:22: 42:48:74:29:80:24:27:89:60:ec:1d:e8:70:3f:74:8f:69:1b: e1:2d:9c:45:54:2e:66:b0:84:aa:c9:62:e9:d7:b1:3c:a1:05: 00:c0:72:e0:09:79:97:fa:57:17:04:02:4e:d5:2a:f2:84:6b: 1d:5d:8a:c8:a7:d3:ef:5f:ae:96:28:48:35:ef:8f:80:db:91: 5c:72:97:13:7c:71:f7:8b:0e:a7:ca:9e:bb:6d:65:32:85:3b: 13:ed:61:ca:4e:c2:b3:b4:6f:18:25:27:50:12:1f:41:42:f4: 0e:78:f4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOtlVu6H+L850W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjdjYmI0N2UtOGM3Zi00YjI3LThjNGItOGZlNmVlYTYwZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjGfysQhsSq0RiuyUJBG8FxHtl0pbn9197/j McrUm3k4OIiMzsPORDxMNcVTPC3y9KiHeNpex1JChixVFCpvYTbbpDy0XdATiVUd aQd0eTI5Vg0JwBerSCKleNDaIcdnml4vqQN8BLJTRMoEUPCb/22d/kes7BF6IKXF RGM59uA1RwpI8GjtcprfeO/fc1gxwZTeUdIdKsr1hPfMD7lwzeRtVuzu6Syh7kDB Y4cg4pNgQwCmJGjG/z8u+Z5LwA6JWRhC3jS0PJJBQug104TDRw2vE8yiVkDvVfCh 6Rro5lTMiLZG6iJox6UZx4R87xAfdaIDr88bIq+1UHNy30OPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/jufhGR77Qx3ZxfgX0zb1g5sg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNhODZlMmEtNzRhMy0z MTdhLTk1ZTktMzdkYjdlMmZlNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaqD2NcYxAiVPomfwPp7G2Y8XzmNdu//B008RV+YGsi3//XSMFz+inA oFcYMGNKSMeK8jlwnG2+9auoxh6sPKdzzaW6CFI2QQpdDg5+B/IN5PeqbrDj7q7R TQ4TeT7xvDjQ3q0YC7jaUTxQg2A4PecNYZ+M8A0tKEGo+m34dA9hTcmepGiVCZmj 49AeDhLIIkJIdCmAJCeJYOwd6HA/dI9pG+EtnEVULmawhKrJYunXsTyhBQDAcuAJ eZf6VxcEAk7VKvKEax1disin0+9frpYoSDXvj4DbkVxylxN8cfeLDqfKnrttZTKF OxPtYcpOwrO0bxglJ1ASH0FC9A549Ik= -----END CERTIFICATE-----Generated at Tue Jul 21 21:25:15 2026 by rpki-client