$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152fd067-f130-308b-991f-59e4fef8c6a2.roa File: 152fd067-f130-308b-991f-59e4fef8c6a2.roa (raw, json) Hash identifier: oXg5vCeR5+9pQZro/G8wWjD0bU5ydC0hdXu3u7KAOLU= Subject key identifier: C2:EC:CE:67:97:C0:0B:E5:D4:76:D9:F3:31:FB:4C:2A:7A:BF:50:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F9214DA8346B02FCAAAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152fd067-f130-308b-991f-59e4fef8c6a2.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.37.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:92:14:da:83:46:b0:2f:ca:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b8e6e182-acd9-44cb-98b6-21952b5740fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:f0:eb:c0:f8:76:ad:31:ce:a6:76:db:c7: da:e9:8c:85:9a:85:6b:f3:29:15:6a:1e:9f:4e:2a: 20:e2:53:a1:21:c8:92:f3:aa:e4:11:54:12:84:47: 92:68:3d:8a:32:25:7f:0e:cc:b9:7d:bd:65:04:82: f2:fe:68:4e:b9:1b:48:aa:9d:ec:d1:53:d6:8b:ae: ea:1b:92:57:7a:69:9b:aa:5e:3f:28:9d:a2:cf:f2: a3:9d:e9:92:f1:fc:44:ff:af:ab:40:7e:37:b7:85: 60:a8:ca:2b:56:db:ff:98:e8:71:d2:c7:b2:ab:4b: 21:6d:fc:df:8b:db:b2:03:d4:a3:25:26:1c:f2:90: 25:2b:90:6d:da:1b:3c:91:91:76:d5:dd:fe:76:74: b0:f1:97:f0:e7:49:8d:e9:b4:18:af:71:90:ee:34: 67:4c:7a:25:f5:c3:5e:28:39:ac:97:c1:2d:b9:a9: 9a:b6:e7:09:a6:6b:7a:f9:25:5f:66:c3:24:c4:e7: 41:56:df:58:06:08:8a:47:3f:f4:64:36:e2:66:55: 1e:8f:b8:b4:43:8b:07:80:be:d4:9f:2a:5a:62:07: d5:42:cb:5d:ed:72:37:0b:21:50:fe:23:57:a2:6d: 12:2b:b9:e6:92:e2:75:13:8c:3c:66:9d:72:f2:80: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:CE:67:97:C0:0B:E5:D4:76:D9:F3:31:FB:4C:2A:7A:BF:50:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152fd067-f130-308b-991f-59e4fef8c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f2:e5:bd:8c:22:1e:4a:20:48:dd:08:39:55:94:f0:74:d6: 43:ad:b7:b4:83:9b:99:80:6a:a1:ad:b4:7f:1a:5c:58:47:ca: f9:90:16:a6:89:86:54:12:4b:f7:9d:ec:23:94:61:79:02:82: 2f:c4:65:25:c6:e0:3f:69:fe:6b:d8:de:85:24:0a:85:47:1a: 1f:40:4c:76:ad:fe:4b:31:82:fe:5c:cb:d2:70:ac:7e:41:f9: d3:1e:ce:74:bd:d3:36:46:4a:1b:18:fb:05:58:bc:68:e4:a6: d4:e2:44:91:af:7e:97:62:c1:25:6f:71:45:a5:34:84:8a:3c: 5e:08:95:dc:fe:08:5e:c9:ed:30:60:5e:96:a7:8f:46:6b:9e: 51:68:67:67:ee:63:4d:02:95:f6:c5:60:25:b2:c7:5c:2b:ee: e5:0f:7b:d6:67:97:d8:af:32:68:69:dc:76:1f:e9:46:e8:39: 8a:57:4d:63:59:42:dd:71:d7:fc:5f:2e:6f:a7:00:18:38:d8: e4:97:45:a8:ec:cd:3f:c2:94:05:26:39:64:31:af:52:ed:3c: 15:d5:0f:bc:9c:57:8e:5d:6a:5d:9b:32:50:6c:6b:c7:68:54: c5:9e:73:1f:31:60:75:64:ff:df:70:a9:cc:93:3b:57:a4:bc: ba:cc:a4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5IU2oNGsC/KqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjhlNmUxODItYWNkOS00NGNiLTk4YjYtMjE5NTJiNTc0MGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPHw68D4dq0xzqZ228fa6YyFmoVr8ykVah6f Tiog4lOhIciS86rkEVQShEeSaD2KMiV/Dsy5fb1lBILy/mhOuRtIqp3s0VPWi67q G5JXemmbql4/KJ2iz/KjnemS8fxE/6+rQH43t4VgqMorVtv/mOhx0seyq0shbfzf i9uyA9SjJSYc8pAlK5Bt2hs8kZF21d3+dnSw8Zfw50mN6bQYr3GQ7jRnTHol9cNe KDmsl8EtuamatucJpmt6+SVfZsMkxOdBVt9YBgiKRz/0ZDbiZlUej7i0Q4sHgL7U nypaYgfVQstd7XI3CyFQ/iNXom0SK7nmkuJ1E4w8Zp1y8oCNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLszmeXwAvl1HbZ8zH7TCp6v1AjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTUyZmQwNjctZjEzMC0z MDhiLTk5MWYtNTllNGZlZjhjNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTy5b2MIh5KIEjdCDlVlPB01kOtt7SDm5mAaqGttH8aXFhHyvmQFqaJ hlQSS/ed7COUYXkCgi/EZSXG4D9p/mvY3oUkCoVHGh9ATHat/ksxgv5cy9JwrH5B +dMeznS90zZGShsY+wVYvGjkptTiRJGvfpdiwSVvcUWlNISKPF4Ildz+CF7J7TBg Xpanj0ZrnlFoZ2fuY00ClfbFYCWyx1wr7uUPe9Znl9ivMmhp3HYf6UboOYpXTWNZ Qt1x1/xfLm+nABg42OSXRajszT/ClAUmOWQxr1LtPBXVD7ycV45dal2bMlBsa8do VMWecx8xYHVk/99wqcyTO1ekvLrMpCs= -----END CERTIFICATE-----Generated at Tue Oct 27 01:53:27 2026 by rpki-client