$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16485baf-369a-36b8-b705-6776c2d33c25.roa File: 16485baf-369a-36b8-b705-6776c2d33c25.roa (raw, json) Hash identifier: 6PND/Vvm0av/OZIJDD5MeyuH8Y8mSZOSyAzNWpfTRqE= Subject key identifier: 72:4C:B8:22:46:62:82:E3:84:4A:A6:E1:19:55:00:29:81:CD:14:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E6DAE711DDCAF38802780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16485baf-369a-36b8-b705-6776c2d33c25.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.49.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:6d:ae:71:1d:dc:af:38:80:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=f66d3b64-ab7c-482c-92a0-cdfa3890ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:d8:b9:f8:b7:dc:0b:14:ea:cd:76:d2:cf: b7:59:e4:ef:a1:c4:ce:ba:b3:16:21:8e:b3:1a:6e: b1:02:c5:b9:fe:90:13:5c:65:b2:5e:be:42:58:e8: 1f:ae:a4:ee:69:02:d7:40:86:7f:e5:97:51:6c:4d: 22:81:00:dc:5e:c6:a3:9d:34:80:0e:05:42:9d:f2: 54:af:f7:8d:d3:2e:2d:17:9e:2d:e9:8b:5a:d6:fb: 80:37:6c:47:30:b5:45:65:9f:21:22:c0:47:5b:54: d3:70:ad:d5:e9:92:f3:85:6e:cd:b7:52:41:91:24: 72:f1:7c:94:2a:12:6e:c9:96:e4:cf:fb:57:bc:02: 9e:e2:06:75:b1:99:0e:ba:2d:d1:b4:ca:57:c7:6f: c1:7f:af:56:4f:f4:fa:ef:9a:26:6d:80:52:4f:3a: e4:d9:1d:a7:4b:01:39:c6:06:a7:7f:2a:a3:61:d7: 8e:d5:24:56:6a:6c:d4:05:a8:c6:ba:b6:bc:6d:db: 7e:bb:20:16:d6:0e:d4:3e:67:67:c2:41:bf:54:73: 2d:43:38:7e:3c:ad:7b:86:a4:46:28:cf:d2:f5:03: 7a:e9:aa:cb:d3:c0:f9:25:9a:89:02:0b:35:30:7d: 13:dc:28:f3:c8:cf:0b:4a:50:b8:13:db:32:aa:1c: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4C:B8:22:46:62:82:E3:84:4A:A6:E1:19:55:00:29:81:CD:14:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16485baf-369a-36b8-b705-6776c2d33c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9c:e6:59:dd:49:75:1f:c3:02:0b:e7:f5:c5:fb:de:f8:a5: 9e:9d:8a:f0:bd:e4:41:fa:8f:45:d1:3e:13:e9:b9:08:4c:5c: 76:3c:af:55:90:9f:92:37:5a:b5:3f:72:37:44:3a:bb:29:57: a1:a7:34:53:ce:5e:3d:a0:7c:0b:70:89:7c:51:97:61:39:b4: c9:bb:87:99:a0:cc:93:dc:3c:21:f0:99:e0:61:0b:2f:fc:55: 0a:45:58:4f:c0:74:81:d7:71:fe:3b:cc:c5:6d:19:27:ec:0a: be:c2:a9:1d:3d:f2:a3:22:e2:20:bc:a9:1e:af:21:e4:ef:c8: 8e:e7:fc:4b:45:22:6d:b6:22:e4:00:8f:9c:22:e1:5d:54:fc: cc:78:ae:a2:22:75:0b:66:a1:81:e1:1b:6d:a4:78:65:29:4d: 49:18:96:e7:ef:05:4c:d1:e0:5a:09:a4:cb:e5:e0:93:5d:b0: 74:33:47:f3:3d:09:81:67:dc:11:2b:75:13:d2:0c:7b:bb:ab: ce:b2:35:fc:2a:b8:93:01:3e:2b:41:d2:a4:69:63:52:c6:e3: 8a:bd:c3:d4:95:dc:95:a6:2a:50:64:66:f7:fd:b7:e8:32:78: e0:81:9e:6a:24:39:52:f5:3c:ca:a2:94:41:29:c6:bf:88:3d: ed:83:52:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tm2ucR3crziAJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjY2ZDNiNjQtYWI3Yy00ODJjLTkyYTAtY2RmYTM4OTBlZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5TYufi33AsU6s120s+3WeTvocTOurMWIY6z Gm6xAsW5/pATXGWyXr5CWOgfrqTuaQLXQIZ/5ZdRbE0igQDcXsajnTSADgVCnfJU r/eN0y4tF54t6Yta1vuAN2xHMLVFZZ8hIsBHW1TTcK3V6ZLzhW7Nt1JBkSRy8XyU KhJuyZbkz/tXvAKe4gZ1sZkOui3RtMpXx2/Bf69WT/T675ombYBSTzrk2R2nSwE5 xganfyqjYdeO1SRWamzUBajGura8bdt+uyAW1g7UPmdnwkG/VHMtQzh+PK17hqRG KM/S9QN66arL08D5JZqJAgs1MH0T3CjzyM8LSlC4E9syqhw+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJMuCJGYoLjhEqm4RlVACmBzRR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY0ODViYWYtMzY5YS0z NmI4LWI3MDUtNjc3NmMyZDMzYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKc5lndSXUfwwIL5/XF+974pZ6divC95EH6j0XRPhPpuQhMXHY8r1WQ n5I3WrU/cjdEOrspV6GnNFPOXj2gfAtwiXxRl2E5tMm7h5mgzJPcPCHwmeBhCy/8 VQpFWE/AdIHXcf47zMVtGSfsCr7CqR098qMi4iC8qR6vIeTvyI7n/EtFIm22IuQA j5wi4V1U/Mx4rqIidQtmoYHhG22keGUpTUkYlufvBUzR4FoJpMvl4JNdsHQzR/M9 CYFn3BErdRPSDHu7q86yNfwquJMBPitB0qRpY1LG44q9w9SV3JWmKlBkZvf9t+gy eOCBnmokOVL1PMqilEEpxr+IPe2DUlQ= -----END CERTIFICATE-----Generated at Tue Oct 27 15:50:12 2026 by rpki-client