$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa File: 1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa (raw, json) Hash identifier: LMKcDZfAGLgkskvilvpfYI+CTNGZ6j1urhKw6/bIJa8= Subject key identifier: E2:55:34:7F:0B:11:69:A8:5E:5F:A9:55:38:8A:3F:F3:E5:73:FB:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E739779AF719E92D07E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.58.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:73:97:79:af:71:9e:92:d0:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=16a0e537-5113-40ee-992e-9fa69073f9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:8d:5e:94:56:54:ed:be:33:50:9a:a3:08: 7b:a7:48:d1:c1:36:d8:87:24:11:2f:a7:4f:51:90: 12:ab:84:64:6e:dd:9e:f3:2f:cd:64:7a:7c:ca:ee: a7:c2:ef:a2:cf:70:ab:af:87:73:da:1f:69:b6:b9: 86:6f:ac:4e:14:a4:23:d2:64:6a:c8:83:b6:15:a8: 27:38:b3:09:1d:e9:6b:91:1a:78:b1:8e:c9:2b:f5: 1c:82:ef:a4:25:b4:65:b1:42:80:28:95:fd:18:03: a7:10:4f:5d:de:80:d4:a1:e3:97:cb:54:73:da:c3: 02:82:c2:0b:e4:8c:38:16:14:75:b8:81:8d:67:00: bd:26:2e:98:7b:20:a3:66:bf:a8:1d:3b:88:d9:42: fa:aa:cd:c7:6d:a9:4a:25:72:a9:72:ad:67:04:8f: 35:fb:d8:83:4d:1b:fb:e9:7e:3e:37:bb:54:e5:0e: 45:0b:3d:29:f2:70:75:de:94:63:10:d0:d4:7b:e6: 8b:b9:c4:c3:18:dd:95:cc:43:04:a4:93:48:78:63: 06:14:a5:b9:e4:8c:e5:b9:32:c2:2a:34:0e:f7:d8: 6e:4e:66:9f:41:ee:9c:28:b4:9d:4d:dd:fb:70:32: d9:6a:fe:2a:8a:ba:0d:34:87:2f:79:13:22:ee:dd: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:55:34:7F:0B:11:69:A8:5E:5F:A9:55:38:8A:3F:F3:E5:73:FB:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b657b35-313f-39c0-9ee2-1cdf5082e3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f5:0f:1a:c9:da:0d:b6:f6:f9:35:7d:5f:af:3a:5f:ec:40: 86:38:b5:3d:5e:0d:cd:c8:31:74:d7:ff:78:f4:c5:43:17:da: cb:ff:a7:8a:64:21:96:42:e4:cc:98:a3:ed:27:0a:18:a5:b3: 60:c8:aa:6a:18:95:60:e3:e4:ed:1c:62:7e:88:80:fd:16:6e: c9:e4:ba:fe:6a:c1:20:ad:80:7f:e3:09:3f:71:d9:15:bb:f4: 31:66:94:f1:ba:b3:a5:ef:63:2f:1d:60:f4:f2:9f:8e:fa:c6: f6:9f:cc:03:98:77:2b:ee:0b:15:46:0c:a7:60:8b:50:23:4d: 99:06:9f:ae:58:39:31:20:db:0c:f6:28:89:4d:e0:78:73:e2: 8a:b2:18:e5:c6:29:f0:3d:c1:df:81:5a:f9:6f:87:86:3c:2c: eb:dc:86:14:bb:bf:de:35:2a:e7:7c:77:9c:00:46:0c:e8:c3: 75:74:6d:1b:84:35:82:28:83:b0:f0:c3:73:eb:e7:b6:58:f8: 0d:e1:a8:6d:4b:c9:d6:2c:45:01:ac:30:4c:f6:cf:09:4b:de: af:0a:c4:52:09:83:6b:19:b4:9c:c6:70:fb:79:ab:40:8b:ba: 3a:31:6e:91:82:b0:7f:52:d5:41:7f:52:d7:1f:44:bb:c8:b1: 89:8d:dd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TnOXea9xnpLQfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTZhMGU1MzctNTExMy00MGVlLTk5MmUtOWZhNjkwNzNmOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+qNXpRWVO2+M1Caowh7p0jRwTbYhyQRL6dP UZASq4Rkbt2e8y/NZHp8yu6nwu+iz3Crr4dz2h9ptrmGb6xOFKQj0mRqyIO2Fagn OLMJHelrkRp4sY7JK/Ucgu+kJbRlsUKAKJX9GAOnEE9d3oDUoeOXy1Rz2sMCgsIL 5Iw4FhR1uIGNZwC9Ji6YeyCjZr+oHTuI2UL6qs3HbalKJXKpcq1nBI81+9iDTRv7 6X4+N7tU5Q5FCz0p8nB13pRjENDUe+aLucTDGN2VzEMEpJNIeGMGFKW55IzluTLC KjQO99huTmafQe6cKLSdTd37cDLZav4qiroNNIcveRMi7t36UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJVNH8LEWmoXl+pVTiKP/Plc/tfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI2NTdiMzUtMzEzZi0z OWMwLTllZTItMWNkZjUwODJlM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH1DxrJ2g229vk1fV+vOl/sQIY4tT1eDc3IMXTX/3j0xUMX2sv/p4pk IZZC5MyYo+0nChils2DIqmoYlWDj5O0cYn6IgP0Wbsnkuv5qwSCtgH/jCT9x2RW7 9DFmlPG6s6XvYy8dYPTyn476xvafzAOYdyvuCxVGDKdgi1AjTZkGn65YOTEg2wz2 KIlN4Hhz4oqyGOXGKfA9wd+BWvlvh4Y8LOvchhS7v941Kud8d5wARgzow3V0bRuE NYIog7Dww3Pr57ZY+A3hqG1LydYsRQGsMEz2zwlL3q8KxFIJg2sZtJzGcPt5q0CL ujoxbpGCsH9S1UF/UtcfRLvIsYmN3fQ= -----END CERTIFICATE-----Generated at Tue Oct 20 18:43:15 2026 by rpki-client