$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20fd5b77-bfb4-323e-9962-20d3506a2197.roa File: 20fd5b77-bfb4-323e-9962-20d3506a2197.roa (raw, json) Hash identifier: GfvLSAg6wK0Fy25Lfm5x8V2AMDHMdCPHDV7E5YI2oZ4= Subject key identifier: 7A:7C:19:4B:48:DA:B8:97:C3:0C:0A:B5:91:70:DA:AC:4D:B3:55:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F98951FF65105AD00E400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20fd5b77-bfb4-323e-9962-20d3506a2197.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.42.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:98:95:1f:f6:51:05:ad:00:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=7c02b830-38a9-451a-82d1-0e1afb91aedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:b1:a5:8d:c7:54:1d:1b:32:61:45:40:8a: 66:16:97:70:f4:35:6b:1d:1d:04:b5:0e:c6:dd:8d: c6:e2:3c:5a:31:31:cb:db:46:ce:78:07:38:dc:f0: 8a:51:39:40:f2:6e:9b:3e:de:62:42:de:65:17:71: 78:a9:b0:bb:f7:38:70:cb:39:6f:f1:c9:b4:a0:4f: 3a:7c:4e:05:09:db:91:de:ca:b2:f6:ae:6a:1e:5c: e7:7f:e8:04:3d:62:41:48:d1:b9:92:2d:28:67:cc: d4:41:7e:ec:ab:eb:b4:8a:1d:93:47:f0:5f:51:d9: 7c:63:2d:b9:6d:5e:79:ad:82:88:44:fa:40:aa:3a: 87:7e:f9:aa:58:46:74:0a:04:aa:32:7d:9e:54:30: 15:f4:68:b0:89:9b:d5:73:94:e7:53:92:0a:16:3a: 6a:fd:d4:bb:40:aa:44:ef:08:e1:a3:21:f5:e8:b0: 63:55:a3:33:53:0e:0c:e5:57:63:41:46:92:72:1a: 27:74:88:a0:57:7c:11:03:eb:87:ca:73:c3:e1:af: 71:5d:59:69:34:aa:14:bf:15:d1:81:49:b4:24:48: ed:de:d9:4a:f1:ba:59:cf:34:2d:d6:67:b0:14:59: 3c:02:4c:a6:fa:d7:29:34:15:65:33:07:68:72:8d: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:19:4B:48:DA:B8:97:C3:0C:0A:B5:91:70:DA:AC:4D:B3:55:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20fd5b77-bfb4-323e-9962-20d3506a2197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:49:91:b1:26:c4:3d:31:62:d5:dd:97:83:5e:3b:f9:c1:ac: 28:94:16:87:0d:31:bb:a2:f0:11:5e:ce:89:c0:41:f9:db:84: e3:5b:c4:18:68:3e:ba:9b:45:c4:0b:8b:7a:51:3e:02:26:57: 74:89:94:dc:df:4c:54:a5:ca:d8:20:7f:d5:00:24:c7:4d:56: a0:86:a2:1f:8e:fc:76:41:01:a9:69:f3:a0:38:b0:3d:a4:29: 4b:16:d3:87:b6:6f:d5:01:69:dd:8b:b9:93:f9:a5:72:34:1c: b5:d5:9c:ec:0d:8b:bd:41:4a:af:8e:de:eb:45:aa:be:d8:a2: 21:f5:fa:37:7a:b4:dc:08:65:83:8e:ab:46:bb:92:7a:3b:ac: 97:bc:4f:7b:8b:a5:cb:cb:43:46:16:48:43:7d:7b:b7:ab:00: 43:2d:32:26:ab:32:0e:8e:6c:63:77:65:4b:df:40:f8:3a:3a: f7:8c:2c:db:0d:a8:79:63:34:a8:d1:7b:c4:0d:da:cd:dc:1e: 83:da:e6:a7:81:93:5e:ce:44:b5:15:36:e7:f1:a7:ca:e9:42: de:7e:6e:c9:c5:12:39:41:25:d8:38:1f:d2:fe:ee:8c:83:d9: 37:a6:79:36:f7:29:4e:b7:ae:99:10:e4:07:72:a7:75:a4:ba: b8:e6:7d:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5iVH/ZRBa0A5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2MwMmI4MzAtMzhhOS00NTFhLTgyZDEtMGUxYWZiOTFhZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluuxpY3HVB0bMmFFQIpmFpdw9DVrHR0EtQ7G 3Y3G4jxaMTHL20bOeAc43PCKUTlA8m6bPt5iQt5lF3F4qbC79zhwyzlv8cm0oE86 fE4FCduR3sqy9q5qHlznf+gEPWJBSNG5ki0oZ8zUQX7sq+u0ih2TR/BfUdl8Yy25 bV55rYKIRPpAqjqHfvmqWEZ0CgSqMn2eVDAV9GiwiZvVc5TnU5IKFjpq/dS7QKpE 7wjhoyH16LBjVaMzUw4M5VdjQUaSchondIigV3wRA+uHynPD4a9xXVlpNKoUvxXR gUm0JEjt3tlK8bpZzzQt1mewFFk8Akym+tcpNBVlMwdoco1RlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp8GUtI2riXwwwKtZFw2qxNs1UZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBmZDViNzctYmZiNC0z MjNlLTk5NjItMjBkMzUwNmEyMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCpiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABJkbEmxD0xYtXdl4NeO/nBrCiUFocNMbui8BFezonAQfnbhONbxBho PrqbRcQLi3pRPgImV3SJlNzfTFSlytggf9UAJMdNVqCGoh+O/HZBAalp86A4sD2k KUsW04e2b9UBad2LuZP5pXI0HLXVnOwNi71BSq+O3utFqr7YoiH1+jd6tNwIZYOO q0a7kno7rJe8T3uLpcvLQ0YWSEN9e7erAEMtMiarMg6ObGN3ZUvfQPg6OveMLNsN qHljNKjRe8QN2s3cHoPa5qeBk17ORLUVNufxp8rpQt5+bsnFEjlBJdg4H9L+7oyD 2TemeTb3KU63rpkQ5Adyp3WkurjmfR0= -----END CERTIFICATE-----Generated at Thu Oct 22 18:26:48 2026 by rpki-client