$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa File: 2422d923-49e5-33e4-9aed-5bf5006dde0a.roa (raw, json) Hash identifier: wW1A5MXNzJQKE9HnpVnmJ/OR6pUpN7FY8pswslG2lxY= Subject key identifier: 8F:D0:D1:96:2E:7E:5C:75:52:25:3A:47:07:95:F7:E2:7D:6D:D5:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863EA99FFA976AC443E28D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:ea:99:ff:a9:76:ac:44:3e:28:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=dd254e40-e32b-4cfa-bdf8-7a77c7125362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:a8:86:47:aa:a4:d1:38:90:49:d2:30:02: d8:9f:e1:3c:2c:54:9f:b3:c5:51:4d:9d:29:28:35: bf:29:7b:6f:ad:6c:10:27:bf:09:e7:0e:ed:d3:16: 2f:59:0d:1d:89:f1:66:63:f1:80:b0:cc:5b:c0:ef: d5:62:5e:1d:6a:f4:5c:86:50:26:4d:43:9c:ae:8f: 05:83:12:97:a9:63:e0:91:39:1b:68:2d:53:61:25: d1:57:7d:c8:2c:c3:75:e0:99:3e:c2:8a:a7:27:cc: 35:cd:98:25:03:da:03:d6:bc:b8:66:df:8f:42:be: 3d:33:21:fc:ab:20:d5:56:4b:8b:6a:7c:6d:e9:53: 58:4c:4e:88:99:02:34:ad:0c:fd:55:e4:dc:0c:ac: fa:db:0f:fe:5a:03:86:1e:04:a1:f2:3a:a9:2d:ff: 0b:11:10:b3:f4:df:7b:b9:49:87:04:cd:7e:66:31: f7:cd:f2:34:3b:42:7d:13:60:5f:02:02:90:76:87: 08:c8:53:d0:17:25:33:eb:f2:da:dd:37:24:8f:df: 1d:77:52:63:a5:7a:97:cd:74:29:69:ae:83:fc:6c: 03:97:d1:af:02:ee:29:f9:09:05:c0:68:4e:23:43: f1:ff:35:b6:87:37:8a:3d:1a:f6:80:05:b3:6f:c4: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D0:D1:96:2E:7E:5C:75:52:25:3A:47:07:95:F7:E2:7D:6D:D5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2422d923-49e5-33e4-9aed-5bf5006dde0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:40:96:95:a2:71:50:0e:8a:ff:20:ff:ea:ad:20:3b:81:dd: 43:6d:41:5a:db:20:22:04:75:f0:82:95:cd:6c:5e:5a:3c:4f: 88:ec:3e:41:66:74:6b:fe:dd:c0:71:1d:46:f4:29:44:3f:07: 0a:02:90:98:a7:32:66:38:9e:0d:90:03:0b:da:d6:5d:57:8c: 5e:51:97:29:29:1d:78:0b:cd:2a:3d:a7:45:6c:c0:0f:8b:38: 91:5d:be:4a:b8:14:f1:e0:cb:13:47:e5:ad:f9:e7:05:11:46: 0a:9e:70:21:d0:33:a0:95:66:e4:bb:40:0d:48:f8:b4:d7:e0: d9:ea:eb:07:56:dc:5c:dc:40:8a:4f:6d:c3:56:1c:9a:83:c4: 26:eb:a7:37:99:55:f6:bb:53:d2:e6:bb:7d:24:1e:9c:3a:5d: b7:f8:01:fa:5f:31:e6:27:0a:3f:d8:d4:b4:54:66:bd:50:0f: 09:e0:1a:45:60:2f:a3:b6:e3:b0:1d:92:10:65:56:df:c2:4a: f8:81:50:16:8d:fd:24:2e:67:77:8c:24:a0:d5:70:52:0d:53: e1:8f:33:26:b8:58:64:85:3a:11:84:52:5c:2d:6e:30:6a:11: 73:44:ab:e8:6d:36:1d:56:87:45:00:70:34:09:d6:63:9d:00: a1:bb:bc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+qZ/6l2rEQ+KNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZGQyNTRlNDAtZTMyYi00Y2ZhLWJkZjgtN2E3N2M3MTI1MzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkiohkeqpNE4kEnSMALYn+E8LFSfs8VRTZ0p KDW/KXtvrWwQJ78J5w7t0xYvWQ0difFmY/GAsMxbwO/VYl4davRchlAmTUOcro8F gxKXqWPgkTkbaC1TYSXRV33ILMN14Jk+woqnJ8w1zZglA9oD1ry4Zt+PQr49MyH8 qyDVVkuLanxt6VNYTE6ImQI0rQz9VeTcDKz62w/+WgOGHgSh8jqpLf8LERCz9N97 uUmHBM1+ZjH3zfI0O0J9E2BfAgKQdocIyFPQFyUz6/La3Tckj98dd1JjpXqXzXQp aa6D/GwDl9GvAu4p+QkFwGhOI0Px/zW2hzeKPRr2gAWzb8TA/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Q0ZYuflx1UiU6RweV9+J9bdWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyMmQ5MjMtNDllNS0z M2U0LTlhZWQtNWJmNTAwNmRkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1AlpWicVAOiv8g/+qtIDuB3UNtQVrbICIEdfCClc1sXlo8T4jsPkFm dGv+3cBxHUb0KUQ/BwoCkJinMmY4ng2QAwva1l1XjF5RlykpHXgLzSo9p0VswA+L OJFdvkq4FPHgyxNH5a355wURRgqecCHQM6CVZuS7QA1I+LTX4Nnq6wdW3FzcQIpP bcNWHJqDxCbrpzeZVfa7U9Lmu30kHpw6Xbf4AfpfMeYnCj/Y1LRUZr1QDwngGkVg L6O247AdkhBlVt/CSviBUBaN/SQuZ3eMJKDVcFINU+GPMya4WGSFOhGEUlwtbjBq EXNEq+htNh1Wh0UAcDQJ1mOdAKG7vCU= -----END CERTIFICATE-----Generated at Tue Sep 1 05:42:25 2026 by rpki-client