$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa File: 2987f609-3695-30e3-967b-cbda004aacc7.roa (raw, json) Hash identifier: lI8u94K+iFmMtFTqUvH0PjoRfxah/biArRZkBIG8eR4= Subject key identifier: C0:CF:C9:D9:ED:06:76:C1:D2:AD:88:6A:30:8F:64:0D:B3:7B:B6:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E669B500E53E6340DEE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.42.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:66:9b:50:0e:53:e6:34:0d:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d9bd5705-5663-4a1f-9973-da59c1a34358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:1f:8f:e4:9d:6e:6d:ba:b6:29:d0:5d:bb: 12:52:8a:31:98:ba:63:35:96:b6:c1:42:c8:87:cc: 86:e2:0e:03:23:ce:5b:f1:ee:dd:04:8a:df:5d:4d: ac:be:80:f2:57:c7:eb:6b:5a:bf:eb:e2:38:1a:b8: 87:b0:32:91:57:45:8a:1a:ba:a6:dc:d5:a5:05:2a: c8:a6:11:d4:b3:91:a9:9f:d7:59:e9:60:c9:68:5a: 87:29:e5:23:da:7f:d1:eb:42:50:00:48:74:a2:a0: 7b:3a:af:5e:f0:f2:af:32:38:7b:69:0b:b3:76:62: ca:98:95:3c:94:76:8a:30:12:53:31:62:49:67:8b: 88:4d:f7:67:7a:66:e1:e9:f0:1a:7a:05:62:2a:aa: 84:15:e7:bf:b3:e2:d6:dc:12:b3:c3:ac:5c:33:df: 96:30:93:2c:84:d1:13:19:a7:52:b3:50:79:b3:59: fc:e1:76:26:a3:83:e1:61:e3:cb:8c:03:3e:d7:68: ec:47:b4:ef:d0:49:69:30:04:0d:63:f2:fe:81:f2: df:18:84:70:41:8e:ff:a8:1b:07:69:ce:f3:c2:28: 4f:a6:35:46:4c:9f:cb:1a:48:bb:c6:6d:3e:11:bb: 4e:3c:9d:51:99:a7:2c:13:73:62:42:d5:a1:48:a3: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CF:C9:D9:ED:06:76:C1:D2:AD:88:6A:30:8F:64:0D:B3:7B:B6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2987f609-3695-30e3-967b-cbda004aacc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:69:33:a2:b5:47:15:57:5d:e2:4c:37:6a:ab:3b:22:d3:e3: 67:14:a4:f0:5b:66:a9:89:c8:87:08:87:fb:05:fb:4c:e0:f1: 16:97:73:b0:f4:a0:26:b8:7f:ca:61:f1:b3:4c:c2:c5:9b:6c: 00:e3:ba:4b:47:f0:3b:5a:4e:1b:03:33:89:c3:d7:46:18:88: 07:24:21:b2:3f:83:78:f8:f5:72:40:4e:c6:c0:25:47:e6:78: 4c:0e:ba:02:a1:24:8c:b8:5f:af:db:db:a6:a2:92:74:75:2a: bd:cf:c2:70:96:e5:02:16:e1:3b:31:fd:1c:89:98:37:4e:f0: 68:2b:36:e5:b7:11:65:02:ba:d4:d5:d3:26:6a:32:73:f3:3f: 9f:3d:40:53:b5:95:3d:94:a3:4b:c3:a0:f8:cd:93:cb:98:36: ca:e5:4a:0e:9e:8e:b4:4f:ab:a1:dd:c6:76:80:56:cd:6d:ab: 50:ee:b6:d8:6c:e2:60:50:5b:81:af:3a:49:ea:71:a6:b9:f5: 0e:49:af:5c:c7:b5:4d:a2:85:bc:f8:98:bb:64:b1:d1:18:19: 3e:a1:e7:84:fc:5c:f5:ec:e0:b5:17:1c:31:87:05:19:28:e9: 3c:59:ca:2e:fd:0f:34:82:ad:9a:9f:75:bc:fc:e7:4b:1b:96: 18:08:4d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmabUA5T5jQN7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDliZDU3MDUtNTY2My00YTFmLTk5NzMtZGE1OWMxYTM0MzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMEfj+Sdbm26tinQXbsSUooxmLpjNZa2wULI h8yG4g4DI85b8e7dBIrfXU2svoDyV8fra1q/6+I4GriHsDKRV0WKGrqm3NWlBSrI phHUs5Gpn9dZ6WDJaFqHKeUj2n/R60JQAEh0oqB7Oq9e8PKvMjh7aQuzdmLKmJU8 lHaKMBJTMWJJZ4uITfdnembh6fAaegViKqqEFee/s+LW3BKzw6xcM9+WMJMshNET GadSs1B5s1n84XYmo4PhYePLjAM+12jsR7Tv0ElpMAQNY/L+gfLfGIRwQY7/qBsH ac7zwihPpjVGTJ/LGki7xm0+EbtOPJ1RmacsE3NiQtWhSKNQ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDPydntBnbB0q2IajCPZA2ze7YjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk4N2Y2MDktMzY5NS0z MGUzLTk2N2ItY2JkYTAwNGFhY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZpM6K1RxVXXeJMN2qrOyLT42cUpPBbZqmJyIcIh/sF+0zg8RaXc7D0 oCa4f8ph8bNMwsWbbADjuktH8DtaThsDM4nD10YYiAckIbI/g3j49XJATsbAJUfm eEwOugKhJIy4X6/b26aiknR1Kr3PwnCW5QIW4Tsx/RyJmDdO8GgrNuW3EWUCutTV 0yZqMnPzP589QFO1lT2Uo0vDoPjNk8uYNsrlSg6ejrRPq6HdxnaAVs1tq1Dutths 4mBQW4GvOknqcaa59Q5Jr1zHtU2ihbz4mLtksdEYGT6h54T8XPXs4LUXHDGHBRko 6TxZyi79DzSCrZqfdbz850sblhgITbw= -----END CERTIFICATE-----Generated at Sun Oct 25 19:57:32 2026 by rpki-client