$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32e7ea8f-ca61-3dce-93b5-110b0259f527.roa File: 32e7ea8f-ca61-3dce-93b5-110b0259f527.roa (raw, json) Hash identifier: J+UC96/jqJA65/bD5YDljNGmi0Q9ZB/RXqFGRObBp4E= Subject key identifier: 21:87:12:85:75:FA:03:CB:63:CD:84:7D:47:22:C3:7C:E0:CA:6D:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C5B4C967035FF810B000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32e7ea8f-ca61-3dce-93b5-110b0259f527.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.84.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c5:b4:c9:67:03:5f:f8:10:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4b94f07e-fa7f-4924-9a1c-c68d7b0fd97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:6e:30:5e:3c:e5:73:c7:e7:8b:ef:81:ec: 2a:56:d9:89:29:62:93:13:ef:30:d4:f1:69:a5:b3: 1f:b9:b8:57:18:02:ad:be:d1:e5:8f:f7:3a:d1:78: 21:78:cb:72:87:13:49:d6:5c:e3:31:fb:7c:03:56: 3a:b5:f8:06:e8:3d:21:9c:09:26:1f:65:e7:bf:99: 26:06:f1:f3:43:58:f1:98:07:48:12:09:0f:c2:ef: b8:95:09:8e:95:7b:e6:55:73:09:7b:2e:f7:03:ac: f7:1f:f1:15:4f:81:8b:5b:99:ce:ad:fe:d9:cd:a3: 6b:3a:f7:e6:24:c3:76:ba:d2:b8:15:4f:9b:3a:f2: 87:a0:11:f5:84:ca:bd:82:3c:14:2d:64:fe:3c:d5: f6:d7:4b:38:f7:d5:c9:05:de:a4:87:d9:c3:ce:ec: d0:7c:13:2d:45:c8:15:c9:e7:fb:92:55:e9:b4:13: 0b:38:8e:a0:1a:16:4f:ba:7c:19:2f:bd:eb:c4:83: 44:da:3c:e3:f1:05:0d:88:14:ed:43:dc:ab:32:75: 3c:78:0f:98:5f:f8:ee:ca:48:dc:94:8a:52:d4:da: 1b:cf:d2:53:eb:3d:06:8f:1a:e1:81:e0:f0:f3:4c: cd:36:71:b0:73:fe:55:01:a4:77:77:95:e5:2a:f4: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:12:85:75:FA:03:CB:63:CD:84:7D:47:22:C3:7C:E0:CA:6D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32e7ea8f-ca61-3dce-93b5-110b0259f527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1e:7c:0a:6b:4f:dd:ee:85:2d:34:51:6a:b7:fb:29:f6:21: e1:d7:e9:b5:35:7f:59:46:4c:0a:ec:d9:49:4c:74:52:53:f8: 4f:29:f5:8d:0a:b0:8b:0d:7e:45:2f:ae:63:f1:ca:87:de:e9: 3f:84:5a:15:ee:a9:94:48:18:28:1a:86:b4:ae:e6:48:9a:48: 48:4e:45:86:f5:20:51:fd:3c:e1:45:31:46:c1:45:d5:16:9e: 39:00:56:f2:81:72:26:18:1f:00:92:e7:85:96:3c:e4:39:02: 0e:8d:18:1e:56:14:27:fe:1a:71:5e:ba:7d:ea:18:60:05:41: 21:17:07:e3:42:76:6e:eb:b7:cf:62:ed:86:d4:08:51:55:49: 88:79:33:ce:ba:f9:14:5c:ed:eb:ab:97:ad:af:65:1a:4b:a6: 0f:1c:bf:d1:4b:b8:c0:72:52:15:6e:ae:d7:23:9d:20:83:50: a4:3f:4c:08:0e:76:07:e8:c4:48:27:22:df:20:7b:d1:2a:9b: d9:69:3d:89:92:ad:a6:47:73:8a:d2:fc:f0:f6:d0:46:a1:27: c6:61:e9:40:b7:05:8b:95:a0:aa:cb:6d:69:6e:07:04:e0:80: ad:97:ed:89:62:04:d2:fd:60:92:26:d7:ef:7a:e9:ab:a0:8d: 70:e3:d5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsW0yWcDX/gQsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGI5NGYwN2UtZmE3Zi00OTI0LTlhMWMtYzY4ZDdiMGZkOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZFuMF485XPH54vvgewqVtmJKWKTE+8w1PFp pbMfubhXGAKtvtHlj/c60XgheMtyhxNJ1lzjMft8A1Y6tfgG6D0hnAkmH2Xnv5km BvHzQ1jxmAdIEgkPwu+4lQmOlXvmVXMJey73A6z3H/EVT4GLW5nOrf7ZzaNrOvfm JMN2utK4FU+bOvKHoBH1hMq9gjwULWT+PNX210s499XJBd6kh9nDzuzQfBMtRcgV yef7klXptBMLOI6gGhZPunwZL73rxINE2jzj8QUNiBTtQ9yrMnU8eA+YX/juykjc lIpS1Nobz9JT6z0GjxrhgeDw80zNNnGwc/5VAaR3d5XlKvTfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGHEoV1+gPLY82EfUciw3zgym1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJlN2VhOGYtY2E2MS0z ZGNlLTkzYjUtMTEwYjAyNTlmNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFSvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIefAprT93uhS00UWq3+yn2IeHX6bU1f1lGTArs2UlMdFJT+E8p9Y0K sIsNfkUvrmPxyofe6T+EWhXuqZRIGCgahrSu5kiaSEhORYb1IFH9POFFMUbBRdUW njkAVvKBciYYHwCS54WWPOQ5Ag6NGB5WFCf+GnFeun3qGGAFQSEXB+NCdm7rt89i 7YbUCFFVSYh5M866+RRc7eurl62vZRpLpg8cv9FLuMByUhVurtcjnSCDUKQ/TAgO dgfoxEgnIt8ge9Eqm9lpPYmSraZHc4rS/PD20EahJ8Zh6UC3BYuVoKrLbWluBwTg gK2X7YliBNL9YJIm1+966augjXDj1Us= -----END CERTIFICATE-----Generated at Tue Sep 1 05:07:01 2026 by rpki-client