$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa File: 34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa (raw, json) Hash identifier: jh4gTO9bMlwFp5VHWW00gTbiGvQhPNrjALG07O2Y280= Subject key identifier: 0D:11:73:0A:FB:8D:BE:62:0D:18:6C:CB:D4:14:FB:B4:F8:9B:AD:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863D754DFD071F6D14D62BA Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.37.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:d7:54:df:d0:71:f6:d1:4d:62:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=bc04400d-28d7-4e7e-aefc-6769cd1e2c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:66:e3:5f:3f:4e:d0:a5:c7:d2:c2:c6:80: 85:65:c7:6f:04:60:22:77:bb:a8:23:ea:2f:4b:36: e1:a6:98:91:e2:db:46:1b:d7:f6:00:67:ac:d8:b1: e0:f4:e4:17:57:74:ee:12:73:f2:79:d2:c5:d3:79: a9:a7:72:4e:24:92:7c:d1:51:a0:cc:5c:47:b1:5a: ab:55:a7:9d:42:b8:ab:db:5b:2e:b3:e3:1e:7b:c0: 99:74:a1:65:92:ad:8b:02:a3:12:5d:a4:da:05:55: 3c:da:03:28:fc:e8:86:8a:11:46:37:4e:2b:cb:22: 86:0b:4e:54:e9:e7:58:08:89:c5:36:09:9e:2d:94: 13:75:d8:90:56:09:2b:33:8a:d2:2e:91:4b:45:f5: 99:f7:03:21:ea:be:18:3f:27:79:06:e0:40:a8:99: da:e5:95:2e:c0:de:f0:35:23:e6:44:4f:da:ea:f5: 78:ec:37:93:7b:d8:ba:f7:79:57:54:78:d0:eb:25: 1f:25:93:dd:bc:23:c0:6a:fa:41:18:58:4b:56:f2: 43:d1:5c:4c:8b:32:49:cc:91:f8:69:bd:01:25:24: af:b0:e6:58:22:64:63:27:bb:5d:6b:55:f3:e2:0a: f8:e7:7f:c1:30:26:99:98:e3:15:63:59:26:5c:9d: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:11:73:0A:FB:8D:BE:62:0D:18:6C:CB:D4:14:FB:B4:F8:9B:AD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0d:68:35:6e:e8:85:84:ad:91:a7:ea:5f:62:86:48:d3:eb: 06:54:34:d1:56:f2:a6:a7:72:86:fc:f7:96:7d:06:0d:c8:fa: 56:56:40:40:97:bf:03:f8:73:79:ff:ac:5c:fa:a7:fe:b8:c5: 5a:5b:43:0a:9e:cb:cb:b5:64:98:7e:98:60:de:b7:6b:cf:8f: 7a:bd:8d:6d:1b:f2:ba:02:18:79:fe:8c:35:45:cc:1f:77:45: 77:2b:43:fd:99:e2:91:f1:42:5e:b9:d2:15:b7:aa:aa:00:77: a8:1a:fd:53:c0:58:bd:db:cb:53:de:af:5f:d3:e4:09:33:5d: 97:34:b3:3a:09:3a:92:79:75:5f:c8:dd:2b:14:30:35:3a:8e: e2:42:99:f3:99:a1:f7:3e:b7:3b:c7:04:b5:f8:a2:ca:12:99: 35:56:b2:8f:ff:3b:ea:74:12:1e:35:c3:ab:0f:ba:fa:65:40: 5d:f6:59:3b:fa:9f:d3:9e:23:07:9e:59:89:00:87:84:f1:b7: b2:bc:c4:30:c4:cd:37:2c:b2:ce:c5:2d:35:d3:48:e6:2c:a1: f7:6a:77:ca:b3:d7:20:65:38:0c:6d:0b:cd:0c:7b:03:54:5f: 09:0e:f9:29:9e:d2:22:d2:37:6d:17:92:ec:d0:5e:a3:12:58: 9a:62:82:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9dU39Bx9tFNYrowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YmMwNDQwMGQtMjhkNy00ZTdlLWFlZmMtNjc2OWNkMWUyYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmBm418/TtClx9LCxoCFZcdvBGAid7uoI+ov SzbhppiR4ttGG9f2AGes2LHg9OQXV3TuEnPyedLF03mpp3JOJJJ80VGgzFxHsVqr VaedQrir21sus+Mee8CZdKFlkq2LAqMSXaTaBVU82gMo/OiGihFGN04ryyKGC05U 6edYCInFNgmeLZQTddiQVgkrM4rSLpFLRfWZ9wMh6r4YPyd5BuBAqJna5ZUuwN7w NSPmRE/a6vV47DeTe9i693lXVHjQ6yUfJZPdvCPAavpBGFhLVvJD0VxMizJJzJH4 ab0BJSSvsOZYImRjJ7tda1Xz4gr453/BMCaZmOMVY1kmXJ2xfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0Rcwr7jb5iDRhsy9QU+7T4m63VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRiNjRmNWMtOGNlNS0z YjQyLTg0ZjMtMDQ4M2JlMjVjZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACENaDVu6IWErZGn6l9ihkjT6wZUNNFW8qancob895Z9Bg3I+lZWQECX vwP4c3n/rFz6p/64xVpbQwqey8u1ZJh+mGDet2vPj3q9jW0b8roCGHn+jDVFzB93 RXcrQ/2Z4pHxQl650hW3qqoAd6ga/VPAWL3by1Per1/T5AkzXZc0szoJOpJ5dV/I 3SsUMDU6juJCmfOZofc+tzvHBLX4osoSmTVWso//O+p0Eh41w6sPuvplQF32WTv6 n9OeIweeWYkAh4Txt7K8xDDEzTcsss7FLTXTSOYsofdqd8qz1yBlOAxtC80MewNU XwkO+Sme0iLSN20XkuzQXqMSWJpigu8= -----END CERTIFICATE-----Generated at Tue Sep 1 05:17:08 2026 by rpki-client