$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa File: 34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa (raw, json) Hash identifier: 4AptL2ib+E172/M5mLP8I9nP1SQk4eE/AfpmX/OKEGg= Subject key identifier: 2F:70:3B:99:45:C5:EB:88:27:5C:8A:D9:09:EC:06:6E:F6:38:81:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3C35DBF83B73B3A8137000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 68.58.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3c:35:db:f8:3b:73:b3:a8:13:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=26347abf-1c26-40d1-96d5-70ec207aef7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:61:ee:18:b8:f9:8a:cb:2f:60:f2:02:5a: 08:a6:b7:ae:48:ee:f0:75:f3:9a:a4:19:3f:1e:32: cb:c1:e0:8d:ac:f6:50:80:9f:01:0a:d3:ad:f1:64: 95:58:8f:b5:e1:38:40:d4:83:07:4d:be:a0:3d:79: f8:5a:28:2b:35:14:50:d3:8c:13:a4:b1:a7:cf:6b: c1:2a:79:69:4a:23:c9:bc:6c:99:f2:f5:f1:b8:20: 38:1b:79:aa:e7:aa:69:e7:c1:ce:8b:9c:5e:92:fb: a2:a4:4f:94:19:5c:4b:fe:1a:f7:a1:91:ea:43:88: 60:0f:15:da:95:9a:8a:8d:fc:2b:e5:23:cf:a9:df: 16:9c:92:0f:fe:6a:6b:26:ab:f8:32:2f:b9:95:35: ee:f1:b9:74:41:53:b7:96:a9:cd:28:5b:bd:a7:1d: 9d:17:70:46:47:e3:4c:64:7e:79:43:fd:64:7f:93: ee:99:df:67:87:a5:f7:23:c9:6a:62:25:c5:08:14: 30:cc:b9:e8:3c:66:81:e3:2f:fe:b4:a8:01:bf:8c: 56:e9:9a:81:c2:fb:b7:19:14:a9:6d:b5:44:62:60: 7a:35:62:63:64:d2:af:1f:11:40:ec:02:62:6d:35: d2:2a:e3:66:2e:4f:61:ce:9c:ce:b9:c9:45:ae:85: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:70:3B:99:45:C5:EB:88:27:5C:8A:D9:09:EC:06:6E:F6:38:81:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:88:18:ce:ba:ca:80:ce:58:6c:3d:78:f7:8b:36:d2:ac:81: e8:cf:b4:e6:ec:b4:7a:84:d1:1b:2f:20:75:30:ff:93:13:c2: 4b:0a:a6:9a:63:0e:11:88:19:39:09:77:fc:e9:2f:a7:6a:9b: 05:35:fa:ac:0b:4b:0f:85:69:65:53:06:c1:5f:eb:9c:22:5e: a0:42:ce:f7:f2:ca:24:6c:2a:35:47:f3:b3:91:60:de:2c:e4: ff:53:54:98:cb:7a:ba:a7:48:78:08:72:a0:81:8a:d1:f6:da: 6b:ed:e4:ce:67:46:a2:9d:80:c7:db:ab:5b:35:6e:d4:92:4c: d5:a4:f3:8e:1f:54:f2:e7:f3:18:f5:21:d2:a7:62:13:24:ed: ff:8d:90:d6:ee:1b:b3:a8:f6:4c:07:46:57:3d:86:5f:89:cf: 85:d1:ab:7c:fb:6a:f1:8e:21:67:39:d6:1f:36:02:27:b3:ff: 7e:2d:47:78:a8:42:40:79:f2:ef:ba:64:54:a3:9c:3e:c8:dd: e6:a3:8c:18:fd:c8:20:e0:23:91:a5:f7:8e:a9:8e:79:60:da: b5:eb:d5:11:35:91:9e:59:5a:f2:33:c1:a8:bc:24:b6:83:4f: 26:b3:29:91:f7:32:14:44:54:1d:a0:2b:5e:b8:9a:9f:d8:44: 7c:d5:97:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPDXb+Dtzs6gTcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjYzNDdhYmYtMWMyNi00MGQxLTk2ZDUtNzBlYzIwN2FlZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzVh7hi4+YrLL2DyAloIpreuSO7wdfOapBk/ HjLLweCNrPZQgJ8BCtOt8WSVWI+14ThA1IMHTb6gPXn4WigrNRRQ04wTpLGnz2vB KnlpSiPJvGyZ8vXxuCA4G3mq56pp58HOi5xekvuipE+UGVxL/hr3oZHqQ4hgDxXa lZqKjfwr5SPPqd8WnJIP/mprJqv4Mi+5lTXu8bl0QVO3lqnNKFu9px2dF3BGR+NM ZH55Q/1kf5Pumd9nh6X3I8lqYiXFCBQwzLnoPGaB4y/+tKgBv4xW6ZqBwvu3GRSp bbVEYmB6NWJjZNKvHxFA7AJibTXSKuNmLk9hzpzOuclFroXg2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9wO5lFxeuIJ1yK2QnsBm72OIGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRkMWM3OTYtZjNkMC0z MWEyLThkMDgtZDU2NWQ4NGU2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKIGM66yoDOWGw9ePeLNtKsgejPtObstHqE0RsvIHUw/5MTwksKpppj DhGIGTkJd/zpL6dqmwU1+qwLSw+FaWVTBsFf65wiXqBCzvfyyiRsKjVH87ORYN4s 5P9TVJjLerqnSHgIcqCBitH22mvt5M5nRqKdgMfbq1s1btSSTNWk844fVPLn8xj1 IdKnYhMk7f+NkNbuG7Oo9kwHRlc9hl+Jz4XRq3z7avGOIWc51h82Aiez/34tR3io QkB58u+6ZFSjnD7I3eajjBj9yCDgI5Gl946pjnlg2rXr1RE1kZ5ZWvIzwai8JLaD TyazKZH3MhREVB2gK164mp/YRHzVlxA= -----END CERTIFICATE-----Generated at Wed Jul 22 01:14:13 2026 by rpki-client