$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35608d39-a91e-369b-98b4-60cb12338796.roa File: 35608d39-a91e-369b-98b4-60cb12338796.roa (raw, json) Hash identifier: gLo6bS8q5n8C9EySEkK9wj5AhuuVp2E8oRulNuS5DmA= Subject key identifier: 35:BF:5F:46:9E:0E:97:53:04:20:61:0C:69:85:FD:3E:CB:DF:FC:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FA4D52E056C4FF6BECB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35608d39-a91e-369b-98b4-60cb12338796.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.60.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:a4:d5:2e:05:6c:4f:f6:be:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=aab9af92-c321-4b60-af33-092f2d5d99d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:91:88:30:d6:3d:0d:1f:85:4e:63:34:3f: b5:25:41:0d:e6:dc:04:1a:10:75:78:66:fd:f7:c3: 80:79:5a:9a:dd:1b:b7:24:78:eb:73:7d:47:da:db: d6:9a:86:fc:48:0a:ba:cd:91:aa:a3:0c:c5:1c:cc: 35:70:1a:21:4c:5f:e1:40:88:94:7c:e3:8c:b2:f4: 67:a4:6b:6c:bb:30:7f:bd:e3:2d:3f:5c:ac:b8:eb: ba:33:9a:97:f8:d5:c7:94:b9:0b:f4:2a:9f:a6:07: ea:22:44:30:2f:da:5d:c1:46:c5:da:a2:50:11:4c: 17:17:55:ad:8a:4a:e8:54:05:de:70:b9:4f:d8:ff: 53:89:bc:ff:de:1d:80:b6:69:c9:90:5c:78:49:28: 81:98:f9:8d:f4:8b:43:57:1d:09:14:f0:b1:5d:b1: e2:50:9f:70:df:34:b4:f2:aa:9d:d0:b7:59:bd:fb: 98:87:a7:c2:6b:44:3a:7c:92:af:05:0a:2e:e6:82: 6f:88:b3:38:ee:4d:c8:21:09:3a:27:2f:2d:45:79: 9b:7f:7e:1e:62:85:bd:31:d3:d2:00:11:49:e7:9a: d1:98:33:79:01:96:1f:4c:e1:43:58:a1:40:c5:a4: 06:f9:58:bd:f6:64:05:cc:21:7a:f3:99:ef:40:05: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BF:5F:46:9E:0E:97:53:04:20:61:0C:69:85:FD:3E:CB:DF:FC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35608d39-a91e-369b-98b4-60cb12338796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:95:ee:35:2f:65:df:c4:8e:3d:80:dd:e6:88:82:36:57:75: 66:0e:b7:93:37:40:ed:77:58:af:97:73:86:37:9f:14:09:e1: 7e:40:4a:11:a2:6a:f6:b0:16:18:27:53:2c:33:a1:44:96:51: 60:28:1b:d0:57:84:fb:9f:b0:9c:5d:ec:b8:b9:f0:10:f2:16: 30:d1:b6:b8:0d:91:2b:48:3d:98:62:76:91:cf:c3:0d:99:aa: 16:68:8b:03:55:62:cc:b9:9b:0f:08:ee:5d:96:81:51:e8:c2: 56:cf:ff:de:9e:66:c7:41:8a:88:00:f8:64:b7:30:94:f2:94: 95:ec:33:f2:3f:13:0f:99:73:d4:62:c6:89:36:22:b4:0c:70: 9a:1f:91:1c:cf:76:f9:e4:b9:fe:d2:30:12:26:9a:9a:61:19: 55:07:a0:f4:ff:5b:a1:ca:4e:9b:fc:76:00:86:05:dc:7e:e0: 05:77:51:da:ed:ae:5a:f6:ee:ec:fd:58:e1:cf:fd:15:e7:91: 80:ed:96:61:aa:b1:a9:ee:a3:dd:9a:2f:68:01:88:97:f9:f3: 65:c5:f2:aa:72:04:46:fb:37:ae:d4:f1:e0:ae:38:53:5f:35: 8a:28:ec:22:91:16:87:a9:44:9b:26:d9:a4:fb:70:24:a5:cc: 1b:03:42:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T6TVLgVsT/a+y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWFiOWFmOTItYzMyMS00YjYwLWFmMzMtMDkyZjJkNWQ5OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0mRiDDWPQ0fhU5jND+1JUEN5twEGhB1eGb9 98OAeVqa3Ru3JHjrc31H2tvWmob8SAq6zZGqowzFHMw1cBohTF/hQIiUfOOMsvRn pGtsuzB/veMtP1ysuOu6M5qX+NXHlLkL9CqfpgfqIkQwL9pdwUbF2qJQEUwXF1Wt ikroVAXecLlP2P9Tibz/3h2AtmnJkFx4SSiBmPmN9ItDVx0JFPCxXbHiUJ9w3zS0 8qqd0LdZvfuYh6fCa0Q6fJKvBQou5oJviLM47k3IIQk6Jy8tRXmbf34eYoW9MdPS ABFJ55rRmDN5AZYfTOFDWKFAxaQG+Vi99mQFzCF685nvQAUYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW/X0aeDpdTBCBhDGmF/T7L3/x1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU2MDhkMzktYTkxZS0z NjliLTk4YjQtNjBjYjEyMzM4Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWV7jUvZd/Ejj2A3eaIgjZXdWYOt5M3QO13WK+Xc4Y3nxQJ4X5AShGi avawFhgnUywzoUSWUWAoG9BXhPufsJxd7Li58BDyFjDRtrgNkStIPZhidpHPww2Z qhZoiwNVYsy5mw8I7l2WgVHowlbP/96eZsdBiogA+GS3MJTylJXsM/I/Ew+Zc9Ri xok2IrQMcJofkRzPdvnkuf7SMBImmpphGVUHoPT/W6HKTpv8dgCGBdx+4AV3Udrt rlr27uz9WOHP/RXnkYDtlmGqsanuo92aL2gBiJf582XF8qpyBEb7N67U8eCuOFNf NYoo7CKRFoepRJsm2aT7cCSlzBsDQuY= -----END CERTIFICATE-----Generated at Tue Oct 27 08:18:23 2026 by rpki-client