$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37c650d8-46e2-3e96-92ee-573f5a751244.roa File: 37c650d8-46e2-3e96-92ee-573f5a751244.roa (raw, json) Hash identifier: z6BCI/nYl0pSzV1f3wULm42I3EYbvER9dqZdlQJ+1AE= Subject key identifier: 6E:AD:7D:94:0B:91:1E:CD:19:80:56:79:A8:A5:EE:67:0F:16:9E:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5C09A6984D3C73A8B520 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37c650d8-46e2-3e96-92ee-573f5a751244.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.34.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5c:09:a6:98:4d:3c:73:a8:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=fbfa88b7-8e61-4b8a-a4d3-2a4667e7311a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:8d:0d:64:1b:9c:76:60:06:49:96:1b:8f: ca:2d:c2:d7:24:8f:e7:8a:75:55:f3:1a:35:54:30: 56:e3:bb:a7:44:69:78:76:03:da:70:dd:ae:f6:7e: b2:21:cd:bb:40:cb:48:9e:f6:26:09:31:6e:22:d4: d0:24:7f:ee:b1:c6:53:31:68:80:53:48:57:78:95: 1f:1c:85:7b:a1:ac:0e:b9:bf:fc:37:72:84:5b:49: e0:c0:61:46:bf:ab:43:1f:3c:66:11:3b:86:38:ba: d3:fc:68:d8:95:76:a0:ca:16:76:70:a4:a9:fb:6c: 36:8d:78:ca:0b:58:74:48:bf:43:f7:1d:c8:a0:08: c0:bc:57:53:f3:9f:b0:93:72:4a:53:ab:40:69:c6: 15:59:92:cc:cc:06:61:3b:9c:79:d4:78:4d:5c:50: 9a:9c:8c:ba:0f:a2:02:24:e7:93:e7:45:1b:2a:22: 90:b0:c0:ee:18:6a:57:81:3e:cd:72:92:45:de:e2: 69:f2:94:e3:de:25:32:c8:93:3e:6a:c1:bd:6a:a8: 66:e5:42:b8:2b:a7:c5:81:7d:b7:16:0e:a6:96:f6: 28:2a:67:62:9f:0c:54:d5:ce:e5:b1:23:29:65:1e: 57:8f:31:1b:4e:a0:4d:32:5d:7b:05:1e:a1:78:1e: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AD:7D:94:0B:91:1E:CD:19:80:56:79:A8:A5:EE:67:0F:16:9E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37c650d8-46e2-3e96-92ee-573f5a751244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a7:2e:1d:65:91:00:26:21:45:0a:f0:d0:b6:a1:0b:9b:04: 5a:a1:1a:c6:5d:3f:80:08:26:fd:e8:d5:87:b0:ef:c7:83:28: 9b:89:51:b2:1c:99:3c:4e:d9:22:65:ab:19:86:82:65:f8:f2: 3a:83:1c:7a:67:ea:14:6a:17:35:73:0c:10:8b:d8:6d:5b:7f: 51:65:48:db:19:34:9a:b8:ba:42:da:51:95:45:92:f6:d4:be: 7e:aa:55:20:c8:80:95:6d:37:c9:18:b4:ac:e6:fd:a8:3e:e4: d5:3c:63:7a:3b:48:18:3c:a9:53:6e:1e:8e:5c:f7:53:53:5d: 7d:da:36:2e:6f:52:6c:a4:25:60:cc:ef:06:a4:9d:72:e7:f7: c6:24:3a:d4:a4:29:b9:42:ca:93:c8:e3:90:05:41:da:6a:36: fb:3b:41:a5:53:44:63:98:f9:c5:93:77:e1:ba:b4:e4:76:86: a7:86:72:43:a9:8c:da:0a:0b:cd:eb:35:e8:0e:77:1d:da:fa: d6:db:d5:88:2b:dc:d7:c2:71:61:e7:b1:ba:51:c9:e0:8e:b3: 52:47:18:f4:2b:60:59:81:19:3c:6e:73:09:94:a5:f5:9a:5c: 18:e5:cb:9d:3d:88:3b:b3:38:c3:ce:51:d3:9d:8f:a6:d8:7c: 59:10:b9:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TlwJpphNPHOotSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmJmYTg4YjctOGU2MS00YjhhLWE0ZDMtMmE0NjY3ZTczMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76NDWQbnHZgBkmWG4/KLcLXJI/ninVV8xo1 VDBW47unRGl4dgPacN2u9n6yIc27QMtInvYmCTFuItTQJH/uscZTMWiAU0hXeJUf HIV7oawOub/8N3KEW0ngwGFGv6tDHzxmETuGOLrT/GjYlXagyhZ2cKSp+2w2jXjK C1h0SL9D9x3IoAjAvFdT85+wk3JKU6tAacYVWZLMzAZhO5x51HhNXFCanIy6D6IC JOeT50UbKiKQsMDuGGpXgT7NcpJF3uJp8pTj3iUyyJM+asG9aqhm5UK4K6fFgX23 Fg6mlvYoKmdinwxU1c7lsSMpZR5XjzEbTqBNMl17BR6heB5v0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6tfZQLkR7NGYBWeail7mcPFp6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzdjNjUwZDgtNDZlMi0z ZTk2LTkyZWUtNTczZjVhNzUxMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKnLh1lkQAmIUUK8NC2oQubBFqhGsZdP4AIJv3o1Yew78eDKJuJUbIc mTxO2SJlqxmGgmX48jqDHHpn6hRqFzVzDBCL2G1bf1FlSNsZNJq4ukLaUZVFkvbU vn6qVSDIgJVtN8kYtKzm/ag+5NU8Y3o7SBg8qVNuHo5c91NTXX3aNi5vUmykJWDM 7waknXLn98YkOtSkKblCypPI45AFQdpqNvs7QaVTRGOY+cWTd+G6tOR2hqeGckOp jNoKC83rNegOdx3a+tbb1Ygr3NfCcWHnsbpRyeCOs1JHGPQrYFmBGTxucwmUpfWa XBjly509iDuzOMPOUdOdj6bYfFkQue0= -----END CERTIFICATE-----Generated at Wed Oct 21 22:40:46 2026 by rpki-client