$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa File: 3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa (raw, json) Hash identifier: Zhh6ue4X6P+LhorCVX1IfFJTdfLsy3ZJ85DXGlNkr6c= Subject key identifier: 57:EA:5B:46:59:7F:59:18:73:1F:AD:83:01:E9:5B:EB:E4:69:6E:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5EFA1603E207024BA150 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.36.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5e:fa:16:03:e2:07:02:4b:a1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4c93a6ef-b8bb-4efe-b1d7-6b52d4c3d581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:b4:95:fd:a1:b7:bb:6e:8b:1d:cc:cf:f4: 3a:78:0d:36:76:c9:a1:38:62:19:1b:4c:ba:8f:39: ae:59:74:ba:bb:d3:9e:b3:ab:1e:1a:aa:dc:0c:2e: 90:b2:db:e4:4b:57:75:22:fa:a4:d9:f4:92:87:f5: ac:e0:c7:2e:29:c4:fc:8a:d3:0a:23:1d:8d:98:0b: c8:18:a5:87:79:e6:95:9f:50:0f:22:c1:73:15:07: 78:21:77:37:a8:b9:b1:d3:97:9b:fe:4d:4f:27:4d: 01:bc:6b:20:81:04:43:bc:b5:9d:42:9a:18:40:c0: af:70:da:db:92:62:94:c3:4d:ae:57:67:9f:d7:38: 33:65:ec:fe:6d:8c:92:b6:ea:ce:85:6f:1b:f0:85: ae:87:84:1a:64:25:00:52:1b:43:87:ec:41:49:18: a7:f1:ab:7b:77:93:49:5c:34:40:32:2b:37:94:10: b8:e2:92:c4:19:33:d6:ea:e2:d0:b0:3b:6a:a7:15: 71:45:eb:74:9e:73:e0:8b:22:76:96:6f:db:31:76: 0c:51:95:1a:5b:11:9e:5c:67:a6:a4:e9:a9:38:84: de:92:5c:48:3a:32:1e:eb:3d:9f:57:62:74:11:d2: 79:13:48:10:8c:2b:66:37:ef:54:40:64:6e:99:94: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EA:5B:46:59:7F:59:18:73:1F:AD:83:01:E9:5B:EB:E4:69:6E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3888c3b6-c488-3aa8-b8f0-84da5b5c6b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a6:9a:f3:cc:ab:2f:7a:35:fa:6c:17:f2:b3:bd:ec:58:0b: 1d:bd:58:6b:2f:7e:89:39:98:dc:8a:36:0e:f0:52:c3:81:4a: f4:17:73:2d:7b:e9:d1:d6:57:a9:a4:94:64:4a:68:d7:09:dc: fd:8c:e5:51:c7:38:5b:65:57:31:c0:7e:f7:4e:7e:ad:81:a6: f7:30:e8:63:a4:22:c2:b9:d5:f8:15:1f:5e:6e:d3:61:52:44: 09:75:6a:49:8b:e1:35:05:72:5c:c0:c5:9a:53:c9:8d:52:81: 03:13:45:1d:b0:6e:68:4d:5d:ce:1e:9f:bd:c7:d3:62:80:71: 73:e6:35:28:af:87:17:3e:6b:e7:8c:93:37:ba:81:0d:58:f5: b1:41:40:bb:8b:74:35:c5:9c:41:57:e1:02:e6:9b:29:76:3b: d3:f8:ae:b9:38:76:b3:b3:8f:c6:eb:38:92:08:ca:a7:22:c5: b4:d8:d1:4d:f5:fa:21:ac:55:22:27:5a:68:99:b0:fa:d3:65: 94:5c:f9:9f:7d:f3:8c:e1:a8:2d:b1:af:f0:0a:e9:5f:28:17: b6:70:4b:45:0e:1e:d4:0b:4e:f7:b5:e1:9f:2f:9a:03:24:e5: eb:27:d4:f5:97:81:db:e4:8a:08:9d:49:9a:a3:9b:53:28:f9: f6:e0:09:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tl76FgPiBwJLoVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGM5M2E2ZWYtYjhiYi00ZWZlLWIxZDctNmI1MmQ0YzNkNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneG0lf2ht7tuix3Mz/Q6eA02dsmhOGIZG0y6 jzmuWXS6u9Oes6seGqrcDC6QstvkS1d1Ivqk2fSSh/Ws4McuKcT8itMKIx2NmAvI GKWHeeaVn1APIsFzFQd4IXc3qLmx05eb/k1PJ00BvGsggQRDvLWdQpoYQMCvcNrb kmKUw02uV2ef1zgzZez+bYySturOhW8b8IWuh4QaZCUAUhtDh+xBSRin8at7d5NJ XDRAMis3lBC44pLEGTPW6uLQsDtqpxVxRet0nnPgiyJ2lm/bMXYMUZUaWxGeXGem pOmpOITeklxIOjIe6z2fV2J0EdJ5E0gQjCtmN+9UQGRumZTmkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfqW0ZZf1kYcx+tgwHpW+vkaW6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg4OGMzYjYtYzQ4OC0z YWE4LWI4ZjAtODRkYTViNWM2YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOmmvPMqy96NfpsF/KzvexYCx29WGsvfok5mNyKNg7wUsOBSvQXcy17 6dHWV6mklGRKaNcJ3P2M5VHHOFtlVzHAfvdOfq2Bpvcw6GOkIsK51fgVH15u02FS RAl1akmL4TUFclzAxZpTyY1SgQMTRR2wbmhNXc4en73H02KAcXPmNSivhxc+a+eM kze6gQ1Y9bFBQLuLdDXFnEFX4QLmmyl2O9P4rrk4drOzj8brOJIIyqcixbTY0U31 +iGsVSInWmiZsPrTZZRc+Z9984zhqC2xr/AK6V8oF7ZwS0UOHtQLTve14Z8vmgMk 5esn1PWXgdvkigidSZqjm1Mo+fbgCT0= -----END CERTIFICATE-----Generated at Sat Oct 24 10:43:22 2026 by rpki-client