$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf5ae27-40e7-3552-a415-5d3a69e7e55e.roa File: 3bf5ae27-40e7-3552-a415-5d3a69e7e55e.roa (raw, json) Hash identifier: Ray9eo9xLi4WH5t+c66Szde+rM7HbCbJ82UsHN218bc= Subject key identifier: EA:60:70:AE:FD:8C:B7:E5:B5:F0:41:77:0D:4C:D9:65:1C:1D:0D:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863EA8F2B211B05DE670640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf5ae27-40e7-3552-a415-5d3a69e7e55e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:ea:8f:2b:21:1b:05:de:67:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=771237d9-4c31-41ef-b2d1-4d4a80f6296d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:d7:b2:e8:72:d1:4a:01:e0:ad:9d:d2:9b: 39:a9:7f:c9:da:ac:85:48:b5:f7:8a:64:af:0c:2c: 5c:25:ca:b7:e6:c6:b7:4d:12:a9:f2:4b:15:cd:9a: d4:49:67:55:da:7b:cd:c5:86:10:97:3b:64:eb:4f: 19:9f:dc:8e:5f:55:e1:81:58:99:ab:e7:4c:51:72: 14:a6:01:94:67:76:eb:b2:77:f2:8d:97:48:2d:14: 69:7d:56:fe:6f:48:b9:1e:1c:b9:2f:f9:f5:81:11: bc:99:35:86:ea:96:61:ed:2b:e1:f3:5c:4b:b3:1f: 68:c5:0a:c2:79:26:f2:7b:ff:52:c4:fe:62:f2:c1: 01:d7:0c:aa:19:59:37:3c:b2:e5:aa:82:0e:6b:7d: 50:b1:64:9f:31:07:4e:7d:1f:66:09:ac:2b:83:ad: d8:d0:35:09:0b:d9:af:b3:c1:06:de:4e:b4:ef:68: 9e:58:0d:22:3a:c4:61:b4:11:03:a5:9a:37:ae:8d: e8:94:d1:65:bd:4a:06:78:70:78:7d:c2:16:a7:23: c9:da:12:be:d8:54:a6:7d:be:96:9a:11:47:7e:f1: 4c:05:20:3c:ae:12:8f:e3:1b:0b:a1:0c:ae:45:b7: 7a:e4:9e:e7:31:86:42:fb:44:b9:67:98:3d:24:bd: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:60:70:AE:FD:8C:B7:E5:B5:F0:41:77:0D:4C:D9:65:1C:1D:0D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bf5ae27-40e7-3552-a415-5d3a69e7e55e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ea:0e:75:7c:77:1a:11:32:33:a3:59:89:4a:59:8d:8b:7d: 7b:b3:93:5c:a0:dc:1e:bf:24:7c:68:eb:28:2d:cc:44:74:02: 9d:e5:12:2e:0f:0e:e5:1d:6c:ac:02:2f:06:6a:1c:07:02:da: e1:cf:f1:7d:af:10:16:0d:2a:58:f0:ab:bf:43:21:a0:7c:f9: 77:80:f0:fd:1d:b1:7d:c5:83:54:dd:93:43:1b:77:a1:93:64: eb:b6:b3:c0:22:f2:cf:6c:0c:cd:ff:22:be:e4:5e:52:cf:60: 4a:33:e9:d8:a8:3f:11:87:12:53:96:80:a8:63:21:1b:04:a7: c6:f8:6b:3f:a5:2b:52:59:31:b2:c1:79:4c:35:13:2c:72:9e: 50:cb:a3:69:56:2c:c3:f3:03:5d:34:47:05:ea:80:3c:f5:90: 7a:d5:69:e4:1c:28:98:5a:04:81:01:9a:dc:62:5b:3f:ec:51: e3:9c:97:83:65:30:84:0a:6a:5a:95:14:ce:06:84:a2:c3:a1: c6:eb:b6:e0:66:af:a0:9e:09:1f:8c:c5:ed:85:e3:68:0f:28: 61:e2:f2:a1:15:56:c5:3e:65:c6:af:ff:08:43:d1:65:4a:21: 7c:3c:3f:09:a4:3a:e8:25:bb:76:7a:86:24:81:d9:35:60:da: 3f:fb:38:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+qPKyEbBd5nBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NzcxMjM3ZDktNGMzMS00MWVmLWIyZDEtNGQ0YTgwZjYyOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVbXsuhy0UoB4K2d0ps5qX/J2qyFSLX3imSv DCxcJcq35sa3TRKp8ksVzZrUSWdV2nvNxYYQlztk608Zn9yOX1XhgViZq+dMUXIU pgGUZ3brsnfyjZdILRRpfVb+b0i5Hhy5L/n1gRG8mTWG6pZh7Svh81xLsx9oxQrC eSbye/9SxP5i8sEB1wyqGVk3PLLlqoIOa31QsWSfMQdOfR9mCawrg63Y0DUJC9mv s8EG3k6072ieWA0iOsRhtBEDpZo3ro3olNFlvUoGeHB4fcIWpyPJ2hK+2FSmfb6W mhFHfvFMBSA8rhKP4xsLoQyuRbd65J7nMYZC+0S5Z5g9JL3XUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpgcK79jLfltfBBdw1M2WUcHQ2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JmNWFlMjctNDBlNy0z NTUyLWE0MTUtNWQzYTY5ZTdlNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArqDnV8dxoRMjOjWYlKWY2LfXuzk1yg3B6/JHxo6ygtzER0Ap3lEi4P DuUdbKwCLwZqHAcC2uHP8X2vEBYNKljwq79DIaB8+XeA8P0dsX3Fg1Tdk0Mbd6GT ZOu2s8Ai8s9sDM3/Ir7kXlLPYEoz6dioPxGHElOWgKhjIRsEp8b4az+lK1JZMbLB eUw1EyxynlDLo2lWLMPzA100RwXqgDz1kHrVaeQcKJhaBIEBmtxiWz/sUeOcl4Nl MIQKalqVFM4GhKLDocbrtuBmr6CeCR+Mxe2F42gPKGHi8qEVVsU+Zcav/whD0WVK IXw8PwmkOuglu3Z6hiSB2TVg2j/7OEc= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:38 2026 by rpki-client