$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa File: 3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa (raw, json) Hash identifier: 7/+UNV1S2/0yrEGQbG40agA2Fl+tvf2r7Q4QRlinzkw= Subject key identifier: 32:F9:C2:33:C8:03:1F:DC:32:B9:06:1F:A8:8B:D4:D6:0C:3E:CD:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E621AD0E8A4C68D333480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.37.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:62:1a:d0:e8:a4:c6:8d:33:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=160f8d6c-c94b-4933-8e64-f00697eaf87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:ae:5b:fe:09:9a:11:9e:f3:f2:b3:8c:b3: 45:e7:d7:4c:e8:c6:9a:22:64:cf:5c:b6:65:4a:90: 8d:4d:a5:b5:37:ac:ce:66:07:0b:24:a0:2c:06:99: 78:35:81:9d:db:a6:21:85:90:60:94:4b:f2:36:a0: b9:57:78:24:80:71:ea:59:a0:5b:ed:45:bf:5c:49: 30:51:a1:8c:eb:34:20:af:52:6a:05:e3:69:4e:4b: 9d:60:05:b0:97:ce:3d:84:52:a1:bf:0c:b6:40:06: dc:a6:29:f2:29:b2:34:11:04:af:c0:cc:9b:97:6d: e8:5b:fa:54:7c:ca:18:d5:24:20:c8:f8:2a:42:32: 0e:39:15:eb:0e:fc:a0:fa:6e:26:6e:71:ac:5a:a9: 11:2b:1e:f8:ad:f0:0e:e1:39:38:ff:c5:cb:f0:81: fa:14:ea:b9:3a:a5:a5:45:a0:96:ba:14:9b:ad:d4: 69:05:e3:28:ea:5c:6c:54:48:48:87:47:51:b8:ed: f3:c5:f7:3e:ca:f7:b8:3e:a4:87:ca:f8:ee:0e:25: e2:dd:13:da:95:5c:4b:3b:d9:32:77:67:da:b0:91: c1:4d:96:bb:dc:d4:88:36:88:46:e1:09:fc:56:9b: 4d:53:a0:56:2d:74:a5:24:63:02:b1:8a:5f:4f:53: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F9:C2:33:C8:03:1F:DC:32:B9:06:1F:A8:8B:D4:D6:0C:3E:CD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44e2ff-2f7e-3f6d-8601-3b982363f690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:14:6c:59:d3:66:a9:c6:8d:aa:70:1d:48:7a:5f:dd:b0:5f: f9:33:73:2d:39:fb:7e:10:85:a9:ae:fa:b7:70:2c:3a:de:94: 83:5d:c9:e6:35:1b:04:f7:e7:bf:d0:35:c2:17:fc:99:94:fe: 0b:16:5a:48:28:a2:9e:d7:b1:c5:5c:0c:e6:33:e5:e5:ff:ad: af:e7:e3:fd:b8:49:c2:69:fa:03:6b:05:7b:2b:57:c6:b9:cc: e6:ba:46:dc:1a:19:21:a9:2f:d2:e0:55:6a:cd:c9:4d:ff:ad: 9d:18:78:f0:c1:e3:3d:46:81:c1:1b:7c:18:8d:7d:34:08:ee: f4:59:9b:a4:d5:b8:d4:b7:bf:4d:ae:1f:2f:69:bc:bc:0b:71: 4a:6e:a7:02:96:0d:a7:16:94:fd:7c:c3:61:b5:15:e7:6e:30: e8:9c:e4:41:85:19:2d:21:11:2e:c6:1c:53:7e:77:dc:eb:c8: 78:a1:5a:23:2e:a5:94:04:58:a7:b7:92:4f:90:d3:0f:e8:50: 4a:01:7f:e4:87:0a:e2:37:07:95:76:aa:3b:33:8b:71:ac:af: 97:e2:b8:f3:05:71:40:4e:d3:6a:8d:21:7c:37:ab:16:43:a1: 18:b3:f0:2c:a9:6a:19:c6:30:a0:b5:88:84:db:70:b2:6a:6c: 6a:11:1c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmIa0Oikxo0zNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTYwZjhkNmMtYzk0Yi00OTMzLThlNjQtZjAwNjk3ZWFmODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCyuW/4JmhGe8/KzjLNF59dM6MaaImTPXLZl SpCNTaW1N6zOZgcLJKAsBpl4NYGd26YhhZBglEvyNqC5V3gkgHHqWaBb7UW/XEkw UaGM6zQgr1JqBeNpTkudYAWwl849hFKhvwy2QAbcpinyKbI0EQSvwMybl23oW/pU fMoY1SQgyPgqQjIOORXrDvyg+m4mbnGsWqkRKx74rfAO4Tk4/8XL8IH6FOq5OqWl RaCWuhSbrdRpBeMo6lxsVEhIh0dRuO3zxfc+yve4PqSHyvjuDiXi3RPalVxLO9ky d2fasJHBTZa73NSINohG4Qn8VptNU6BWLXSlJGMCsYpfT1OHnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL5wjPIAx/cMrkGH6iL1NYMPs0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y0NGUyZmYtMmY3ZS0z ZjZkLTg2MDEtM2I5ODIzNjNmNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8UbFnTZqnGjapwHUh6X92wX/kzcy05+34Qhamu+rdwLDrelINdyeY1 GwT357/QNcIX/JmU/gsWWkgoop7XscVcDOYz5eX/ra/n4/24ScJp+gNrBXsrV8a5 zOa6RtwaGSGpL9LgVWrNyU3/rZ0YePDB4z1GgcEbfBiNfTQI7vRZm6TVuNS3v02u Hy9pvLwLcUpupwKWDacWlP18w2G1FeduMOic5EGFGS0hES7GHFN+d9zryHihWiMu pZQEWKe3kk+Q0w/oUEoBf+SHCuI3B5V2qjszi3Gsr5fiuPMFcUBO02qNIXw3qxZD oRiz8CypahnGMKC1iITbcLJqbGoRHO4= -----END CERTIFICATE-----Generated at Tue Oct 20 11:09:27 2026 by rpki-client