$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff921bd-2b4a-3e0a-b4e8-ba3295e26bf7.roa File: 3ff921bd-2b4a-3e0a-b4e8-ba3295e26bf7.roa (raw, json) Hash identifier: USlX+Dh9zwe9CvoeaKSDjr8hJVkZIFxz+Rbuu1FgPJw= Subject key identifier: 39:C2:EC:F0:03:01:14:76:D6:CB:2A:57:A7:72:30:31:82:50:30:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981C4B1105D10502577A1C8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff921bd-2b4a-3e0a-b4e8-ba3295e26bf7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 68.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:c4:b1:10:5d:10:50:25:77:a1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=252b1acb-c010-436a-a1ae-126db697ed35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:64:ae:d5:9c:95:fc:50:1b:dd:d3:de:12: f2:6d:90:5a:fa:4c:90:ee:02:0d:f6:98:fb:70:cd: fe:2d:17:09:8b:69:5c:9c:1b:03:4d:fe:68:90:44: 1e:c4:92:bd:ac:a3:cc:b6:1e:5c:cb:ab:27:62:1d: 24:d5:40:ed:9f:61:4f:f4:42:e1:d1:66:08:bf:7b: 02:d4:de:63:a1:b6:42:85:45:14:83:16:3b:38:98: 88:05:e1:29:43:92:54:c3:b0:b3:ea:d8:a7:50:d7: 56:30:f0:6a:ed:1d:10:be:4b:ba:bd:b1:97:f6:5e: 54:d7:86:63:9a:45:56:a7:a4:0e:3f:2f:03:4b:36: ec:14:fb:fc:3a:51:3a:03:bc:74:f6:ba:7e:57:ac: 7f:bf:4a:54:f2:89:13:83:28:57:c7:e0:6d:04:92: 12:8d:9c:d8:c0:48:9e:a0:91:f0:b9:4c:39:50:f6: 18:86:74:52:ae:79:ef:12:36:4c:e0:80:70:3d:10: 2e:4b:1c:07:2a:31:30:8e:0c:67:5a:07:dc:3e:a8: ba:eb:41:ac:ac:49:9f:60:93:6e:b0:9a:34:c0:9c: a6:fe:92:27:98:dc:b1:e7:b9:41:af:83:72:b5:e4: ee:ab:fc:05:c5:fd:2c:33:f6:a6:9d:7f:47:5b:77: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:EC:F0:03:01:14:76:D6:CB:2A:57:A7:72:30:31:82:50:30:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff921bd-2b4a-3e0a-b4e8-ba3295e26bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:57:49:35:22:97:10:74:bc:9a:f0:4c:02:ca:68:2e:cb:17: 66:ac:e9:cd:b8:75:8e:0b:82:c8:3b:b0:12:1b:21:e1:83:89: a3:f9:fc:93:76:5c:d3:13:19:85:98:2e:d4:3c:a1:77:3c:74: 53:1a:e1:eb:69:36:8a:3b:0e:f9:2a:ce:09:88:5c:63:9a:2d: c5:29:5b:5c:74:2b:24:f1:dd:d7:69:9f:1f:c5:14:ba:92:f4: 26:cb:3a:62:d8:ec:bf:ba:9c:0e:c5:c6:5c:91:11:ad:de:8c: a3:41:bb:b0:95:65:c5:cf:d2:9c:69:d0:cc:df:95:86:2d:2f: 3f:4f:59:37:7d:fc:a7:32:10:d7:c0:63:0a:4f:09:5f:5a:39: 99:1f:b9:5c:43:88:3b:ad:65:88:08:69:5e:47:1f:a2:db:f7: da:30:e4:ba:f0:2c:27:84:ae:dd:22:c3:fb:05:2f:cc:21:7f: d0:2e:28:14:aa:52:ea:ad:c4:7e:a9:da:10:5f:2a:e9:d3:86: b9:ca:f5:a5:74:09:d7:02:d9:b4:6b:d6:b6:cc:04:64:ca:61: 90:e5:37:b7:fc:ff:b7:c4:f9:49:b2:db:d8:b2:25:74:2d:da: 4b:9e:b4:fb:7a:45:93:d9:49:23:92:58:8e:89:ad:22:30:37: d9:b0:65:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgcSxEF0QUCV3ocgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjUyYjFhY2ItYzAxMC00MzZhLWExYWUtMTI2ZGI2OTdlZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKtkrtWclfxQG93T3hLybZBa+kyQ7gIN9pj7 cM3+LRcJi2lcnBsDTf5okEQexJK9rKPMth5cy6snYh0k1UDtn2FP9ELh0WYIv3sC 1N5jobZChUUUgxY7OJiIBeEpQ5JUw7Cz6tinUNdWMPBq7R0Qvku6vbGX9l5U14Zj mkVWp6QOPy8DSzbsFPv8OlE6A7x09rp+V6x/v0pU8okTgyhXx+BtBJISjZzYwEie oJHwuUw5UPYYhnRSrnnvEjZM4IBwPRAuSxwHKjEwjgxnWgfcPqi660GsrEmfYJNu sJo0wJym/pInmNyx57lBr4NyteTuq/wFxf0sM/amnX9HW3fHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnC7PADARR21ssqV6dyMDGCUDDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZmOTIxYmQtMmI0YS0z ZTBhLWI0ZTgtYmEzMjk1ZTI2YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdXSTUilxB0vJrwTALKaC7LF2as6c24dY4Lgsg7sBIbIeGDiaP5/JN2 XNMTGYWYLtQ8oXc8dFMa4etpNoo7DvkqzgmIXGOaLcUpW1x0KyTx3ddpnx/FFLqS 9CbLOmLY7L+6nA7FxlyREa3ejKNBu7CVZcXP0pxp0MzflYYtLz9PWTd9/KcyENfA YwpPCV9aOZkfuVxDiDutZYgIaV5HH6Lb99ow5LrwLCeErt0iw/sFL8whf9AuKBSq UuqtxH6p2hBfKunThrnK9aV0CdcC2bRr1rbMBGTKYZDlN7f8/7fE+Umy29iyJXQt 2kuetPt6RZPZSSOSWI6JrSIwN9mwZSk= -----END CERTIFICATE-----Generated at Tue Oct 20 10:08:34 2026 by rpki-client