$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa File: 43b85172-eff1-37e5-82d9-808fec87e10c.roa (raw, json) Hash identifier: FCqF9n1lJOuUu8UQmWQw3yY33tlxR5Ysehkmyrzcgcc= Subject key identifier: 60:C9:38:7F:F8:7B:B5:9A:4D:A2:DD:41:22:4D:E8:8A:E1:F3:82:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F99BF3FCBB8FF153A2280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.43.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:99:bf:3f:cb:b8:ff:15:3a:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=47088d6b-7593-49ce-b11d-bbdddefeaa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:4d:d1:80:07:5b:35:f7:ed:c8:be:7a:59: 81:a1:7b:76:da:16:9c:c9:38:e1:15:38:27:1b:c5: 69:53:83:c9:ed:9b:e1:50:84:97:62:65:61:87:0e: d0:c8:38:8d:69:18:68:eb:d3:19:fb:e8:a9:42:4e: 21:73:01:2c:39:b0:b9:04:a9:7f:57:9a:8a:91:66: d5:53:e6:f1:3e:ae:72:73:8a:bf:66:37:8a:52:8c: 16:35:4b:18:ae:f2:fa:d1:24:d0:ff:ae:71:9d:96: ca:28:8a:10:b0:a4:6f:0f:07:e9:11:d8:9f:fa:2b: 90:b3:54:bc:ce:c4:47:24:fa:5d:8e:51:73:00:bb: 44:85:cf:a3:a7:01:11:7b:6f:50:55:31:bd:15:9a: c9:bb:54:b2:0f:07:25:f5:e4:df:66:17:d7:cf:c5: 0f:01:40:81:97:36:5a:9f:52:45:78:35:e3:dd:08: d1:0a:39:24:86:99:8e:ef:2a:39:f5:4d:d5:81:8a: 8e:0a:16:10:75:53:5a:2d:04:8b:8c:eb:e9:13:a7: b5:ad:3a:c3:95:5a:e4:38:5e:f4:2f:91:da:dc:db: 72:d6:bf:7a:54:ec:62:55:c0:13:71:c4:30:cd:1e: 41:e6:45:70:82:7b:d8:e9:24:31:e6:d9:41:15:25: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C9:38:7F:F8:7B:B5:9A:4D:A2:DD:41:22:4D:E8:8A:E1:F3:82:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a4:39:d4:36:6e:59:92:0d:b4:38:2e:ce:6d:6c:d3:4f:e5: 18:cc:4e:e6:32:bd:79:d9:a6:26:24:4e:80:71:82:22:cd:d1: 73:db:70:08:28:30:5e:cb:0e:6b:ce:e0:75:1b:0a:10:00:c8: 94:cc:51:c6:2f:da:23:bd:09:56:9c:d9:9f:15:f2:f0:03:3a: da:8d:8d:2e:de:7d:c0:1e:13:a6:b5:c8:c4:13:0c:0a:1f:48: 3d:f5:52:85:3f:94:a0:92:a4:d7:d4:f1:32:d1:1b:24:26:da: 38:22:6e:3c:b9:d1:e2:f1:5d:30:11:69:c1:18:b4:16:3e:20: 08:e0:d1:4c:2c:b9:01:22:57:fc:ac:a7:54:41:9f:af:ad:3b: 02:42:52:75:00:2d:7f:69:14:53:68:95:e8:67:26:56:2c:5d: 3a:83:d0:d7:26:d6:92:7c:65:a4:b8:09:28:01:6c:84:77:e0: 40:b2:32:cd:33:53:f2:2c:8b:ef:b2:8b:84:e9:93:00:83:c3: c3:49:82:66:e3:29:88:3d:5a:7d:e7:5a:2a:4f:f9:84:54:79: 99:7b:4a:a0:3d:07:7b:47:3b:12:02:90:2b:92:f3:32:4b:37: 65:1a:88:68:fb:29:e1:b3:98:27:01:9f:fe:50:fa:3f:1b:8e: 51:6b:60:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5m/P8u4/xU6IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDcwODhkNmItNzU5My00OWNlLWIxMWQtYmJkZGRlZmVhYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIZN0YAHWzX37ci+elmBoXt22hacyTjhFTgn G8VpU4PJ7ZvhUISXYmVhhw7QyDiNaRho69MZ++ipQk4hcwEsObC5BKl/V5qKkWbV U+bxPq5yc4q/ZjeKUowWNUsYrvL60STQ/65xnZbKKIoQsKRvDwfpEdif+iuQs1S8 zsRHJPpdjlFzALtEhc+jpwERe29QVTG9FZrJu1SyDwcl9eTfZhfXz8UPAUCBlzZa n1JFeDXj3QjRCjkkhpmO7yo59U3VgYqOChYQdVNaLQSLjOvpE6e1rTrDlVrkOF70 L5Ha3Nty1r96VOxiVcATccQwzR5B5kVwgnvY6SQx5tlBFSVlaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDJOH/4e7WaTaLdQSJN6Irh84JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNiODUxNzItZWZmMS0z N2U1LTgyZDktODA4ZmVjODdlMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEekOdQ2blmSDbQ4Ls5tbNNP5RjMTuYyvXnZpiYkToBxgiLN0XPbcAgo MF7LDmvO4HUbChAAyJTMUcYv2iO9CVac2Z8V8vADOtqNjS7efcAeE6a1yMQTDAof SD31UoU/lKCSpNfU8TLRGyQm2jgibjy50eLxXTARacEYtBY+IAjg0UwsuQEiV/ys p1RBn6+tOwJCUnUALX9pFFNolehnJlYsXTqD0Ncm1pJ8ZaS4CSgBbIR34ECyMs0z U/Isi++yi4TpkwCDw8NJgmbjKYg9Wn3nWipP+YRUeZl7SqA9B3tHOxICkCuS8zJL N2UaiGj7KeGzmCcBn/5Q+j8bjlFrYGo= -----END CERTIFICATE-----Generated at Sun Oct 25 15:52:05 2026 by rpki-client