$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/457b0b33-f12d-3657-bb03-37bc50be5da8.roa File: 457b0b33-f12d-3657-bb03-37bc50be5da8.roa (raw, json) Hash identifier: dgK/kQGt8nONY6V1tdvpVLXxeCkBkERygcakwaEoTJc= Subject key identifier: 56:7D:46:45:E0:0B:74:C8:D3:D4:77:BD:2C:15:5B:DD:36:1B:8C:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862B5E9C2742778364A0580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/457b0b33-f12d-3657-bb03-37bc50be5da8.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.46.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:b5:e9:c2:74:27:78:36:4a:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=09c7b92b-c384-4e5b-a748-357e56e1f980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:3f:62:33:b6:e9:58:9c:f4:cc:b1:fa:3c: 49:7f:2c:28:f6:f2:c6:9c:da:03:84:eb:62:0e:9f: 3c:21:4d:2f:59:30:0c:a5:04:a3:71:c1:e7:70:02: 17:50:cf:66:a5:ec:21:d7:f9:72:ad:38:66:86:c8: f9:69:cf:ee:88:88:fc:0a:40:f7:f9:79:7b:46:d1: 99:90:b3:cc:47:9e:48:a1:4b:ce:3f:ea:27:27:cf: 3c:64:98:a5:35:15:dd:43:c9:20:71:e1:50:cc:88: 8c:df:5f:1b:b0:87:b3:3d:9d:2a:2b:2c:1f:c8:83: f8:0b:6c:44:b4:08:fc:ae:db:4a:97:8a:11:79:41: 2d:18:ad:66:c8:26:b1:06:28:f3:28:a4:62:6f:f4: a9:c7:dd:96:71:e1:f3:46:79:5a:b8:52:31:99:a4: 14:67:a4:ea:6d:0a:ce:7a:54:86:96:04:90:0e:52: b1:a6:88:19:d9:48:12:f1:84:1f:00:63:49:71:49: f2:b7:45:99:c9:46:03:55:be:c8:60:2d:81:cd:08: b4:32:33:3b:3d:4d:31:0c:7f:c5:d7:13:de:8e:e7: 25:e6:52:72:2a:18:71:bb:48:d8:49:61:6f:fa:2b: a3:99:ee:96:8f:c2:52:5f:1f:97:3d:31:b5:e4:a4: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:46:45:E0:0B:74:C8:D3:D4:77:BD:2C:15:5B:DD:36:1B:8C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/457b0b33-f12d-3657-bb03-37bc50be5da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.46.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ac:43:fe:92:c1:b0:60:af:51:60:95:33:78:7a:db:60:b1: f1:e8:5c:1c:d0:4d:bd:e3:02:79:e0:e2:6a:a1:0f:65:98:af: e1:c4:41:43:a1:1b:15:58:0b:01:bd:c5:b4:96:2c:fc:72:23: 50:62:5e:71:85:ef:a1:11:c8:9b:1f:27:5d:27:ff:ab:24:52: 1f:5e:3c:0b:76:f7:95:bf:68:88:da:ef:8e:80:13:11:0a:4d: b8:d9:bd:b1:5f:f7:2d:5a:b6:08:d3:f3:2e:14:cb:8e:bb:f2: fc:c2:7b:b5:4c:0e:63:10:49:f7:ee:7a:38:c4:7a:5b:b0:7d: ee:aa:e9:c5:5c:f6:e0:d9:2c:99:b6:ac:59:56:08:a4:38:01: d9:ed:9a:7c:f4:0b:8a:d8:dc:98:4c:a9:bb:67:de:1f:2c:da: ba:83:58:a9:f5:2c:23:fd:f0:ed:a6:e3:60:2e:57:2b:48:7f: 8f:e3:57:e9:bd:ab:80:8e:3c:f9:2b:60:db:32:6a:88:4d:6a: 7c:6d:d5:df:17:f2:3d:15:d9:f7:3e:7d:e6:f2:8e:6a:7e:92: 8f:00:a4:f2:31:16:cd:3d:b1:1f:fb:b9:76:02:87:d5:bc:4f: 37:69:04:37:d0:d7:9e:48:78:37:ec:04:6c:6d:77:94:e1:a6: 49:5d:3d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYrXpwnQneDZKBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDljN2I5MmItYzM4NC00ZTViLWE3NDgtMzU3ZTU2ZTFmOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZo/YjO26Vic9Myx+jxJfywo9vLGnNoDhOti Dp88IU0vWTAMpQSjccHncAIXUM9mpewh1/lyrThmhsj5ac/uiIj8CkD3+Xl7RtGZ kLPMR55IoUvOP+onJ888ZJilNRXdQ8kgceFQzIiM318bsIezPZ0qKywfyIP4C2xE tAj8rttKl4oReUEtGK1myCaxBijzKKRib/Spx92WceHzRnlauFIxmaQUZ6TqbQrO elSGlgSQDlKxpogZ2UgS8YQfAGNJcUnyt0WZyUYDVb7IYC2BzQi0MjM7PU0xDH/F 1xPejucl5lJyKhhxu0jYSWFv+iujme6Wj8JSXx+XPTG15KRxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ9RkXgC3TI09R3vSwVW902G4zZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU3YjBiMzMtZjEyZC0z NjU3LWJiMDMtMzdiYzUwYmU1ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRC60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL6sQ/6SwbBgr1FglTN4ettgsfHoXBzQTb3jAnng4mqhD2WYr+HEQUOh GxVYCwG9xbSWLPxyI1BiXnGF76ERyJsfJ10n/6skUh9ePAt295W/aIja746AExEK TbjZvbFf9y1atgjT8y4Uy4678vzCe7VMDmMQSffuejjEeluwfe6q6cVc9uDZLJm2 rFlWCKQ4Adntmnz0C4rY3JhMqbtn3h8s2rqDWKn1LCP98O2m42AuVytIf4/jV+m9 q4COPPkrYNsyaohNanxt1d8X8j0V2fc+febyjmp+ko8ApPIxFs09sR/7uXYCh9W8 TzdpBDfQ155IeDfsBGxtd5ThpkldPQk= -----END CERTIFICATE-----Generated at Tue Sep 1 12:39:16 2026 by rpki-client