$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458c40fa-64eb-3489-ba18-95f51d39c90e.roa File: 458c40fa-64eb-3489-ba18-95f51d39c90e.roa (raw, json) Hash identifier: pylaZV/cARw6atg65B8koI2p46gqWOcfaRzSsmC7OGc= Subject key identifier: C9:6B:65:92:3E:D3:58:2F:82:53:8C:09:E1:C7:8D:7D:AD:EB:F9:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BDF539B95B98FCDF4E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458c40fa-64eb-3489-ba18-95f51d39c90e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.56.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:bd:f5:39:b9:5b:98:fc:df:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=9da9b2ec-d068-4e16-bef8-b41a69f954fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:3a:02:d5:26:1b:76:52:8f:cc:54:15:85: da:31:47:8e:2a:e7:83:35:13:dc:dc:8b:93:09:f2: 90:ea:3d:51:4c:8c:e0:13:d6:27:ce:40:d9:05:86: cd:cc:fc:f4:1b:a0:a0:05:a9:4c:71:29:34:3c:1d: 6f:92:01:71:24:6e:60:27:46:de:bf:d5:64:fb:c9: 2d:eb:b3:fa:4d:ef:3b:87:54:ad:a7:90:47:cb:ea: 54:39:30:63:a4:03:99:2f:47:45:3d:22:87:98:82: b6:d5:cd:e4:6a:0b:b8:d4:30:7a:4b:d7:19:1d:33: 39:9e:e8:e9:40:9c:4f:5e:47:c2:72:ef:a4:d2:44: a4:4e:e4:1f:8e:a0:e7:29:d6:f1:f8:d9:28:82:86: 9d:eb:90:c5:39:e1:8a:16:37:1e:5f:c7:df:27:bc: ff:47:25:9d:58:67:17:be:7c:c7:88:7c:27:7b:e5: 9a:66:4b:60:75:fe:92:62:ff:9e:10:8a:8f:7d:a9: 07:7e:a9:15:94:b1:ff:33:77:af:24:54:59:b8:e5: 7a:0d:1b:31:44:88:f9:6f:a3:5a:e8:b6:ad:fd:24: 8c:99:e3:62:1d:64:90:6a:14:85:c2:42:f4:30:2d: 9f:1e:4a:a3:d6:5c:48:33:64:ed:0c:04:89:d7:ec: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6B:65:92:3E:D3:58:2F:82:53:8C:09:E1:C7:8D:7D:AD:EB:F9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/458c40fa-64eb-3489-ba18-95f51d39c90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:2c:5e:32:db:38:50:42:95:d5:41:98:c2:c8:23:61:99:8b: a5:ff:0c:de:39:78:25:fd:8d:05:76:92:18:c7:68:82:7a:28: a7:dd:f2:11:09:36:87:e4:3a:20:a4:e8:3c:3b:1e:33:90:88: 39:32:74:f3:4d:c7:5c:ce:c0:97:5b:71:32:82:9f:63:b1:8d: eb:eb:61:14:9b:ae:b7:b5:20:66:81:cf:37:6c:37:32:3e:f0: 91:4a:5c:5a:41:4d:4f:62:2b:33:35:84:4d:a0:ae:7f:73:7f: 1c:ee:dc:79:b0:42:af:85:55:a4:91:94:0b:a3:8a:1e:45:cc: 9f:4f:06:40:5a:a3:4c:3c:37:fc:2e:5a:28:80:0f:02:5d:fe: b3:26:85:9b:8a:0d:b9:dc:13:b1:ad:cd:68:05:7d:1d:9e:71: a8:67:7d:43:06:66:f8:1b:24:77:bc:d1:56:4c:51:5a:b6:2a: 39:36:ec:6b:a6:24:0f:f2:fc:d9:c9:c9:41:c2:d0:f6:d1:5d: 13:62:d3:f8:a1:ac:94:11:1c:f4:25:09:dd:00:62:46:03:13: 54:80:22:15:4a:71:f1:c5:9e:16:bf:e4:fe:43:da:37:b6:e0: cc:1a:8e:2d:c7:35:a8:fe:22:40:04:67:5c:d0:c7:92:3d:be: 03:48:e4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr31OblbmPzfToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OWRhOWIyZWMtZDA2OC00ZTE2LWJlZjgtYjQxYTY5Zjk1NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxM6AtUmG3ZSj8xUFYXaMUeOKueDNRPc3IuT CfKQ6j1RTIzgE9YnzkDZBYbNzPz0G6CgBalMcSk0PB1vkgFxJG5gJ0bev9Vk+8kt 67P6Te87h1Stp5BHy+pUOTBjpAOZL0dFPSKHmIK21c3kagu41DB6S9cZHTM5nujp QJxPXkfCcu+k0kSkTuQfjqDnKdbx+Nkogoad65DFOeGKFjceX8ffJ7z/RyWdWGcX vnzHiHwne+WaZktgdf6SYv+eEIqPfakHfqkVlLH/M3evJFRZuOV6DRsxRIj5b6Na 6Lat/SSMmeNiHWSQahSFwkL0MC2fHkqj1lxIM2TtDASJ1+zF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlrZZI+01gvglOMCeHHjX2t6/nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDU4YzQwZmEtNjRlYi0z NDg5LWJhMTgtOTVmNTFkMzljOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALssXjLbOFBCldVBmMLII2GZi6X/DN45eCX9jQV2khjHaIJ6KKfd8hEJ NofkOiCk6Dw7HjOQiDkydPNNx1zOwJdbcTKCn2OxjevrYRSbrre1IGaBzzdsNzI+ 8JFKXFpBTU9iKzM1hE2grn9zfxzu3HmwQq+FVaSRlAujih5FzJ9PBkBao0w8N/wu WiiADwJd/rMmhZuKDbncE7GtzWgFfR2ecahnfUMGZvgbJHe80VZMUVq2Kjk27Gum JA/y/NnJyUHC0PbRXRNi0/ihrJQRHPQlCd0AYkYDE1SAIhVKcfHFnha/5P5D2je2 4Mwaji3HNaj+IkAEZ1zQx5I9vgNI5Ag= -----END CERTIFICATE-----Generated at Tue Sep 1 05:22:47 2026 by rpki-client