$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46c0040f-80f1-3dd7-9b67-b408ae5e8a36.roa File: 46c0040f-80f1-3dd7-9b67-b408ae5e8a36.roa (raw, json) Hash identifier: agALlFhgVibwl7jXpEtPl2N8Bgo32gsBOUfQ3PWY41U= Subject key identifier: 20:FA:91:54:AC:40:6D:CD:89:6E:C9:75:12:F0:A4:F6:9D:F3:9E:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5B76C6CE3E09B5F89300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46c0040f-80f1-3dd7-9b67-b408ae5e8a36.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.32.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5b:76:c6:ce:3e:09:b5:f8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=76682e57-6ae1-4292-883d-20454429dc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:99:ba:34:4a:33:6b:eb:28:09:bc:55:c5: 5c:4d:ca:6c:6b:f1:f2:60:8e:bf:83:80:7f:2e:96: c6:30:b2:b2:32:b5:4c:db:c2:6a:67:d9:f0:a7:08: 78:5e:3b:9e:24:a6:0e:f8:d6:58:68:fd:29:a3:7e: cc:04:9b:d6:39:67:df:f6:9a:bd:05:dd:0b:34:17: 53:ee:94:f9:58:cd:d6:93:e1:84:3a:47:f0:c0:33: 24:5a:d0:95:2b:86:af:06:38:80:ff:3c:c6:ea:d4: 15:f6:b8:e7:7d:87:2a:0a:19:3d:b9:92:e3:ad:89: 5d:9e:1d:2e:06:46:48:1d:85:10:46:1f:e6:0b:97: 7a:a5:f4:57:fb:65:16:13:da:0d:76:4c:a2:6f:4b: b6:25:71:38:c2:7a:f5:ae:e5:a5:e1:33:69:c5:3a: 87:a6:4e:39:ea:1e:7c:c8:f5:76:44:fa:f0:08:23: f8:e2:d9:65:cf:eb:4d:e2:24:56:b0:81:50:7a:27: 6e:85:e6:68:2c:0a:10:3b:7e:94:09:bc:2f:2d:04: 2c:eb:88:b6:38:69:ae:4a:b7:86:dc:ce:6c:ea:81: 18:42:f7:4c:e4:c9:3e:46:2d:57:4f:9f:7f:43:d1: 2f:17:28:b0:a9:35:87:03:82:c9:3d:04:fd:8b:89: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:91:54:AC:40:6D:CD:89:6E:C9:75:12:F0:A4:F6:9D:F3:9E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46c0040f-80f1-3dd7-9b67-b408ae5e8a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1a:60:48:3f:ef:62:30:05:1f:ac:3f:94:88:40:51:48:b0: 25:2d:c4:00:60:3e:39:6d:8e:52:7c:3f:78:aa:56:fa:de:37: 48:e7:bc:90:b5:d8:f4:1d:ce:00:70:81:7e:b6:3e:60:ce:eb: 81:fe:23:20:78:38:3d:f2:ae:d4:b6:7e:ec:b6:e8:a9:80:72: e6:af:97:b6:af:2f:46:fc:21:c9:9f:d4:fd:43:24:01:2e:15: 7e:4f:7d:f2:d8:54:5f:65:78:6c:5e:0f:75:7a:43:13:10:7d: d1:01:65:3e:4b:8e:0c:46:d6:4c:11:76:eb:33:a1:58:42:e2: 28:82:21:26:e9:1d:16:07:2a:d8:da:6c:28:fc:cf:2f:9f:e6: 61:a6:b3:9d:6e:6a:91:09:26:10:b2:6f:c3:c9:be:37:3b:b4: ae:29:e1:5a:04:4d:4b:98:7e:fd:b0:26:a9:f6:db:3a:63:37: cd:c0:6f:79:32:5e:e2:70:dc:d1:6b:ab:bd:93:47:d4:40:28: df:10:82:bf:6f:27:79:ee:67:34:dd:b5:02:bc:38:1b:be:23: 50:9c:80:98:59:47:8c:5b:a3:14:5e:1a:0c:a6:34:92:ec:2d: dd:3d:3c:68:13:42:81:24:62:4f:c4:82:ca:0e:74:2f:7c:23: 5d:85:8f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tlt2xs4+CbX4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NzY2ODJlNTctNmFlMS00MjkyLTg4M2QtMjA0NTQ0MjlkYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHuZujRKM2vrKAm8VcVcTcpsa/HyYI6/g4B/ LpbGMLKyMrVM28JqZ9nwpwh4XjueJKYO+NZYaP0po37MBJvWOWff9pq9Bd0LNBdT 7pT5WM3Wk+GEOkfwwDMkWtCVK4avBjiA/zzG6tQV9rjnfYcqChk9uZLjrYldnh0u BkZIHYUQRh/mC5d6pfRX+2UWE9oNdkyib0u2JXE4wnr1ruWl4TNpxTqHpk456h58 yPV2RPrwCCP44tllz+tN4iRWsIFQeiduheZoLAoQO36UCbwvLQQs64i2OGmuSreG 3M5s6oEYQvdM5Mk+Ri1XT59/Q9EvFyiwqTWHA4LJPQT9i4nOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD6kVSsQG3NiW7JdRLwpPad857JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDZjMDA0MGYtODBmMS0z ZGQ3LTliNjctYjQwOGFlNWU4YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8aYEg/72IwBR+sP5SIQFFIsCUtxABgPjltjlJ8P3iqVvreN0jnvJC1 2PQdzgBwgX62PmDO64H+IyB4OD3yrtS2fuy26KmAcuavl7avL0b8Icmf1P1DJAEu FX5PffLYVF9leGxeD3V6QxMQfdEBZT5LjgxG1kwRduszoVhC4iiCISbpHRYHKtja bCj8zy+f5mGms51uapEJJhCyb8PJvjc7tK4p4VoETUuYfv2wJqn22zpjN83Ab3ky XuJw3NFrq72TR9RAKN8Qgr9vJ3nuZzTdtQK8OBu+I1CcgJhZR4xboxReGgymNJLs Ld09PGgTQoEkYk/EgsoOdC98I12Fj4E= -----END CERTIFICATE-----Generated at Wed Oct 21 11:01:15 2026 by rpki-client