$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c77d1b5-6116-33da-893c-9736eb50002d.roa File: 4c77d1b5-6116-33da-893c-9736eb50002d.roa (raw, json) Hash identifier: b24z2wFkvdmCfmyLAaxTibf+vn3fyM+HQ5MDktvl52o= Subject key identifier: E8:16:D9:6A:71:BF:C1:B9:95:27:27:5F:A7:86:C7:57:34:FB:49:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E666D3AAF0BDBC3C66A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c77d1b5-6116-33da-893c-9736eb50002d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.42.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:66:6d:3a:af:0b:db:c3:c6:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b86cd490-f933-4fa4-8b86-fea07a12d900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:2f:f8:41:0f:82:57:3f:c8:93:16:4d:69: 57:da:b6:34:86:e2:40:24:6d:c6:d1:40:9e:2c:a3: ad:cf:de:71:c0:07:e2:7a:11:29:d5:fb:31:70:5e: be:7d:1a:e4:1b:82:75:d9:00:32:9a:ee:38:41:97: 73:55:27:e9:55:02:ef:df:a7:51:83:6c:ce:88:14: 52:8e:ed:fa:2c:8b:3b:fa:90:87:5a:ea:f2:f8:6a: 1e:9d:f2:8b:0e:e8:55:ab:cb:5d:de:f4:3c:36:07: a1:c2:9a:f7:f2:83:79:a7:95:b8:68:c3:f9:82:17: 40:07:64:a7:ba:89:d1:ef:09:fe:0c:89:ac:7d:9c: 1f:af:3d:09:ae:40:9d:66:98:ff:e3:d9:61:8e:91: e2:b1:03:37:e3:9e:d4:4e:c1:1e:c0:e7:03:e6:c1: 7f:d5:a9:b0:4c:bc:ca:84:2e:0d:9f:fc:84:17:6c: 9c:8b:51:ff:de:e3:8d:aa:a3:b2:4e:4f:5a:37:41: 62:46:92:fb:97:d9:aa:c1:13:d5:ba:0a:28:4a:1b: 8d:b4:ed:b2:65:50:2c:08:39:3e:8e:36:04:5c:9f: e5:c6:52:8f:45:b0:a3:61:01:76:b3:12:42:1e:77: 32:53:78:59:c2:53:00:0d:60:33:29:0c:a9:b2:13: a6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:16:D9:6A:71:BF:C1:B9:95:27:27:5F:A7:86:C7:57:34:FB:49:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c77d1b5-6116-33da-893c-9736eb50002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:5a:f7:28:e0:30:43:e4:2f:e6:3e:9c:79:2b:46:29:c2:a7: b8:42:1b:c2:24:be:72:fa:c1:87:e3:51:29:70:d5:7f:d4:da: ba:fa:50:05:20:fe:40:07:4c:f2:7d:36:5b:a8:04:31:7c:10: d3:a9:1c:01:13:2f:1e:c9:b6:ed:af:46:f5:3f:0b:a2:44:ab: 09:95:b0:40:d0:d9:75:33:68:68:63:13:79:c3:5b:4a:97:12: 10:b5:57:86:2d:5e:5b:f7:71:03:dc:f3:ea:da:70:46:d2:79: 4c:f0:8f:53:46:8d:1f:15:87:5b:77:02:9b:90:24:58:1b:54: 61:dc:af:ac:9b:9f:49:af:4c:3c:6a:d9:04:23:5b:ab:26:66: b4:21:f5:45:9c:ca:f3:68:1f:1b:78:f0:9a:dc:66:ae:e8:6a: d0:f0:ac:b7:cd:18:52:bf:5f:cf:ec:16:8d:71:5a:23:49:a4: 18:25:31:0a:8b:e7:e3:6f:df:eb:75:7d:12:cf:2e:9e:c8:31: d4:5a:49:3c:66:92:3f:57:87:dd:7e:20:73:f8:b2:27:7e:57: bb:56:8e:98:6c:d9:6e:17:c5:c2:57:d0:d1:d1:82:ab:ac:57: 42:8e:9f:e3:b8:7d:cd:81:d3:2a:6a:6c:1b:e3:6b:4b:19:84: ad:0a:38:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmZtOq8L28PGagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Yjg2Y2Q0OTAtZjkzMy00ZmE0LThiODYtZmVhMDdhMTJkOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOwv+EEPglc/yJMWTWlX2rY0huJAJG3G0UCe LKOtz95xwAfiehEp1fsxcF6+fRrkG4J12QAymu44QZdzVSfpVQLv36dRg2zOiBRS ju36LIs7+pCHWury+GoenfKLDuhVq8td3vQ8Ngehwpr38oN5p5W4aMP5ghdAB2Sn uonR7wn+DImsfZwfrz0JrkCdZpj/49lhjpHisQM3457UTsEewOcD5sF/1amwTLzK hC4Nn/yEF2yci1H/3uONqqOyTk9aN0FiRpL7l9mqwRPVugooShuNtO2yZVAsCDk+ jjYEXJ/lxlKPRbCjYQF2sxJCHncyU3hZwlMADWAzKQypshOmKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgW2Wpxv8G5lScnX6eGx1c0+0l0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM3N2QxYjUtNjExNi0z M2RhLTg5M2MtOTczNmViNTAwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZa9yjgMEPkL+Y+nHkrRinCp7hCG8IkvnL6wYfjUSlw1X/U2rr6UAUg /kAHTPJ9NluoBDF8ENOpHAETLx7Jtu2vRvU/C6JEqwmVsEDQ2XUzaGhjE3nDW0qX EhC1V4YtXlv3cQPc8+racEbSeUzwj1NGjR8Vh1t3ApuQJFgbVGHcr6ybn0mvTDxq 2QQjW6smZrQh9UWcyvNoHxt48JrcZq7oatDwrLfNGFK/X8/sFo1xWiNJpBglMQqL 5+Nv3+t1fRLPLp7IMdRaSTxmkj9Xh91+IHP4sid+V7tWjphs2W4XxcJX0NHRgqus V0KOn+O4fc2B0ypqbBvja0sZhK0KOLw= -----END CERTIFICATE-----Generated at Tue Oct 20 14:19:08 2026 by rpki-client