$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa File: 4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa (raw, json) Hash identifier: Y3nVCwKK54d3G1fIHfApncdjIUynuvUVsNyQdVV36VQ= Subject key identifier: 8C:20:17:11:D8:B8:A9:09:E8:AA:AE:3C:00:B0:E3:19:0D:65:25:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A4DA06F242AC975616700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 68.86.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:4d:a0:6f:24:2a:c9:75:61:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4e1bd48-31ae-45fe-82e5-0e10deb84b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:25:8e:14:5a:57:5c:3a:ea:0b:9a:2d:7a: 51:fb:ad:6a:03:4a:ce:10:27:cd:02:a2:c0:7b:67: 2f:3f:17:0f:c4:ae:d8:59:f6:fa:16:02:64:22:17: f1:21:98:4f:d8:de:aa:03:49:18:8a:37:44:00:46: 38:07:e6:f4:ea:e2:29:e3:e4:99:8b:22:d8:a5:08: 8a:df:e0:e8:d9:14:07:7e:1a:e7:6f:97:4a:a5:e5: 00:05:38:75:73:56:01:b4:4c:e8:bd:88:f9:34:12: 6b:27:a7:1b:ac:96:79:c0:f0:57:52:96:34:78:82: 31:02:91:f2:00:bc:81:e3:02:e3:17:bc:e6:86:f0: 14:56:91:df:c5:7b:96:ee:27:ee:70:77:3c:64:3d: fe:ff:c3:a9:54:60:f4:33:8b:9e:34:f1:f9:a2:de: d3:8b:11:15:ab:cf:9f:67:c6:31:ff:a3:18:6e:a5: 60:8e:6f:90:b0:8f:78:59:86:40:1a:ab:03:69:5f: 90:dd:11:19:4b:c5:29:9d:aa:0c:8e:af:be:2c:ab: 1a:a1:63:eb:76:56:34:7d:e1:99:0e:63:bb:27:0b: d0:46:dc:84:21:26:56:f9:58:3c:d0:c8:7e:3b:e0: bc:9b:3e:84:d3:ac:31:df:64:ee:eb:01:45:ea:37: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:20:17:11:D8:B8:A9:09:E8:AA:AE:3C:00:B0:E3:19:0D:65:25:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d456aa8-e6b9-34ac-97c0-493b64577dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:16:f3:04:21:69:9c:c7:6e:98:ed:cd:1b:d0:26:c3:e2: f9:93:61:47:5b:6b:6c:e6:10:e0:bb:89:db:14:c0:8e:d7:ff: e7:51:a9:a4:c8:02:fa:42:5c:c2:c9:97:e3:fd:5a:09:69:b4: 8c:b6:b6:fe:a6:3d:51:f6:cd:5d:89:14:4b:43:e4:eb:83:db: d5:2b:5e:df:88:f7:af:64:b2:bc:c9:e5:18:7f:08:48:ec:e5: 9a:09:84:09:90:e7:93:fa:a2:51:59:8e:a9:ab:d2:b8:a2:a0: 73:d1:5c:d3:bb:23:e2:b9:3c:d9:40:4b:cf:5f:e7:59:c3:43: 5a:16:1c:eb:c3:80:93:9a:d8:22:e7:f3:64:4f:69:ae:d0:d0: f7:67:e6:e9:bf:27:60:ed:b8:5e:e7:bd:46:77:b0:db:8a:1e: 39:63:a2:91:5f:b4:a7:cf:d4:67:25:ca:a3:83:83:e3:d4:a3: 7b:59:db:60:c7:cb:20:f3:dd:47:32:5b:d4:b0:70:fd:30:34: 4b:7a:0e:98:c5:22:d3:b7:ca:3b:11:5d:9c:15:6b:9e:45:2e: 8b:40:6a:af:b2:7e:d0:cf:21:17:1d:d2:4d:15:f4:6d:a2:28: 70:ef:54:67:ea:99:99:22:53:7c:90:ca:8d:6b:18:c8:fe:c7: 10:4b:96:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jek2gbyQqyXVhZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRlMWJkNDgtMzFhZS00NWZlLTgyZTUtMGUxMGRlYjg0YjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArscljhRaV1w66guaLXpR+61qA0rOECfNAqLA e2cvPxcPxK7YWfb6FgJkIhfxIZhP2N6qA0kYijdEAEY4B+b06uIp4+SZiyLYpQiK 3+Do2RQHfhrnb5dKpeUABTh1c1YBtEzovYj5NBJrJ6cbrJZ5wPBXUpY0eIIxApHy ALyB4wLjF7zmhvAUVpHfxXuW7ifucHc8ZD3+/8OpVGD0M4ueNPH5ot7TixEVq8+f Z8Yx/6MYbqVgjm+QsI94WYZAGqsDaV+Q3REZS8UpnaoMjq++LKsaoWPrdlY0feGZ DmO7JwvQRtyEISZW+Vg80Mh+O+C8mz6E06wx32Tu6wFF6jcqaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwgFxHYuKkJ6KquPACw4xkNZSUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ0NTZhYTgtZTZiOS0z NGFjLTk3YzAtNDkzYjY0NTc3ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzIFvMEIWmcx26Y7c0b0CbD4vmTYUdba2zmEOC7idsUwI7X/+dRqaTI AvpCXMLJl+P9WglptIy2tv6mPVH2zV2JFEtD5OuD29UrXt+I969ksrzJ5Rh/CEjs 5ZoJhAmQ55P6olFZjqmr0riioHPRXNO7I+K5PNlAS89f51nDQ1oWHOvDgJOa2CLn 82RPaa7Q0Pdn5um/J2DtuF7nvUZ3sNuKHjljopFftKfP1GclyqODg+PUo3tZ22DH yyDz3UcyW9SwcP0wNEt6DpjFItO3yjsRXZwVa55FLotAaq+yftDPIRcd0k0V9G2i KHDvVGfqmZkiU3yQyo1rGMj+xxBLlrE= -----END CERTIFICATE-----Generated at Tue Oct 20 18:31:08 2026 by rpki-client