$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa File: 5c55c342-3199-32d1-98d9-557314814e8d.roa (raw, json) Hash identifier: MlsTdqDKT2B+2BpVx+bWoQNy30XU2rYXA4H7l34G1xY= Subject key identifier: 3D:BC:17:8C:39:72:54:B8:8F:7C:9A:17:80:5D:51:9A:61:5A:01:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F9317776A6B7D37B3E300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.40.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:93:17:77:6a:6b:7d:37:b3:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=5102b7cf-7744-4443-9946-4bd339172801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6d:59:72:5b:17:07:73:ad:7c:b5:10:89:98: 35:ad:12:b7:91:71:a6:83:5d:98:dd:a7:11:c5:e3: 65:e7:b3:54:64:84:0a:46:03:f7:b6:a1:e9:b5:a4: 56:25:7e:51:db:6a:fb:86:9b:9e:b4:17:cd:70:fc: b5:08:dd:cb:26:4d:4d:72:e3:91:b5:c1:a8:b7:2c: db:b6:39:7c:ec:e6:14:cd:f9:6d:9e:d9:33:72:96: 1d:0d:a3:dc:8f:11:07:bf:22:44:09:01:dd:74:78: 69:48:67:5d:85:f3:7d:af:de:45:02:d4:98:15:cf: 9c:77:ad:0f:dc:b7:d9:c4:ac:f5:21:1a:63:98:d5: 2d:d3:9e:56:8b:ae:dd:be:a9:0c:32:c6:e2:0e:dd: ea:79:1b:0b:7d:49:76:7c:01:25:61:7e:0c:06:c5: b5:b5:f5:03:fd:72:b8:1e:24:b9:37:09:1e:5c:57: 48:a7:3a:79:80:c9:64:2f:46:86:59:7b:66:bc:3d: 5a:0c:d0:74:ce:d9:95:b7:de:52:9c:de:ae:ec:17: d5:d6:3b:b4:a7:ef:a8:9c:2e:7f:62:de:42:13:60: 49:0a:2b:5e:d2:69:41:98:f5:2f:51:eb:68:ab:bc: d3:f0:b0:c2:d0:67:87:ee:58:56:f1:10:f1:73:38: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:17:8C:39:72:54:B8:8F:7C:9A:17:80:5D:51:9A:61:5A:01:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55c342-3199-32d1-98d9-557314814e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:08:08:dc:e1:1a:83:93:d7:4a:ca:dc:7b:04:68:87:ce:9d: b0:75:d8:a6:04:e8:4c:6b:ea:02:1e:f7:a1:a9:36:f0:cd:0a: 20:65:50:f2:be:f4:e9:09:07:15:db:00:25:da:6f:66:73:77: a2:07:f8:6e:85:67:e1:45:80:7b:1b:26:9d:f3:5a:53:68:c5: 02:73:6e:69:fa:49:bf:77:6d:90:c4:2f:47:1d:1e:5a:c2:c5: 3d:3e:a5:29:01:7a:6b:02:03:07:0b:d9:c7:92:13:c0:8e:25: 2a:35:16:f1:29:8f:7a:7b:5a:29:82:c4:97:7b:a3:21:a0:3a: 79:3b:94:f8:ad:7a:56:6e:c1:96:5f:89:70:c6:07:93:49:8a: cd:36:97:b8:30:d9:09:07:7a:53:3e:7c:54:0c:02:bb:10:56: db:bc:ff:19:c7:e2:24:31:60:dc:71:61:d1:75:85:aa:cb:98: 16:ab:be:99:dd:e3:db:4f:42:be:73:14:60:37:ab:71:a0:d8: 6c:78:57:fc:ab:49:e7:52:ac:42:ff:ad:7d:4f:e1:18:f0:4a: f2:2b:64:ce:62:4c:17:d1:71:d3:35:ff:92:f7:85:a0:c0:92: 33:7f:bc:5a:e9:65:e5:9c:6b:f3:98:80:0e:5a:45:75:b6:32: 46:51:b0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5MXd2prfTez4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTEwMmI3Y2YtNzc0NC00NDQzLTk5NDYtNGJkMzM5MTcyODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA921ZclsXB3OtfLUQiZg1rRK3kXGmg12Y3acR xeNl57NUZIQKRgP3tqHptaRWJX5R22r7hpuetBfNcPy1CN3LJk1NcuORtcGotyzb tjl87OYUzfltntkzcpYdDaPcjxEHvyJECQHddHhpSGddhfN9r95FAtSYFc+cd60P 3LfZxKz1IRpjmNUt055Wi67dvqkMMsbiDt3qeRsLfUl2fAElYX4MBsW1tfUD/XK4 HiS5NwkeXFdIpzp5gMlkL0aGWXtmvD1aDNB0ztmVt95SnN6u7BfV1ju0p++onC5/ Yt5CE2BJCite0mlBmPUvUetoq7zT8LDC0GeH7lhW8RDxcziNsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD28F4w5clS4j3yaF4BdUZphWgFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM1NWMzNDItMzE5OS0z MmQxLTk4ZDktNTU3MzE0ODE0ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkICNzhGoOT10rK3HsEaIfOnbB12KYE6Exr6gIe96GpNvDNCiBlUPK+ 9OkJBxXbACXab2Zzd6IH+G6FZ+FFgHsbJp3zWlNoxQJzbmn6Sb93bZDEL0cdHlrC xT0+pSkBemsCAwcL2ceSE8COJSo1FvEpj3p7WimCxJd7oyGgOnk7lPitelZuwZZf iXDGB5NJis02l7gw2QkHelM+fFQMArsQVtu8/xnH4iQxYNxxYdF1harLmBarvpnd 49tPQr5zFGA3q3Gg2Gx4V/yrSedSrEL/rX1P4RjwSvIrZM5iTBfRcdM1/5L3haDA kjN/vFrpZeWca/OYgA5aRXW2MkZRsEg= -----END CERTIFICATE-----Generated at Sat Oct 24 18:12:52 2026 by rpki-client