$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e82f02b-e8aa-33c3-90e0-2b8da4268136.roa File: 5e82f02b-e8aa-33c3-90e0-2b8da4268136.roa (raw, json) Hash identifier: 1pWjvTf/yB5wZhKPN9x9JQLktsBD6ntJ3zcPlcX4MZc= Subject key identifier: 0F:2A:39:B4:90:3B:77:12:D8:EA:22:25:15:7F:15:8D:AE:E2:84:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C0428208E218B9F55980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e82f02b-e8aa-33c3-90e0-2b8da4268136.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c0:42:82:08:e2:18:b9:f5:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=be02c7bc-169c-4ac7-a0ec-c9c2a25b59d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:3d:88:79:f9:30:ac:a3:58:26:89:94:2e: ed:36:ff:40:e1:01:df:7a:08:89:21:1b:60:d4:40: 3d:cc:54:06:59:f4:99:fe:5b:02:7d:91:34:16:97: de:a7:11:f0:50:60:26:ad:1c:90:f7:88:f5:d1:3f: 31:27:53:f6:78:a5:36:96:4b:27:83:a8:1c:b5:4b: 99:cc:30:93:da:d1:aa:fa:f3:2f:32:f2:14:68:24: 72:09:32:59:6d:11:44:87:fc:18:b5:5e:31:2a:68: 72:d1:cd:e8:27:43:e4:3c:73:1c:80:b4:a1:74:ae: 48:28:7e:19:b3:8e:60:53:5a:a8:c7:c1:0a:71:ec: 39:75:56:fa:2d:69:a7:51:7c:92:6d:33:4e:72:92: 61:2e:1f:a2:9a:1b:c2:98:79:c3:78:cb:7c:cf:0b: a5:3e:c2:07:1c:85:7c:29:e0:e8:95:14:72:20:28: cc:85:93:e1:a9:53:a1:c7:ae:75:18:dd:2f:c0:4b: 06:b0:c6:b8:f6:14:4a:92:a4:d7:7b:f4:af:56:06: 65:d9:63:5c:56:fe:70:16:33:bc:bb:6a:09:6c:e5: 56:1a:04:2a:55:fa:96:9c:b8:99:ef:ae:09:f0:0c: f0:a1:9b:66:3e:64:bb:fb:c2:52:3a:8b:be:8e:a6: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2A:39:B4:90:3B:77:12:D8:EA:22:25:15:7F:15:8D:AE:E2:84:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e82f02b-e8aa-33c3-90e0-2b8da4268136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8e:18:8c:ef:8c:90:9a:fd:93:c3:8b:a6:c2:0e:d4:9d:82: 61:25:04:70:d6:5a:13:2c:bb:1c:c9:3e:1d:57:ca:e1:38:11: d6:da:fe:54:d1:5a:34:bb:65:d0:fa:d1:f5:cf:85:33:18:98: eb:44:ef:52:13:85:5f:20:d2:03:93:36:dc:76:fc:87:cc:2a: fb:53:53:a3:c8:60:88:ab:c0:83:5d:f7:70:d8:5e:75:f6:6b: 61:aa:23:f6:28:28:cb:92:75:6e:4e:bc:40:73:99:fe:b2:c7: ae:d1:2e:27:96:d7:41:65:08:4b:89:22:79:28:28:4d:e7:58: 06:2f:fb:4d:dc:8c:0f:6b:02:f5:88:fa:8b:68:ef:01:6a:24: 1b:8f:2b:eb:77:00:38:59:a8:5b:4d:58:45:41:ad:40:2f:ca: 91:ad:00:78:25:4c:51:16:e1:31:65:ee:e4:ba:58:d0:17:2d: 6b:58:9d:47:e1:d9:fa:7e:c6:36:36:ec:de:2e:4f:d9:6e:ad: 02:48:d7:b5:43:a7:43:e7:c7:03:c5:f2:6f:30:7d:e5:f4:4b: 17:cf:c6:35:d4:f8:a1:e1:23:29:b8:4f:84:78:d7:c4:b0:41: 36:a7:50:1f:43:75:d9:6d:44:92:28:ab:3b:e3:4d:95:45:bd: 38:98:db:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsBCggjiGLn1WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YmUwMmM3YmMtMTY5Yy00YWM3LWEwZWMtYzljMmEyNWI1OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttY9iHn5MKyjWCaJlC7tNv9A4QHfegiJIRtg 1EA9zFQGWfSZ/lsCfZE0FpfepxHwUGAmrRyQ94j10T8xJ1P2eKU2lksng6gctUuZ zDCT2tGq+vMvMvIUaCRyCTJZbRFEh/wYtV4xKmhy0c3oJ0PkPHMcgLShdK5IKH4Z s45gU1qox8EKcew5dVb6LWmnUXySbTNOcpJhLh+imhvCmHnDeMt8zwulPsIHHIV8 KeDolRRyICjMhZPhqVOhx651GN0vwEsGsMa49hRKkqTXe/SvVgZl2WNcVv5wFjO8 u2oJbOVWGgQqVfqWnLiZ764J8AzwoZtmPmS7+8JSOou+jqbNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8qObSQO3cS2OoiJRV/FY2u4oS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWU4MmYwMmItZThhYS0z M2MzLTkwZTAtMmI4ZGE0MjY4MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGOGIzvjJCa/ZPDi6bCDtSdgmElBHDWWhMsuxzJPh1XyuE4Edba/lTR WjS7ZdD60fXPhTMYmOtE71IThV8g0gOTNtx2/IfMKvtTU6PIYIirwINd93DYXnX2 a2GqI/YoKMuSdW5OvEBzmf6yx67RLieW10FlCEuJInkoKE3nWAYv+03cjA9rAvWI +oto7wFqJBuPK+t3ADhZqFtNWEVBrUAvypGtAHglTFEW4TFl7uS6WNAXLWtYnUfh 2fp+xjY27N4uT9lurQJI17VDp0PnxwPF8m8wfeX0SxfPxjXU+KHhIym4T4R418Sw QTanUB9DddltRJIoqzvjTZVFvTiY2zk= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:33 2026 by rpki-client