$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f0a803-d5e1-3fb6-8563-9b95923a164a.roa File: 64f0a803-d5e1-3fb6-8563-9b95923a164a.roa (raw, json) Hash identifier: Jdv4CbRQsw+XylQ7SgnBAlbMLbU/yAUHmRs25FEeBQc= Subject key identifier: 88:B6:5C:33:92:CB:DE:F0:C6:C4:D3:66:80:F5:80:82:66:75:4F:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C0641CB4580903A37C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f0a803-d5e1-3fb6-8563-9b95923a164a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c0:64:1c:b4:58:09:03:a3:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=40dbfcb4-07b3-4e8f-8f27-70a50ddffcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:94:0c:9c:7c:80:cd:7f:91:42:b6:9d:c6: 7c:ff:eb:1f:f3:50:5e:f6:d7:b3:ef:9b:1f:ce:7f: e2:f3:82:b3:34:54:75:ef:f7:37:4c:a9:90:b4:4d: cb:68:ce:ce:f1:3b:54:68:f0:49:2f:64:14:e3:06: 13:17:f9:ba:4a:ca:57:22:17:d5:5b:75:cb:94:3e: 33:bc:d1:e0:ad:27:0d:a5:9c:ba:b7:9c:aa:a0:fa: af:fa:e9:46:39:ba:25:a9:d9:56:37:ba:99:ce:d4: 5a:02:4b:b4:d0:f5:87:da:d6:62:08:c2:65:e1:ad: c1:61:fe:d4:bd:66:80:dd:67:c6:93:0d:0f:5a:2d: dc:3a:d3:58:86:71:2f:2a:7a:68:22:c7:c3:2b:a8: a1:3d:09:f7:86:48:de:48:50:c0:0e:3d:86:8f:a1: db:e8:a9:76:1e:09:c9:aa:d5:76:b9:14:70:0e:05: fc:bc:9a:8b:37:4e:51:dd:1a:8c:d6:ad:f5:4f:b9: e7:66:f5:75:a7:5d:f7:05:43:48:b7:14:02:37:5d: fa:53:ec:29:89:54:3e:d9:3c:d5:76:0e:d8:b9:3d: 9f:c7:9e:a2:a0:aa:7d:9e:1b:b9:d3:b7:32:14:3f: 5b:49:19:7f:b3:9d:c5:34:4d:4b:16:db:3f:5a:6a: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B6:5C:33:92:CB:DE:F0:C6:C4:D3:66:80:F5:80:82:66:75:4F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64f0a803-d5e1-3fb6-8563-9b95923a164a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c2:f7:e7:bd:44:3f:8d:75:3e:9c:91:33:e0:95:57:2d:dc: 7f:7b:bb:38:2c:74:eb:af:62:9c:14:83:5d:1c:52:71:8a:30: c5:b0:5a:50:17:16:42:ff:c4:35:c9:22:12:54:e8:2c:c5:6e: 79:04:69:60:f9:10:51:1f:39:81:35:86:a6:c5:3d:e7:6f:c2: f5:a2:a0:33:89:a6:e8:08:ce:e5:7b:20:e4:d6:82:da:89:6f: cd:f9:72:5c:b8:98:e1:97:18:a4:f8:f2:07:3f:a9:41:b9:80: 76:ff:79:10:ae:ad:92:bf:d7:30:eb:97:8b:b6:3e:37:ba:75: ca:00:12:98:2d:48:1b:75:92:ae:b4:36:ac:de:3c:8c:8b:d3: 17:78:f3:b5:50:64:17:d1:73:5f:f2:4b:91:2b:c7:1d:6b:5a: 6a:15:08:b5:8c:65:ec:1d:28:8e:3f:4a:4a:e0:b4:7b:34:1f: 79:e7:7e:00:c6:40:a6:9c:1b:0c:69:18:78:40:44:fd:94:4c: 04:ac:4f:de:05:4c:ac:df:5f:05:9e:6e:04:4c:08:99:07:6a: b4:8b:fa:97:ea:43:d2:17:1c:3c:72:78:2e:ca:85:c3:d2:ad: 3a:7c:97:2d:aa:e2:48:18:a7:70:aa:98:c0:09:ca:30:8a:67: 9e:21:42:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsBkHLRYCQOjfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDBkYmZjYjQtMDdiMy00ZThmLThmMjctNzBhNTBkZGZmY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWiUDJx8gM1/kUK2ncZ8/+sf81Be9tez75sf zn/i84KzNFR17/c3TKmQtE3LaM7O8TtUaPBJL2QU4wYTF/m6SspXIhfVW3XLlD4z vNHgrScNpZy6t5yqoPqv+ulGObolqdlWN7qZztRaAku00PWH2tZiCMJl4a3BYf7U vWaA3WfGkw0PWi3cOtNYhnEvKnpoIsfDK6ihPQn3hkjeSFDADj2Gj6Hb6Kl2HgnJ qtV2uRRwDgX8vJqLN05R3RqM1q31T7nnZvV1p133BUNItxQCN136U+wpiVQ+2TzV dg7YuT2fx56ioKp9nhu507cyFD9bSRl/s53FNE1LFts/WmrcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi2XDOSy97wxsTTZoD1gIJmdU+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRmMGE4MDMtZDVlMS0z ZmI2LTg1NjMtOWI5NTkyM2ExNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDx6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnC9+e9RD+NdT6ckTPglVct3H97uzgsdOuvYpwUg10cUnGKMMWwWlAX FkL/xDXJIhJU6CzFbnkEaWD5EFEfOYE1hqbFPedvwvWioDOJpugIzuV7IOTWgtqJ b835cly4mOGXGKT48gc/qUG5gHb/eRCurZK/1zDrl4u2Pje6dcoAEpgtSBt1kq60 NqzePIyL0xd487VQZBfRc1/yS5Erxx1rWmoVCLWMZewdKI4/SkrgtHs0H3nnfgDG QKacGwxpGHhARP2UTASsT94FTKzfXwWebgRMCJkHarSL+pfqQ9IXHDxyeC7KhcPS rTp8ly2q4kgYp3CqmMAJyjCKZ54hQqA= -----END CERTIFICATE-----Generated at Tue Sep 1 05:34:01 2026 by rpki-client