$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7494e476-6c8a-3dad-8d30-9569f71ee756.roa File: 7494e476-6c8a-3dad-8d30-9569f71ee756.roa (raw, json) Hash identifier: uXDrH3wZOAftIJcg047O/NoNxMJafBuo9MhvJBNWLVk= Subject key identifier: 3C:FE:5F:91:0B:CF:93:ED:A8:19:35:55:83:4D:F6:75:1C:00:E0:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F92DDF95EF45A9B1AA1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7494e476-6c8a-3dad-8d30-9569f71ee756.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.40.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:92:dd:f9:5e:f4:5a:9b:1a:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d6ac97df-4b90-4ac6-87c1-1e085df026e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:83:69:7d:38:14:95:f8:4a:cb:aa:d3:15: 10:22:e6:68:58:f4:93:45:2f:0b:d9:c0:e3:fa:f3: 6a:0e:83:a9:fb:66:d7:27:6f:11:9f:e7:ad:9f:92: f2:5a:c2:0d:8a:09:43:7d:8f:60:8c:52:6d:79:04: af:89:c5:25:a6:2d:c0:6b:0a:68:a8:1f:bf:68:05: 67:38:e6:27:34:39:cc:6e:9e:93:d1:86:26:f9:bd: fb:be:45:e6:21:e3:4c:c3:45:1c:39:5c:e9:1b:11: c2:90:96:99:88:0a:89:e4:93:21:e1:d2:8d:0e:fd: d6:0a:39:89:43:89:95:06:79:83:7d:77:43:80:53: 5d:4a:93:e5:f7:11:6d:7d:6d:0f:aa:3b:b0:8f:25: 99:38:e6:51:51:e6:90:dc:bc:62:56:e1:08:9a:58: 71:e9:16:78:f6:fe:88:66:56:0b:9e:eb:ae:a8:19: 29:20:68:d1:74:86:5c:b8:a1:a8:c6:3e:4d:43:3b: e0:25:de:0a:32:32:30:eb:79:5d:b1:4a:0b:4f:77: 23:0a:d6:a9:fd:1e:da:5e:5d:e7:a1:88:ff:e9:8b: d2:cc:5b:98:54:71:ca:e6:39:c0:b7:37:93:01:d1: 30:83:04:6b:88:e4:17:66:f5:f2:60:93:3b:7f:7c: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:5F:91:0B:CF:93:ED:A8:19:35:55:83:4D:F6:75:1C:00:E0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7494e476-6c8a-3dad-8d30-9569f71ee756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:56:2a:8d:67:a9:ea:6b:c4:41:17:32:a9:44:ff:04:2a:91: e8:fb:56:6f:c3:3c:a2:90:17:60:d3:a5:68:f5:2b:a9:dc:d4: 5a:02:42:fa:8c:e2:ee:8a:7a:c7:f3:d6:60:26:f0:35:38:48: 09:31:11:ef:1c:fd:a8:e2:84:a2:2c:36:aa:8b:db:f5:f7:87: d4:89:e5:e8:ee:c2:cc:aa:a3:c2:57:c1:0d:18:00:af:6d:57: fa:95:b9:ca:1f:71:59:8f:b7:71:c4:bd:ca:94:db:01:de:f6: c6:16:30:bf:80:ad:ff:73:56:60:d9:a7:c1:84:60:ba:44:68: 89:4b:f5:35:64:10:22:14:c7:1e:92:e8:9d:a9:23:77:05:45: d0:eb:ba:ae:7a:cd:9e:59:47:a9:96:99:ff:60:cc:96:45:c6: d8:7b:e2:a6:c8:ed:53:1c:ee:b2:40:a3:68:2f:3d:5a:61:ec: b0:ee:99:de:21:c4:94:76:ad:83:b0:98:6a:b7:fa:98:3a:5a: 7b:f4:19:b9:3d:fe:e5:fb:72:2c:2b:3f:1c:b6:db:34:e6:e9: 8b:2b:d6:ce:b8:49:dc:af:a5:b2:76:8b:bf:ad:bb:01:66:1b: 54:27:b0:32:77:5d:b6:f9:e5:ab:2b:bc:00:82:5e:3d:28:c1: 72:5a:e2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5Ld+V70WpsaocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDZhYzk3ZGYtNGI5MC00YWM2LTg3YzEtMWUwODVkZjAyNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ODaX04FJX4Ssuq0xUQIuZoWPSTRS8L2cDj +vNqDoOp+2bXJ28Rn+etn5LyWsINiglDfY9gjFJteQSvicUlpi3AawpoqB+/aAVn OOYnNDnMbp6T0YYm+b37vkXmIeNMw0UcOVzpGxHCkJaZiAqJ5JMh4dKNDv3WCjmJ Q4mVBnmDfXdDgFNdSpPl9xFtfW0PqjuwjyWZOOZRUeaQ3LxiVuEImlhx6RZ49v6I ZlYLnuuuqBkpIGjRdIZcuKGoxj5NQzvgJd4KMjIw63ldsUoLT3cjCtap/R7aXl3n oYj/6YvSzFuYVHHK5jnAtzeTAdEwgwRriOQXZvXyYJM7f3wSqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz+X5ELz5PtqBk1VYNN9nUcAODkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzQ5NGU0NzYtNmM4YS0z ZGFkLThkMzAtOTU2OWY3MWVlNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRChsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhWKo1nqeprxEEXMqlE/wQqkej7Vm/DPKKQF2DTpWj1K6nc1FoCQvqM 4u6Kesfz1mAm8DU4SAkxEe8c/ajihKIsNqqL2/X3h9SJ5ejuwsyqo8JXwQ0YAK9t V/qVucofcVmPt3HEvcqU2wHe9sYWML+Arf9zVmDZp8GEYLpEaIlL9TVkECIUxx6S 6J2pI3cFRdDruq56zZ5ZR6mWmf9gzJZFxth74qbI7VMc7rJAo2gvPVph7LDumd4h xJR2rYOwmGq3+pg6Wnv0Gbk9/uX7ciwrPxy22zTm6Ysr1s64SdyvpbJ2i7+tuwFm G1QnsDJ3Xbb55asrvACCXj0owXJa4jE= -----END CERTIFICATE-----Generated at Sat Oct 24 10:24:25 2026 by rpki-client