$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa File: 7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa (raw, json) Hash identifier: h0VTMsfG4+gjOyOtccMvxKDWna0AwJo+6Jz5NzrJgIc= Subject key identifier: 7A:5E:24:61:9D:34:C7:FB:BD:A3:26:37:D9:17:21:9B:07:F3:A8:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DAACE10877FCC1919480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.40.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:da:ac:e1:08:77:fc:c1:91:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=22e3f1fc-6d20-4c2d-a45b-2129c6fcc43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:4b:8d:5f:73:0e:71:06:c7:cb:31:99:20: 5c:16:27:7b:54:78:4b:e7:ec:6a:10:c5:8f:c1:09: c7:43:b2:7a:e7:85:8a:c8:6b:11:50:6f:36:6b:7c: f0:1c:aa:06:9c:24:e1:c2:4f:25:ce:08:6a:fb:f9: 3d:df:e8:94:f3:3c:92:6c:9a:d3:6f:b0:cd:a5:65: b1:ac:f7:c9:b6:ee:9b:2b:c8:4d:c7:d9:9d:da:4f: 9f:78:bb:a1:55:50:ff:a3:fa:08:72:b7:0a:e6:23: ed:3c:91:3b:cb:ae:d6:33:37:54:26:6a:a8:fa:12: 4b:d1:a8:78:68:54:21:9a:3a:f6:5f:18:e6:e5:62: 94:23:6c:47:53:a5:5f:f9:2d:c3:17:71:d6:c5:be: 6d:b6:01:99:74:ea:3a:24:10:e2:51:26:65:33:4a: be:a7:e7:e5:60:c5:62:c1:a6:79:53:6a:f9:61:f0: 0f:f1:e8:90:c2:57:47:2d:10:d4:0d:27:54:26:a6: c6:af:1a:3c:d0:29:16:07:65:21:9a:77:ed:7d:b9: 24:11:64:c9:37:cf:b9:9e:2b:47:b1:cd:1a:73:5e: 53:df:e0:54:b5:48:e4:9b:a7:09:02:9a:b1:64:f8: 98:31:e6:b6:20:c2:58:c9:b7:73:1a:8b:bf:97:2d: 5f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:24:61:9D:34:C7:FB:BD:A3:26:37:D9:17:21:9B:07:F3:A8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:dc:a4:67:6b:56:9b:c9:3e:f5:bf:55:f2:28:4f:46:b3:30: 31:f4:e1:4e:e5:3c:b3:8f:5c:42:7c:b8:cb:df:01:15:50:70: 9f:a5:ff:87:93:15:78:70:68:ba:65:74:bd:de:cc:1a:f4:73: 8e:48:a3:c6:06:bd:52:02:c1:72:89:19:b9:f3:9c:f4:7f:89: ba:5e:6c:1a:11:e6:a5:4b:2b:b1:14:3f:fe:4f:63:6f:68:ce: 7d:4c:56:6c:b3:32:43:5e:26:1d:cb:3c:d4:b7:5e:6f:df:fd: 38:76:99:7f:8b:66:6e:52:34:59:8f:c0:76:fb:8f:ed:dc:ed: 0e:ba:ad:bd:e1:bd:72:e2:81:5b:e6:ef:44:ff:18:79:12:f1: 6a:5a:7f:2f:b7:7b:8e:45:d8:91:38:41:7d:ea:a4:1e:ab:be: df:8c:54:63:52:5f:f8:6e:aa:ad:c0:a6:02:7b:a7:03:8b:77: 02:f6:73:81:89:a2:fe:b3:21:0d:f7:43:b0:3b:7b:2c:32:13: 3f:06:dc:2d:1a:11:55:be:21:ff:40:e8:10:28:4b:fb:a4:25: 3d:5f:32:21:6d:7c:c0:45:83:22:de:d5:54:e5:9c:a4:32:34: 77:79:9a:b9:7f:c8:d8:78:24:0e:be:b8:31:da:a2:37:db:fe: e0:99:0b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9qs4Qh3/MGRlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjJlM2YxZmMtNmQyMC00YzJkLWE0NWItMjEyOWM2ZmNjNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT9LjV9zDnEGx8sxmSBcFid7VHhL5+xqEMWP wQnHQ7J654WKyGsRUG82a3zwHKoGnCThwk8lzghq+/k93+iU8zySbJrTb7DNpWWx rPfJtu6bK8hNx9md2k+feLuhVVD/o/oIcrcK5iPtPJE7y67WMzdUJmqo+hJL0ah4 aFQhmjr2Xxjm5WKUI2xHU6Vf+S3DF3HWxb5ttgGZdOo6JBDiUSZlM0q+p+flYMVi waZ5U2r5YfAP8eiQwldHLRDUDSdUJqbGrxo80CkWB2UhmnftfbkkEWTJN8+5nitH sc0ac15T3+BUtUjkm6cJApqxZPiYMea2IMJYybdzGou/ly1fuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpeJGGdNMf7vaMmN9kXIZsH86jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E0ZjQ0MzQtZmQxYS0z YzU1LWExNmQtYzBlNDIyYWNjYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTcpGdrVpvJPvW/VfIoT0azMDH04U7lPLOPXEJ8uMvfARVQcJ+l/4eT FXhwaLpldL3ezBr0c45Io8YGvVICwXKJGbnznPR/ibpebBoR5qVLK7EUP/5PY29o zn1MVmyzMkNeJh3LPNS3Xm/f/Th2mX+LZm5SNFmPwHb7j+3c7Q66rb3hvXLigVvm 70T/GHkS8Wpafy+3e45F2JE4QX3qpB6rvt+MVGNSX/huqq3ApgJ7pwOLdwL2c4GJ ov6zIQ33Q7A7eywyEz8G3C0aEVW+If9A6BAoS/ukJT1fMiFtfMBFgyLe1VTlnKQy NHd5mrl/yNh4JA6+uDHaojfb/uCZCxw= -----END CERTIFICATE-----Generated at Tue Sep 1 12:01:09 2026 by rpki-client