$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa File: 7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa (raw, json) Hash identifier: hgtnPPDHQKSMDc5JaXoZIMJOdq9F88MIE4cBbH0no5M= Subject key identifier: 47:CD:85:E2:C3:B7:1A:B2:A0:29:7D:0E:BE:FA:22:B2:FE:49:60:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F9446FEE547B2FF674E30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.40.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:94:46:fe:e5:47:b2:ff:67:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=d5fa4f65-9b8f-44bd-9144-5bca55fd78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9b:bd:ae:99:3d:d0:22:19:08:2b:c6:c1:f6: 96:67:91:41:44:e9:4e:04:41:bf:45:45:32:75:b9: 34:c6:c0:71:6c:ca:70:e5:53:63:d2:36:f1:6c:c7: a3:dc:91:cb:19:f7:a4:65:ac:62:ea:3c:64:bb:e9: b0:f3:54:43:e7:ca:d2:05:a0:28:66:c7:fe:d6:ab: 98:15:3d:29:ea:1a:ad:1d:65:e9:f1:c4:ea:7c:0a: 67:c2:4b:a0:76:4a:62:2a:60:e1:5e:4a:5a:95:08: 7a:9e:26:1a:06:4b:d5:65:4d:d5:23:b8:40:d0:48: 51:38:d1:ab:0d:5b:38:30:c3:2e:d8:56:d1:9a:2f: 29:80:32:0b:3a:b9:6f:b9:fc:c0:99:4d:95:93:1c: 8f:52:a2:70:7d:22:4a:a0:43:c7:eb:08:72:1b:3e: c5:af:e0:cd:b2:2a:c3:3e:28:dd:87:3d:5c:30:b9: 1f:67:c0:4a:c2:c8:04:4a:40:35:8e:e2:34:93:09: d0:07:04:56:14:51:06:af:a9:a5:cd:1d:01:07:2b: b0:93:d1:50:bb:5f:fa:d6:08:66:65:12:bb:e8:f9: c4:91:10:9e:fa:98:3d:33:56:e0:51:20:03:37:bb: 00:f9:f3:fe:0e:36:dd:1d:6b:96:db:0f:7d:e1:29: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CD:85:E2:C3:B7:1A:B2:A0:29:7D:0E:BE:FA:22:B2:FE:49:60:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ea:bd:ad:39:b1:b3:c0:74:9b:51:a6:36:78:4d:a4:22:c7: a6:e2:8a:60:9b:ba:a6:fc:49:34:f1:24:3b:ea:44:06:e0:e8: 83:20:7e:12:d3:3c:c3:0b:1c:e2:a0:15:a3:57:83:af:e1:da: d4:b5:b8:c6:86:8e:69:93:5c:58:0c:fa:2f:c7:b5:5f:e2:05: 9a:b6:7a:d5:e1:b5:1f:84:91:55:09:77:aa:f5:54:73:82:9b: 94:79:9a:97:de:43:7b:f9:ea:53:61:5f:60:ef:45:f0:e4:71: 1d:b4:8f:79:39:f6:a7:d8:1b:1c:17:3a:56:7f:10:ae:f8:90: b0:6c:e1:73:c7:8e:15:b7:03:0e:a3:93:72:5c:2e:c9:cd:f6: 4f:b9:36:2d:a3:26:2e:7d:ed:0a:ba:7f:21:85:83:d7:ef:51: 42:82:dc:6c:08:81:4e:74:c3:4c:3c:b3:cd:4c:25:9f:e3:74: a2:a4:48:26:40:05:75:93:cf:bc:3c:60:06:9f:30:58:bd:49: 50:8b:01:6c:57:8f:1d:40:e8:1f:80:5b:8a:d1:4c:00:1e:c4: 4a:70:39:3d:22:89:99:77:98:2b:21:30:cd:f2:6c:af:d2:00: bc:4a:68:11:08:d6:d6:1b:f0:23:3f:90:a4:e6:29:ff:02:b6: 49:6a:0a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5RG/uVHsv9nTjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDVmYTRmNjUtOWI4Zi00NGJkLTkxNDQtNWJjYTU1ZmQ3OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ju9rpk90CIZCCvGwfaWZ5FBROlOBEG/RUUy dbk0xsBxbMpw5VNj0jbxbMej3JHLGfekZaxi6jxku+mw81RD58rSBaAoZsf+1quY FT0p6hqtHWXp8cTqfApnwkugdkpiKmDhXkpalQh6niYaBkvVZU3VI7hA0EhRONGr DVs4MMMu2FbRmi8pgDILOrlvufzAmU2VkxyPUqJwfSJKoEPH6whyGz7Fr+DNsirD Pijdhz1cMLkfZ8BKwsgESkA1juI0kwnQBwRWFFEGr6mlzR0BByuwk9FQu1/61ghm ZRK76PnEkRCe+pg9M1bgUSADN7sA+fP+DjbdHWuW2w994SnxSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfNheLDtxqyoCl9Dr76IrL+SWCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E0ZjQ0MzQtZmQxYS0z YzU1LWExNmQtYzBlNDIyYWNjYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfqva05sbPAdJtRpjZ4TaQix6biimCbuqb8STTxJDvqRAbg6IMgfhLT PMMLHOKgFaNXg6/h2tS1uMaGjmmTXFgM+i/HtV/iBZq2etXhtR+EkVUJd6r1VHOC m5R5mpfeQ3v56lNhX2DvRfDkcR20j3k59qfYGxwXOlZ/EK74kLBs4XPHjhW3Aw6j k3JcLsnN9k+5Ni2jJi597Qq6fyGFg9fvUUKC3GwIgU50w0w8s81MJZ/jdKKkSCZA BXWTz7w8YAafMFi9SVCLAWxXjx1A6B+AW4rRTAAexEpwOT0iiZl3mCshMM3ybK/S ALxKaBEI1tYb8CM/kKTmKf8CtklqCtA= -----END CERTIFICATE-----Generated at Sat Oct 24 10:29:51 2026 by rpki-client