$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851b0349-95ef-3de4-a903-a6be6c81fd13.roa File: 851b0349-95ef-3de4-a903-a6be6c81fd13.roa (raw, json) Hash identifier: y2BDWSmtpoqTeHwEaZD5P3mTDhAuY4L4HjAzX742A14= Subject key identifier: 42:AB:BB:99:D9:C1:F4:77:D0:EF:8A:7C:58:13:5F:D3:C9:30:10:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5B6AD403C3FCA9B84800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851b0349-95ef-3de4-a903-a6be6c81fd13.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.32.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5b:6a:d4:03:c3:fc:a9:b8:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=fcc5dda9-9ce9-4013-8ebd-efe0b75c3195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:e2:32:0a:98:0e:14:74:19:3a:12:a1:79: a7:85:af:63:e1:21:0f:de:6d:15:8b:6d:74:b5:88: c1:af:03:19:3f:27:4f:05:72:68:40:79:4b:25:da: f2:a7:e0:49:6e:19:9f:a7:31:a3:14:35:32:e8:9d: f7:c3:90:08:af:c4:af:06:41:d6:93:7d:c9:90:b7: d7:68:15:63:b0:4d:45:60:a1:c8:dd:f5:6f:70:35: c3:39:09:08:19:4f:df:18:ae:27:69:b3:e0:6a:ca: 52:02:52:a5:6c:06:86:65:25:b3:fa:81:59:fd:58: ef:fa:6a:74:3d:5c:91:cb:a0:35:11:54:82:a8:bd: c0:3f:58:51:3b:73:f8:64:7b:57:cc:54:17:d1:14: 5f:77:6c:88:ed:cd:fe:37:a9:0f:b4:b9:67:0e:07: 8b:c4:83:ef:37:31:2c:89:49:f6:58:3b:26:fb:67: 82:5e:9c:f3:f6:27:1d:84:ed:90:47:63:43:7b:eb: a9:c5:7e:63:7c:9c:67:b8:6b:7c:7c:89:f1:d5:f4: 5a:3d:c0:54:ac:f4:be:f9:85:1b:5c:13:b0:bc:1c: 06:78:31:f8:6b:cf:d8:20:50:d3:dc:16:52:49:cf: 24:03:18:d8:c3:a9:05:e1:8b:4b:ac:df:94:5d:a5: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AB:BB:99:D9:C1:F4:77:D0:EF:8A:7C:58:13:5F:D3:C9:30:10:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851b0349-95ef-3de4-a903-a6be6c81fd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:98:00:c8:da:c5:e3:15:de:89:1c:af:eb:41:80:fd:d8:49: a0:a2:76:9a:86:f1:e4:03:8e:5b:79:72:2e:60:23:18:f5:90: cd:4b:e1:8b:82:dd:00:7d:60:f9:42:2d:9a:84:78:a4:0f:19: 28:6e:14:5b:c6:c7:42:f0:5c:22:b7:bd:02:98:63:b8:86:46: 02:80:9d:96:a8:56:3f:e7:79:54:8f:42:b7:75:77:c2:c8:50: f5:60:37:49:9e:ef:04:6c:1c:e3:0d:01:38:1c:bb:5d:66:89: e8:2e:76:66:b5:f2:cc:ae:33:75:04:20:6d:eb:bd:3f:35:13: 30:56:ba:23:7f:8f:b5:43:3e:67:f5:e7:38:97:6e:d0:95:ff: 46:7b:c9:81:9b:e1:84:3d:78:52:04:95:34:e1:ab:fb:64:99: dd:90:1b:4e:e3:64:89:e0:3a:34:7c:d1:8f:0b:5d:99:2f:92: f8:03:1a:79:af:41:82:fc:dc:cf:7a:6c:69:7e:2f:19:74:ec: 55:bc:3d:d8:b0:38:4d:3d:c6:61:6b:51:9a:72:7f:11:8a:20: 9d:0c:81:d2:7e:bd:44:f0:b9:ce:cb:db:94:07:79:9d:9e:52: c6:d7:60:e9:84:4d:c5:3d:6e:f6:5d:4d:83:18:11:26:e7:22: 46:91:9d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tltq1APD/Km4SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmNjNWRkYTktOWNlOS00MDEzLThlYmQtZWZlMGI3NWMzMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho7iMgqYDhR0GToSoXmnha9j4SEP3m0Vi210 tYjBrwMZPydPBXJoQHlLJdryp+BJbhmfpzGjFDUy6J33w5AIr8SvBkHWk33JkLfX aBVjsE1FYKHI3fVvcDXDOQkIGU/fGK4nabPgaspSAlKlbAaGZSWz+oFZ/Vjv+mp0 PVyRy6A1EVSCqL3AP1hRO3P4ZHtXzFQX0RRfd2yI7c3+N6kPtLlnDgeLxIPvNzEs iUn2WDsm+2eCXpzz9icdhO2QR2NDe+upxX5jfJxnuGt8fInx1fRaPcBUrPS++YUb XBOwvBwGeDH4a8/YIFDT3BZSSc8kAxjYw6kF4YtLrN+UXaWtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKru5nZwfR30O+KfFgTX9PJMBAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUxYjAzNDktOTVlZi0z ZGU0LWE5MDMtYTZiZTZjODFmZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaYAMjaxeMV3okcr+tBgP3YSaCidpqG8eQDjlt5ci5gIxj1kM1L4YuC 3QB9YPlCLZqEeKQPGShuFFvGx0LwXCK3vQKYY7iGRgKAnZaoVj/neVSPQrd1d8LI UPVgN0me7wRsHOMNATgcu11miegudma18syuM3UEIG3rvT81EzBWuiN/j7VDPmf1 5ziXbtCV/0Z7yYGb4YQ9eFIElTThq/tkmd2QG07jZIngOjR80Y8LXZkvkvgDGnmv QYL83M96bGl+Lxl07FW8PdiwOE09xmFrUZpyfxGKIJ0MgdJ+vUTwuc7L25QHeZ2e UsbXYOmETcU9bvZdTYMYESbnIkaRnZI= -----END CERTIFICATE-----Generated at Sun Oct 25 19:59:33 2026 by rpki-client