$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/854f01a1-d850-322d-9716-d1d59123f3a1.roa File: 854f01a1-d850-322d-9716-d1d59123f3a1.roa (raw, json) Hash identifier: d87szfzCdXfY5iA1heqBBATO08SIXrppHLXMTha92+o= Subject key identifier: C1:59:04:07:3A:7C:23:0B:6F:40:DD:E8:E5:C3:6D:EB:97:0B:E5:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119DAD3254A7D69D70CA5800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/854f01a1-d850-322d-9716-d1d59123f3a1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 68.38.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:ad:32:54:a7:d6:9d:70:ca:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=733f85f3-ef48-4a4f-81e4-0bd914a81170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:f0:9f:2a:82:06:96:95:08:3b:96:27:58: 92:0a:ac:2f:d0:df:50:74:92:9f:53:88:65:e0:75: 07:b6:05:be:b6:80:55:f1:a7:98:18:ca:ad:64:86: 22:dc:21:f2:01:a5:6c:56:66:89:6e:2b:bd:0c:cf: 1a:65:e7:f6:18:b8:80:89:bd:ee:ac:cc:56:e4:27: 12:99:9c:57:cf:15:17:49:67:0f:ee:52:14:ac:4c: b7:da:e8:b4:e9:aa:26:0b:99:ba:88:4f:e5:5c:b9: f7:ec:7a:eb:ac:ff:eb:48:6f:57:8b:af:8b:26:1a: 83:73:fd:40:6f:a1:0d:30:4d:7e:0f:82:9d:5b:9f: da:0d:25:08:17:5d:4c:d9:6c:96:b9:c5:7f:5d:8f: 56:12:0c:e7:97:94:d8:ed:f5:3b:5f:09:d6:a9:72: 06:c5:95:2b:61:a0:a0:65:c3:26:a3:aa:c5:30:41: 17:01:e6:d0:69:ad:99:d4:ff:dc:7b:5e:11:3b:8a: 7a:eb:4b:35:71:f1:3c:c7:9f:22:65:c6:26:c6:1b: ba:04:2b:8e:50:94:24:70:70:9e:26:29:51:b9:c7: 90:07:5f:e0:78:b1:c4:3e:d7:cf:39:fe:2e:59:28: 4e:8b:8e:65:a3:6c:1f:e3:a7:cf:3c:fc:8e:19:c0: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:59:04:07:3A:7C:23:0B:6F:40:DD:E8:E5:C3:6D:EB:97:0B:E5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/854f01a1-d850-322d-9716-d1d59123f3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cf:0e:f9:0c:0f:87:6a:bc:47:c3:9f:c6:df:c5:b6:1f:3f: f4:8e:f3:a9:48:84:4d:83:e7:e0:94:96:60:69:fa:16:31:06: 2d:eb:d4:f2:e3:d5:8e:e4:65:0c:d9:2b:8b:01:84:e3:04:0c: 4b:ce:bc:59:2e:b4:e2:3f:86:74:04:96:44:f2:c8:0e:75:85: 87:2b:87:2c:bd:0d:0f:f7:6f:50:62:1a:c3:63:40:d4:62:01: b3:72:bd:1c:5f:b0:08:f2:56:ca:5c:c0:6b:05:c4:9b:66:3f: 1a:a1:01:78:64:6a:f4:33:9d:c6:df:6b:7a:8d:e1:f3:43:9c: b9:62:6c:ce:d3:0d:ed:80:90:35:fd:c0:cb:fc:ad:b5:26:60: 95:c0:16:91:81:e8:8a:f1:fe:aa:63:5c:49:c9:05:6f:ae:f7: e7:9c:af:b4:0c:11:53:31:35:b8:5a:0e:f8:02:8f:8c:2b:f4: c6:e4:20:ab:aa:f5:62:33:9e:ff:42:82:3f:17:02:46:19:82: 6e:90:5c:3b:fa:a0:ae:3c:a2:66:27:ef:bb:0d:2c:7c:c6:a1: f7:85:28:a2:26:29:ad:22:39:ad:90:26:fa:a2:9a:2a:92:ba: 59:a0:3b:18:75:4f:b9:57:18:a0:e6:5b:69:af:c3:85:e2:62: 1e:5a:1a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rna0yVKfWnXDKWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMzZjg1ZjMtZWY0OC00YTRmLTgxZTQtMGJkOTE0YTgxMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWTwnyqCBpaVCDuWJ1iSCqwv0N9QdJKfU4hl 4HUHtgW+toBV8aeYGMqtZIYi3CHyAaVsVmaJbiu9DM8aZef2GLiAib3urMxW5CcS mZxXzxUXSWcP7lIUrEy32ui06aomC5m6iE/lXLn37HrrrP/rSG9Xi6+LJhqDc/1A b6ENME1+D4KdW5/aDSUIF11M2WyWucV/XY9WEgznl5TY7fU7XwnWqXIGxZUrYaCg ZcMmo6rFMEEXAebQaa2Z1P/ce14RO4p660s1cfE8x58iZcYmxhu6BCuOUJQkcHCe JilRuceQB1/geLHEPtfPOf4uWShOi45lo2wf46fPPPyOGcCc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFZBAc6fCMLb0Dd6OXDbeuXC+VUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU0ZjAxYTEtZDg1MC0z MjJkLTk3MTYtZDFkNTkxMjNmM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvPDvkMD4dqvEfDn8bfxbYfP/SO86lIhE2D5+CUlmBp+hYxBi3r1PLj 1Y7kZQzZK4sBhOMEDEvOvFkutOI/hnQElkTyyA51hYcrhyy9DQ/3b1BiGsNjQNRi AbNyvRxfsAjyVspcwGsFxJtmPxqhAXhkavQzncbfa3qN4fNDnLlibM7TDe2AkDX9 wMv8rbUmYJXAFpGB6Irx/qpjXEnJBW+u9+ecr7QMEVMxNbhaDvgCj4wr9MbkIKuq 9WIznv9Cgj8XAkYZgm6QXDv6oK48omYn77sNLHzGofeFKKImKa0iOa2QJvqimiqS ulmgOxh1T7lXGKDmW2mvw4XiYh5aGlM= -----END CERTIFICATE-----Generated at Sat Sep 5 11:13:57 2026 by rpki-client