$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa File: 8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa (raw, json) Hash identifier: EZ9zKdD34ZQWLVMIzKl2kZBkkvDJB94Y/ZbsFNznEUc= Subject key identifier: 1C:C0:F9:7A:88:E2:BC:4F:BE:47:90:65:D9:04:3D:AE:8B:39:DD:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C15E908711EED6B6B080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c1:5e:90:87:11:ee:d6:b6:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d4cc642d-2387-4bcc-b263-1ba9a8934dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:56:bf:ce:b2:1e:94:bf:e1:81:93:2b:70: f0:fa:1c:32:52:d8:69:ea:ff:93:58:36:87:8a:37: b4:44:23:8c:7c:76:9a:16:02:a9:e7:4f:18:28:95: 8b:77:7c:72:b4:82:ee:71:a7:3e:ad:2c:d9:7f:bd: 96:2f:07:fb:d3:0c:5b:e6:23:7e:3e:7a:ea:06:cf: 89:cd:67:3a:02:7c:14:af:70:bd:50:68:53:dd:4c: 46:a7:3a:b5:d6:ca:b6:24:b2:b1:a5:50:f9:00:ee: c1:90:49:53:17:63:d1:98:b3:50:4b:3b:66:53:e2: 34:23:a2:bd:ca:99:68:15:24:47:ef:e7:d6:25:48: 03:54:3b:c5:30:34:82:0e:dc:77:82:4e:75:73:9e: 81:e7:27:85:09:5f:00:20:3d:d2:a4:b0:3b:47:1f: db:8d:36:18:8b:58:9e:3f:f5:43:50:0a:69:5b:69: c3:2c:48:f5:6c:4e:92:2f:96:88:0a:aa:8f:a2:ce: 3f:cc:31:90:3b:0a:37:6b:de:ed:12:06:f7:b0:69: 7d:cc:8b:6e:af:3d:55:90:1d:20:9d:8e:98:5f:d6: de:2b:81:d5:95:10:b5:05:b0:17:26:6e:aa:9c:6c: f0:d1:53:9f:fa:5b:3b:3c:78:51:93:f6:50:7c:30: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C0:F9:7A:88:E2:BC:4F:BE:47:90:65:D9:04:3D:AE:8B:39:DD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8652bb89-2424-30f2-ae88-ec1c7f2c9935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d4:29:32:33:35:3a:ea:a7:3b:20:e4:db:29:95:88:11:8e: aa:4a:0f:91:7d:46:dc:d8:45:46:30:7c:40:64:ff:f7:c4:75: 51:06:21:5b:a5:68:23:d5:a6:b0:d2:da:4b:03:7f:79:ad:a9: d7:8b:95:b1:67:51:9e:2b:e0:27:5e:15:b1:19:0b:a8:de:be: 83:15:91:ac:f5:dd:49:22:70:bd:0a:b9:73:a8:29:5f:39:83: 8d:b5:60:2c:bd:a2:56:1b:06:e1:de:66:89:09:b1:c4:cf:c5: c5:e9:a3:68:1e:46:0c:c3:ed:56:7d:4c:47:46:5c:a4:59:83: dc:31:b1:8c:6a:a6:7d:64:54:f4:a2:02:c2:e8:83:5c:04:26: 5b:ac:62:f6:f4:8c:c9:c3:99:f2:52:85:d3:a5:17:09:81:53: df:9e:be:5b:4e:83:ea:46:7d:96:80:65:26:d7:ae:dd:87:05: 91:ce:0c:26:d3:d0:96:4f:00:89:4d:d0:32:72:1f:a0:fc:e2: 19:36:59:7c:ee:80:0d:98:4c:80:cd:83:ec:4c:36:48:fe:2a: 74:a1:bc:ae:5e:e2:25:be:9d:34:7b:a2:fc:f1:68:39:de:0b: 18:fe:fc:5e:d8:c6:94:dd:e0:7b:f1:f6:ec:0f:2e:25:ed:2a: 2b:93:36:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsFekIcR7ta2sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDRjYzY0MmQtMjM4Ny00YmNjLWIyNjMtMWJhOWE4OTM0ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllVWv86yHpS/4YGTK3Dw+hwyUthp6v+TWDaH ije0RCOMfHaaFgKp508YKJWLd3xytILucac+rSzZf72WLwf70wxb5iN+PnrqBs+J zWc6AnwUr3C9UGhT3UxGpzq11sq2JLKxpVD5AO7BkElTF2PRmLNQSztmU+I0I6K9 yploFSRH7+fWJUgDVDvFMDSCDtx3gk51c56B5yeFCV8AID3SpLA7Rx/bjTYYi1ie P/VDUAppW2nDLEj1bE6SL5aICqqPos4/zDGQOwo3a97tEgb3sGl9zIturz1VkB0g nY6YX9beK4HVlRC1BbAXJm6qnGzw0VOf+ls7PHhRk/ZQfDCs5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzA+XqI4rxPvkeQZdkEPa6LOd1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY1MmJiODktMjQyNC0z MGYyLWFlODgtZWMxYzdmMmM5OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7UKTIzNTrqpzsg5NsplYgRjqpKD5F9RtzYRUYwfEBk//fEdVEGIVul aCPVprDS2ksDf3mtqdeLlbFnUZ4r4CdeFbEZC6jevoMVkaz13UkicL0KuXOoKV85 g421YCy9olYbBuHeZokJscTPxcXpo2geRgzD7VZ9TEdGXKRZg9wxsYxqpn1kVPSi AsLog1wEJlusYvb0jMnDmfJShdOlFwmBU9+evltOg+pGfZaAZSbXrt2HBZHODCbT 0JZPAIlN0DJyH6D84hk2WXzugA2YTIDNg+xMNkj+KnShvK5e4iW+nTR7ovzxaDne Cxj+/F7YxpTd4Hvx9uwPLiXtKiuTNoc= -----END CERTIFICATE-----Generated at Tue Sep 1 05:08:03 2026 by rpki-client