$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b304b00-7b14-3033-8778-4a4aa900ed00.roa File: 8b304b00-7b14-3033-8778-4a4aa900ed00.roa (raw, json) Hash identifier: HlGyTh3qXRQy26HrualxEhPSRV7Z0g1yH4qeF9SHCjg= Subject key identifier: 71:B8:92:71:9E:06:05:AB:71:45:00:C7:85:5F:45:B6:D8:42:29:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A712BFBC08E7F44FF300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b304b00-7b14-3033-8778-4a4aa900ed00.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.32.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a7:12:bf:bc:08:e7:f4:4f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=7d5554fc-fc68-4bca-9c75-37b3622f8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:49:e6:c6:5d:44:60:89:37:b2:a1:c1:4c: a6:45:f7:ca:55:f9:79:32:22:a5:1a:a0:d7:0c:44: 67:24:4a:71:2e:74:ae:0a:8e:62:0c:a5:0f:98:18: 61:75:ff:8d:fd:9b:5e:b7:6b:8a:35:7f:69:e0:fb: a4:47:00:14:2a:e1:d1:8a:10:94:09:40:38:03:2a: 54:28:aa:e1:d0:c7:10:ad:ea:be:18:44:bc:91:3d: 63:6f:06:8a:47:71:86:80:83:03:ae:bb:d6:cb:9f: ed:53:bc:d7:86:70:eb:73:a4:d9:84:1b:d6:05:16: 0c:54:ff:d4:4a:de:5b:d8:d0:4d:73:b8:d2:c0:cd: 79:dc:fd:0a:39:23:1b:bf:10:34:d6:50:e7:26:85: ae:5e:f3:6d:f6:3b:e1:38:55:85:ee:4d:ac:d7:2e: bf:d5:5c:45:ed:e4:7e:e7:7b:3a:23:27:9d:07:ad: d3:53:cd:1e:de:88:af:f5:94:0c:2d:a7:e4:ea:57: 13:02:c7:dd:9b:32:95:71:73:4d:b2:69:72:0c:90: a5:73:99:38:85:53:c0:28:a5:48:04:fe:b1:b0:ff: b4:36:e9:68:e8:96:04:19:64:1e:82:df:d3:71:89: 0c:21:13:b3:85:64:3b:06:de:0b:c3:b2:63:09:01: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:92:71:9E:06:05:AB:71:45:00:C7:85:5F:45:B6:D8:42:29:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b304b00-7b14-3033-8778-4a4aa900ed00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5f:95:f9:69:e2:8a:3c:ba:ba:a8:a0:62:02:06:5d:34:2e: 94:05:e5:b0:06:1b:50:34:a1:a0:39:7c:81:8f:e5:9a:f9:51: 6e:f2:ac:5d:b7:c4:86:ed:c9:56:bf:f3:ec:34:b7:cc:16:3e: a4:39:96:a3:24:fe:2c:45:55:e5:01:cc:57:39:23:72:b4:6b: 07:4f:59:4c:d2:be:47:50:38:6c:3c:df:0d:85:02:96:94:53: 2b:74:71:d1:06:c2:4b:2f:46:ab:96:84:7f:e0:e6:89:94:00: 43:83:23:ec:61:11:a7:ac:ec:ee:17:5d:92:bb:b0:37:a0:89: f1:ed:51:b9:12:6d:c5:37:3b:3a:09:2a:32:e9:cb:0f:0b:1e: 33:bb:85:64:0f:2c:2d:21:38:29:c0:e6:d1:f5:31:2c:b4:28: 03:74:9b:08:01:e0:f7:9d:a2:01:6f:22:fb:e2:ed:40:08:4f: ae:90:7f:68:bb:4f:c9:8a:3d:c5:ba:83:ba:8d:23:46:d4:8c: cc:56:db:56:25:51:c2:3d:5f:3e:b1:e8:47:68:72:22:6c:cf: 27:82:68:f3:47:fb:ef:30:37:29:a2:d9:67:1a:ad:4a:2d:76: 34:66:08:b0:8d:d7:c8:8e:7c:5b:36:30:a5:3a:97:1f:f7:e1: e6:c4:3e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqcSv7wI5/RP8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk N2Q1NTU0ZmMtZmM2OC00YmNhLTljNzUtMzdiMzYyMmY4ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CxJ5sZdRGCJN7KhwUymRffKVfl5MiKlGqDX DERnJEpxLnSuCo5iDKUPmBhhdf+N/Ztet2uKNX9p4PukRwAUKuHRihCUCUA4AypU KKrh0McQreq+GES8kT1jbwaKR3GGgIMDrrvWy5/tU7zXhnDrc6TZhBvWBRYMVP/U St5b2NBNc7jSwM153P0KOSMbvxA01lDnJoWuXvNt9jvhOFWF7k2s1y6/1VxF7eR+ 53s6IyedB63TU80e3oiv9ZQMLafk6lcTAsfdmzKVcXNNsmlyDJClc5k4hVPAKKVI BP6xsP+0Nulo6JYEGWQegt/TcYkMIROzhWQ7Bt4Lw7JjCQFq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG4knGeBgWrcUUAx4VfRbbYQikCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIzMDRiMDAtN2IxNC0z MDMzLTg3NzgtNGE0YWE5MDBlZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9flflp4oo8urqooGICBl00LpQF5bAGG1A0oaA5fIGP5Zr5UW7yrF23 xIbtyVa/8+w0t8wWPqQ5lqMk/ixFVeUBzFc5I3K0awdPWUzSvkdQOGw83w2FApaU Uyt0cdEGwksvRquWhH/g5omUAEODI+xhEaes7O4XXZK7sDegifHtUbkSbcU3OzoJ KjLpyw8LHjO7hWQPLC0hOCnA5tH1MSy0KAN0mwgB4PedogFvIvvi7UAIT66Qf2i7 T8mKPcW6g7qNI0bUjMxW21YlUcI9Xz6x6EdociJszyeCaPNH++8wNymi2WcarUot djRmCLCN18iOfFs2MKU6lx/34ebEPjA= -----END CERTIFICATE-----Generated at Tue Sep 1 05:17:39 2026 by rpki-client