$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa File: 906a41cd-df96-351d-b422-89337a02c3c5.roa (raw, json) Hash identifier: lb+Bj/vXTaHO/4rsGo8WqBNOGHrk598NDY8TQq4stME= Subject key identifier: 89:6F:33:C4:AF:7D:8A:0D:8C:85:36:1C:AA:AF:69:75:6D:7A:B0:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E3600FD05151DEE9FA4E02B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33668 IP address blocks: 68.43.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:00:fd:05:15:1d:ee:9f:a4:e0:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=422986bb-ebc1-42af-8ee7-07bf7020490e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:29:23:ea:13:cb:94:f2:c9:a2:fa:c6:5a: 1d:37:90:c9:2f:a0:57:49:b6:cf:b0:98:a5:24:3a: 90:74:83:23:b3:b1:a4:f4:58:33:a0:3f:3d:42:62: c3:ba:39:34:c4:d4:c3:d0:09:52:95:66:56:ff:07: 88:eb:1b:41:20:15:c9:75:35:06:45:64:3f:3d:4d: e3:36:bb:c3:20:8a:0e:4d:d2:c1:1f:ad:31:3a:84: c8:ad:53:65:8b:6a:85:10:29:5e:12:ef:42:e7:a9: 14:64:9e:1b:a6:6c:9d:00:38:69:6e:c0:16:13:5a: c6:60:c5:1f:a9:f9:cb:db:02:42:12:3a:46:ac:c7: 9d:d0:98:5d:d7:66:8e:36:25:6a:8d:64:f9:f8:63: 0b:4c:16:ba:b9:58:29:b3:28:0d:ac:ec:60:af:d4: 0b:4c:76:1f:d3:6f:ad:f2:f7:42:2f:f3:48:c5:43: 6e:cf:fd:e0:6a:f7:2b:ab:2f:8b:6b:87:5b:73:1b: 7e:e6:0e:1e:96:b1:69:a1:ee:62:ba:49:b0:12:3a: 48:a8:27:7b:65:f3:ef:b8:f8:2d:c8:93:40:c2:f4: 0c:2f:c3:d9:2d:1b:df:53:c7:a5:14:72:6f:04:8e: 78:ea:5d:0e:44:d5:6f:81:1b:27:61:04:c5:95:b3: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:33:C4:AF:7D:8A:0D:8C:85:36:1C:AA:AF:69:75:6D:7A:B0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f6:5f:f1:bb:08:c2:56:24:f0:e7:fc:07:b8:f2:5f:9c:42: 14:f4:7b:ce:f6:ad:6b:75:b5:1c:08:f6:68:02:2c:08:28:f6: 6e:64:9d:f0:66:40:20:f7:20:a3:3f:5b:9a:bd:fd:4e:4b:34: a8:41:e6:b8:1b:f7:95:cf:3e:55:24:9d:b8:e7:7e:f2:02:f0: 36:a0:9a:a2:f7:59:85:93:c0:f3:66:ec:68:86:26:da:e3:9f: f9:d9:3d:8f:62:45:de:28:c5:1d:77:eb:00:9c:55:06:2e:1f: cf:a0:68:f5:ab:24:55:ce:10:64:68:a5:38:b6:ea:fc:fc:68: 8a:dc:00:00:d5:e0:b8:a8:53:61:2b:df:e1:10:6a:78:b2:ee: d5:cf:c3:12:a1:a1:da:2f:0a:73:a0:05:0b:a8:70:cb:c6:35: fd:6f:bb:3e:cf:86:08:db:82:af:b1:c7:e8:a9:75:ff:f3:99: e2:c8:56:35:6a:2f:d6:f8:87:48:46:ec:92:c5:bf:f5:e3:27: a8:f8:1c:53:c7:8d:5a:35:17:aa:29:18:42:20:93:48:03:ef: 59:37:e7:c1:2e:d1:3a:7f:16:c1:74:20:56:b9:3e:33:a5:d4: 78:bd:19:f9:bb:de:9c:f4:74:cd:fc:08:de:19:75:61:40:16: fe:75:f8:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AP0FFR3un6TgKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NDIyOTg2YmItZWJjMS00MmFmLThlZTctMDdiZjcwMjA0OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjkpI+oTy5TyyaL6xlodN5DJL6BXSbbPsJil JDqQdIMjs7Gk9FgzoD89QmLDujk0xNTD0AlSlWZW/weI6xtBIBXJdTUGRWQ/PU3j NrvDIIoOTdLBH60xOoTIrVNli2qFECleEu9C56kUZJ4bpmydADhpbsAWE1rGYMUf qfnL2wJCEjpGrMed0Jhd12aONiVqjWT5+GMLTBa6uVgpsygNrOxgr9QLTHYf02+t 8vdCL/NIxUNuz/3gavcrqy+La4dbcxt+5g4elrFpoe5iukmwEjpIqCd7ZfPvuPgt yJNAwvQML8PZLRvfU8elFHJvBI546l0ORNVvgRsnYQTFlbPrkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlvM8SvfYoNjIU2HKqvaXVterCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA2YTQxY2QtZGY5Ni0z NTFkLWI0MjItODkzMzdhMDJjM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX2X/G7CMJWJPDn/Ae48l+cQhT0e872rWt1tRwI9mgCLAgo9m5knfBm QCD3IKM/W5q9/U5LNKhB5rgb95XPPlUknbjnfvIC8DagmqL3WYWTwPNm7GiGJtrj n/nZPY9iRd4oxR136wCcVQYuH8+gaPWrJFXOEGRopTi26vz8aIrcAADV4LioU2Er 3+EQaniy7tXPwxKhodovCnOgBQuocMvGNf1vuz7Phgjbgq+xx+ipdf/zmeLIVjVq L9b4h0hG7JLFv/XjJ6j4HFPHjVo1F6opGEIgk0gD71k358Eu0Tp/FsF0IFa5PjOl 1Hi9Gfm73pz0dM38CN4ZdWFAFv51+K8= -----END CERTIFICATE-----Generated at Sat Jul 18 04:32:55 2026 by rpki-client