$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/998c303f-fb47-38d8-8b49-49473df14dcd.roa File: 998c303f-fb47-38d8-8b49-49473df14dcd.roa (raw, json) Hash identifier: 2zKDbDvd1LGnIXLSoG3HybbBjQHlg05JSFbINeanKxA= Subject key identifier: 8B:83:AF:07:29:67:82:F9:02:0C:DF:94:C0:6B:8F:F1:C6:DF:A6:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862C08F7626794F2A8C9D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/998c303f-fb47-38d8-8b49-49473df14dcd.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.60.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:c0:8f:76:26:79:4f:2a:8c:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=42d6c307-6e04-45a1-a668-a24f4fe9d2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:bc:75:97:53:46:b2:54:74:3b:df:67:ca: bd:a2:55:a1:69:08:ca:c4:ad:51:5a:be:33:4c:5e: 1e:66:72:1b:30:b7:89:65:d7:c2:06:5d:b5:27:33: c9:c2:65:8b:3d:ab:75:66:a0:99:19:1f:53:87:ab: 9c:34:e4:47:78:cb:44:04:a1:1c:1e:98:a6:e2:70: 25:68:f5:1b:71:0b:22:59:7b:a7:a0:53:d2:a2:7f: e6:12:78:b5:56:ac:fc:22:21:a0:cb:62:99:89:80: ea:50:58:43:75:13:e6:2e:e3:86:96:bf:41:88:19: 91:10:f9:14:34:91:a8:54:fb:c6:ff:bd:31:9b:55: 4d:b2:ce:53:2e:51:6a:8e:03:a3:de:3c:83:d8:20: d2:c3:84:cf:f0:48:fc:69:59:8c:5b:e2:0c:22:84: e7:ee:e6:b3:63:d7:10:12:ea:09:4b:ec:b7:dc:4d: 0c:20:e0:fd:b1:fd:38:5f:62:94:6a:94:86:18:02: 95:b8:f3:d8:1a:7d:4f:72:47:ae:5c:17:85:5e:8f: e0:b3:43:f4:f9:1f:9f:ef:b0:ed:42:51:ef:d6:b2: 78:1d:f2:93:5b:b5:0f:bd:72:45:60:71:30:7e:37: c0:d3:21:35:7f:bb:84:3a:66:83:18:fb:e7:a4:11: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:83:AF:07:29:67:82:F9:02:0C:DF:94:C0:6B:8F:F1:C6:DF:A6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/998c303f-fb47-38d8-8b49-49473df14dcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fb:3f:cc:bd:3d:d0:8e:9f:04:b9:b8:d2:d1:df:e5:9e:5a: dc:59:08:5d:35:ce:55:b6:0c:6a:fa:11:07:b5:cd:8c:a3:3e: 48:6e:32:1a:83:90:41:8c:87:95:91:80:a0:01:4e:82:92:ca: d4:70:35:c0:aa:75:bd:79:24:44:f7:fe:af:4e:2f:14:fe:9c: 91:48:9b:20:e3:3f:49:dd:df:8b:22:3b:08:1b:64:2d:e8:c2: de:54:f8:16:bc:e1:78:14:3b:c4:07:b3:a7:7a:d2:be:f3:ab: 0e:17:94:d2:89:91:c6:6a:77:b6:12:7c:12:a0:0c:33:8d:26: 41:d9:58:88:b3:2e:21:fe:75:94:1c:9a:d4:9e:21:b4:57:2f: fd:e4:c2:2a:a8:8f:8e:7c:b9:2d:08:12:95:79:af:e5:16:7c: 30:a7:6f:64:92:c4:56:5b:14:08:f1:d6:ba:7b:1d:84:c9:aa: 60:ed:13:33:28:37:26:6d:f8:cf:6e:11:ca:f5:09:de:2e:c2: 25:85:b4:31:67:e4:b4:94:5c:69:a4:cb:60:e6:41:46:d6:30: 30:96:42:d8:dd:b1:c2:53:8f:4a:28:2c:c7:d7:ac:01:21:41: f0:4f:23:f1:1c:41:38:4a:29:13:e0:39:6a:11:67:62:9e:57: 9c:82:97:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsCPdiZ5TyqMnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDJkNmMzMDctNmUwNC00NWExLWE2NjgtYTI0ZjRmZTlkMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHu8dZdTRrJUdDvfZ8q9olWhaQjKxK1RWr4z TF4eZnIbMLeJZdfCBl21JzPJwmWLPat1ZqCZGR9Th6ucNORHeMtEBKEcHpim4nAl aPUbcQsiWXunoFPSon/mEni1Vqz8IiGgy2KZiYDqUFhDdRPmLuOGlr9BiBmREPkU NJGoVPvG/70xm1VNss5TLlFqjgOj3jyD2CDSw4TP8Ej8aVmMW+IMIoTn7uazY9cQ EuoJS+y33E0MIOD9sf04X2KUapSGGAKVuPPYGn1PckeuXBeFXo/gs0P0+R+f77Dt QlHv1rJ4HfKTW7UPvXJFYHEwfjfA0yE1f7uEOmaDGPvnpBHpzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuDrwcpZ4L5AgzflMBrj/HG36bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk4YzMwM2YtZmI0Ny0z OGQ4LThiNDktNDk0NzNkZjE0ZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDyCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf7P8y9PdCOnwS5uNLR3+WeWtxZCF01zlW2DGr6EQe1zYyjPkhuMhqD kEGMh5WRgKABToKSytRwNcCqdb15JET3/q9OLxT+nJFImyDjP0nd34siOwgbZC3o wt5U+Ba84XgUO8QHs6d60r7zqw4XlNKJkcZqd7YSfBKgDDONJkHZWIizLiH+dZQc mtSeIbRXL/3kwiqoj458uS0IEpV5r+UWfDCnb2SSxFZbFAjx1rp7HYTJqmDtEzMo NyZt+M9uEcr1Cd4uwiWFtDFn5LSUXGmky2DmQUbWMDCWQtjdscJTj0ooLMfXrAEh QfBPI/EcQThKKRPgOWoRZ2KeV5yCl/Y= -----END CERTIFICATE-----Generated at Tue Sep 1 05:08:36 2026 by rpki-client