$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1b8a896-6d88-3e0e-af16-2d4a56d3d426.roa File: a1b8a896-6d88-3e0e-af16-2d4a56d3d426.roa (raw, json) Hash identifier: XmDeVRHHbPkGAfsLXhs4l7+kib+LnWc1S4R8xokHhjY= Subject key identifier: 19:2E:1B:DD:73:77:24:0D:43:75:BF:7F:53:54:99:1B:0F:C2:1B:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977738CC64BB334C617D300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1b8a896-6d88-3e0e-af16-2d4a56d3d426.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.52.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:73:8c:c6:4b:b3:34:c6:17:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db0714eb-a651-4915-850b-341e90da66ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:ac:5b:71:df:f7:6b:46:5b:4d:40:95:9b: 44:d4:f7:50:5e:ca:6e:1a:7c:c1:53:b0:35:e0:21: 65:19:71:a1:58:34:17:ad:22:f6:d6:7b:be:9b:50: a2:e3:91:1e:18:04:d7:13:8a:bb:39:a1:b3:6b:91: 3c:d2:af:1a:2c:75:1f:ae:28:de:ee:bb:4c:0d:69: b7:cd:be:4b:78:20:d3:5f:f8:19:4a:0b:da:77:79: 13:ba:24:b1:91:8e:9c:06:c3:12:f1:a3:27:62:0c: 08:44:4f:b3:27:32:59:ac:be:0f:0d:40:24:5c:75: 01:89:2c:df:2b:6e:80:85:ee:47:05:11:48:09:dc: d8:a8:0a:67:a3:a9:0c:12:51:94:ad:6b:aa:33:25: 4b:b4:21:55:17:d9:7a:ca:04:72:9c:de:3e:88:9f: 33:e2:f1:53:14:41:46:a8:07:41:3a:0b:58:60:2c: 23:9f:96:a1:93:49:40:1c:d1:44:66:69:e1:f4:d5: d4:16:b7:ce:a5:2b:d1:66:11:84:07:e2:f6:07:a7: 6a:19:5c:3a:67:38:d3:4a:f6:16:ed:b3:26:75:c3: 72:5a:87:6c:58:78:06:b1:b6:74:ea:22:cc:db:ca: 02:5c:83:57:0c:58:db:54:52:df:20:4a:00:d8:b5: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:1B:DD:73:77:24:0D:43:75:BF:7F:53:54:99:1B:0F:C2:1B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1b8a896-6d88-3e0e-af16-2d4a56d3d426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:68:e4:1f:6f:17:ff:4c:ca:a9:87:73:35:9f:c9:39:64:df: e9:c3:eb:2b:80:2c:6d:45:8b:85:61:25:81:db:db:64:c6:23: 39:a4:a2:80:7c:ed:b8:c1:14:35:c8:82:bb:26:1e:eb:6e:c7: 48:62:df:4c:2f:6d:45:88:0d:4c:69:3b:96:51:2b:37:ab:aa: 31:bc:88:26:b1:60:86:9c:1e:b9:9f:8d:58:43:7c:4a:85:a4: 26:ee:e8:b5:0e:6d:b9:ae:a6:97:bc:49:41:13:77:ea:10:74: fb:94:ba:02:a8:64:9a:8d:a0:4f:4e:0a:a4:95:9a:c7:ca:80: fd:6a:bd:33:d5:ea:4e:52:c0:ea:3b:f4:65:9f:d9:e4:ac:37: 9d:d7:9c:85:67:26:37:b5:b6:1f:98:b0:71:1a:29:32:d7:02: 84:1c:c2:7f:b9:d2:24:7a:42:75:52:02:06:27:28:0d:f7:4c: 83:0c:eb:8f:08:b0:8d:82:3a:33:8f:41:bd:3a:1c:82:0c:7f: 6e:57:cf:df:29:10:1f:c9:f4:d9:c5:1d:19:e1:f4:0d:28:ba: 3f:98:44:07:10:64:db:27:cd:c0:56:4b:a7:aa:0d:40:39:3b: 07:2e:82:77:d2:a2:7d:67:f2:a7:b3:8a:7f:3b:92:97:8c:a7: 96:c8:30:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd3OMxkuzNMYX0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGIwNzE0ZWItYTY1MS00OTE1LTg1MGItMzQxZTkwZGE2NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqsW3Hf92tGW01AlZtE1PdQXspuGnzBU7A1 4CFlGXGhWDQXrSL21nu+m1Ci45EeGATXE4q7OaGza5E80q8aLHUfrije7rtMDWm3 zb5LeCDTX/gZSgvad3kTuiSxkY6cBsMS8aMnYgwIRE+zJzJZrL4PDUAkXHUBiSzf K26Ahe5HBRFICdzYqApno6kMElGUrWuqMyVLtCFVF9l6ygRynN4+iJ8z4vFTFEFG qAdBOgtYYCwjn5ahk0lAHNFEZmnh9NXUFrfOpSvRZhGEB+L2B6dqGVw6ZzjTSvYW 7bMmdcNyWodsWHgGsbZ06iLM28oCXINXDFjbVFLfIEoA2LU8mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkuG91zdyQNQ3W/f1NUmRsPwhtlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFiOGE4OTYtNmQ4OC0z ZTBlLWFmMTYtMmQ0YTU2ZDNkNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpo5B9vF/9MyqmHczWfyTlk3+nD6yuALG1Fi4VhJYHb22TGIzmkooB8 7bjBFDXIgrsmHutux0hi30wvbUWIDUxpO5ZRKzerqjG8iCaxYIacHrmfjVhDfEqF pCbu6LUObbmuppe8SUETd+oQdPuUugKoZJqNoE9OCqSVmsfKgP1qvTPV6k5SwOo7 9GWf2eSsN53XnIVnJje1th+YsHEaKTLXAoQcwn+50iR6QnVSAgYnKA33TIMM648I sI2COjOPQb06HIIMf25Xz98pEB/J9NnFHRnh9A0ouj+YRAcQZNsnzcBWS6eqDUA5 OwcugnfSon1n8qezin87kpeMp5bIMNA= -----END CERTIFICATE-----Generated at Thu Oct 22 16:43:08 2026 by rpki-client