$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41b3107-d7eb-376b-ae70-be6766aa7a7a.roa File: a41b3107-d7eb-376b-ae70-be6766aa7a7a.roa (raw, json) Hash identifier: pLO16z/qy7Ef4Z7t9MYPBxeFGFu3fTYDBszLAj1FJnw= Subject key identifier: EC:E0:8F:B5:75:12:36:A3:91:89:A3:A4:C3:12:52:B1:B3:C7:38:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A7E2E54C25D3ED102240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41b3107-d7eb-376b-ae70-be6766aa7a7a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.34.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a7:e2:e5:4c:25:d3:ed:10:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=29b0c77e-2277-4f11-baa8-c7e7c0e16e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:cd:10:44:f1:8c:f7:68:56:41:6d:10:7b: 68:65:aa:00:0c:2f:44:bf:1e:1a:f7:ad:5f:68:0d: 01:83:02:2e:3e:ad:49:30:78:f2:ae:b6:72:7a:79: c9:70:fe:4f:3a:fa:d6:85:cd:04:8b:23:68:81:3d: 50:2c:e7:89:c1:ca:06:0f:eb:da:e4:e0:c0:ab:95: b7:10:d6:29:c4:99:96:55:c1:f5:3e:e9:3d:ec:71: 4f:b7:4e:d1:7f:1f:80:c6:5d:b6:81:3a:64:cd:30: 8f:21:8f:a7:74:4b:81:af:96:f9:c2:ed:af:1d:09: d8:9f:38:62:47:47:2a:e7:8e:27:f2:a0:8d:2b:af: b8:77:77:9b:59:e6:60:f4:41:e5:c2:b7:30:39:4f: 5a:23:97:b3:14:3c:0a:0a:ab:95:a9:05:35:84:88: 70:b0:56:95:16:78:6a:63:85:6e:b9:69:45:80:77: 15:82:64:c6:ed:e5:8d:ab:3d:db:f7:76:b4:3e:b7: 64:f6:48:be:2c:12:36:07:8f:30:34:f5:d1:f7:ae: be:8b:96:5d:24:35:b5:02:cf:ae:9a:f7:8e:9c:f0: 7a:19:2b:d5:b7:fd:50:50:e8:78:64:8b:3a:1c:19: 03:e8:39:1c:c9:94:f0:10:74:0e:83:42:10:62:21: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:8F:B5:75:12:36:A3:91:89:A3:A4:C3:12:52:B1:B3:C7:38:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41b3107-d7eb-376b-ae70-be6766aa7a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:56:68:9b:ca:7b:88:40:f9:4b:f1:14:51:fb:2a:1d:29:e2: 7f:5b:f7:4a:03:6b:39:5f:4c:f9:f4:7c:fd:8c:aa:ca:68:30: 22:92:21:51:19:fe:e7:2c:ef:ee:ef:88:6a:8e:b1:02:2d:b3: ef:04:a3:cc:70:da:e3:ae:e6:05:30:ba:34:0a:87:05:e9:93: 15:9f:1d:c2:77:8e:b6:b7:15:8c:da:8a:43:5f:86:f4:ef:bb: 9a:08:5c:c8:80:d9:f5:76:99:10:0b:e5:76:c5:cb:89:2e:79: 3d:e7:30:dc:4f:12:9c:1d:af:bd:c0:33:55:cd:c6:9c:61:fb: 92:64:81:f3:18:b6:5e:36:e3:00:01:cd:1f:20:cc:68:7e:58: e4:4d:cd:73:34:35:e0:d6:b9:93:99:4f:32:63:e5:15:ca:bf: 23:2a:74:6d:58:33:c3:fe:7a:36:ae:e0:67:49:a7:c4:02:70: 4d:92:c7:d9:7c:dd:ab:d4:9f:c9:47:3d:ac:8c:52:10:53:94: f3:6f:d8:c8:dc:d7:63:7d:00:67:14:5d:78:13:a7:40:7b:a2: cf:7b:d0:71:a9:92:0f:87:af:d5:3a:4d:df:af:d8:c9:7c:10: 0f:09:ae:85:6a:67:50:50:67:25:18:03:fa:97:2a:c8:9f:6a: 3b:e9:29:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqfi5Uwl0+0QIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MjliMGM3N2UtMjI3Ny00ZjExLWJhYTgtYzdlN2MwZTE2ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttTNEETxjPdoVkFtEHtoZaoADC9Evx4a961f aA0BgwIuPq1JMHjyrrZyennJcP5POvrWhc0EiyNogT1QLOeJwcoGD+va5ODAq5W3 ENYpxJmWVcH1Puk97HFPt07Rfx+Axl22gTpkzTCPIY+ndEuBr5b5wu2vHQnYnzhi R0cq544n8qCNK6+4d3ebWeZg9EHlwrcwOU9aI5ezFDwKCquVqQU1hIhwsFaVFnhq Y4VuuWlFgHcVgmTG7eWNqz3b93a0Prdk9ki+LBI2B48wNPXR966+i5ZdJDW1As+u mveOnPB6GSvVt/1QUOh4ZIs6HBkD6DkcyZTwEHQOg0IQYiFWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzgj7V1EjajkYmjpMMSUrGzxziCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQxYjMxMDctZDdlYi0z NzZiLWFlNzAtYmU2NzY2YWE3YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtWaJvKe4hA+UvxFFH7Kh0p4n9b90oDazlfTPn0fP2MqspoMCKSIVEZ /ucs7+7viGqOsQIts+8Eo8xw2uOu5gUwujQKhwXpkxWfHcJ3jra3FYzaikNfhvTv u5oIXMiA2fV2mRAL5XbFy4kueT3nMNxPEpwdr73AM1XNxpxh+5JkgfMYtl424wAB zR8gzGh+WORNzXM0NeDWuZOZTzJj5RXKvyMqdG1YM8P+ejau4GdJp8QCcE2Sx9l8 3avUn8lHPayMUhBTlPNv2Mjc12N9AGcUXXgTp0B7os970HGpkg+Hr9U6Td+v2Ml8 EA8JroVqZ1BQZyUYA/qXKsifajvpKWg= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:41 2026 by rpki-client