$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa File: a749fece-3cf6-3e72-905f-6169e60efd2c.roa (raw, json) Hash identifier: R5aHKGXEgH6uIsEcmbswVe1RnyeSHR+NnnsN+ntbjo0= Subject key identifier: 61:24:96:99:BA:A4:E4:10:F9:67:A4:3C:5C:6B:48:57:07:1A:3D:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862AB9F2D93B379CE40CD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.36.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:ab:9f:2d:93:b3:79:ce:40:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=ef3d046c-d2f7-4c3d-96b2-912022debdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:30:b4:13:94:bb:b3:2a:cf:f0:e1:7f:a4: c3:86:64:35:f3:28:c0:2b:cb:f2:dc:08:c8:38:52: ba:52:ba:9c:5b:08:90:ed:ed:00:5f:c3:58:8b:0b: 0b:b9:a5:60:f9:70:a5:67:3e:29:8d:d5:ae:12:94: ba:d2:6f:9b:a5:d1:2d:3b:a2:7a:85:40:8a:fc:21: b9:1d:bb:85:db:0b:96:bf:c0:0b:b3:80:15:2f:18: c6:b8:e8:dc:86:67:09:01:94:2b:7a:38:18:47:57: ff:e5:d7:d3:1e:57:3b:35:87:13:60:72:f5:a1:a6: 4f:63:ef:2b:67:fa:3f:45:0c:85:91:55:8f:66:81: 3a:79:68:5b:80:83:84:d5:6f:19:3f:12:6b:38:a1: 81:fa:fe:b5:b8:c4:ae:3f:bc:fe:57:e1:fa:ad:56: 99:ab:5f:cb:5e:2b:2b:7d:06:fe:fe:39:53:45:cd: 10:55:f0:55:0c:f3:cd:3d:83:1b:23:d9:66:c9:f2: e7:7b:0a:59:18:82:fc:2d:fb:ad:b4:74:d4:ed:ab: fc:03:86:c0:42:b3:9d:62:77:3f:9b:d7:42:44:22: 50:dc:49:5a:aa:82:a5:f3:74:0f:69:ff:bb:9f:7f: d3:da:f2:1e:78:5f:16:ef:49:2c:4c:d0:32:d6:8d: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:96:99:BA:A4:E4:10:F9:67:A4:3C:5C:6B:48:57:07:1A:3D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a749fece-3cf6-3e72-905f-6169e60efd2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ed:07:61:12:3e:98:87:32:cb:98:fb:da:35:25:a7:2a:1c: d5:75:2b:6a:da:84:eb:14:6e:8a:33:91:79:6e:f4:a6:46:b7: e3:ce:9c:20:e1:62:70:a8:33:af:fc:c0:7f:67:52:3e:3c:68: 58:2a:2d:53:85:08:18:0b:e6:19:58:34:65:82:45:a7:89:69: 0b:78:90:3a:a2:8c:53:95:52:6f:ca:61:2f:74:e6:40:f8:65: 4c:d6:39:52:3e:b6:26:7d:df:8b:fe:09:d9:21:93:66:cf:c5: 2c:10:9d:90:6e:2b:62:e7:a7:73:46:a4:68:fe:7d:fc:20:61: 10:21:6a:c2:69:67:7d:1e:5b:55:1d:73:54:b1:1d:3d:c3:64: e0:3f:6d:de:27:50:0c:f2:a1:d2:df:ec:34:5e:7e:dd:07:47: ea:d0:17:8e:33:15:dd:4c:39:b2:85:e6:94:ea:bc:f7:4c:98: 57:7e:6d:07:b4:e7:f3:fd:b5:e8:8a:5d:bf:9a:7a:20:4e:8a: 3a:05:a7:b8:95:7a:f2:b3:9e:ab:4d:3f:54:1c:23:49:f1:70: cc:a6:c0:8c:00:78:57:03:11:5e:09:af:53:a6:07:8c:0a:21: 3b:4a:3f:f9:bb:29:61:59:5c:29:3b:22:85:e9:5a:ef:4c:bf: 73:d0:74:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqufLZOzec5AzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZWYzZDA0NmMtZDJmNy00YzNkLTk2YjItOTEyMDIyZGViZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqkwtBOUu7Mqz/Dhf6TDhmQ18yjAK8vy3AjI OFK6UrqcWwiQ7e0AX8NYiwsLuaVg+XClZz4pjdWuEpS60m+bpdEtO6J6hUCK/CG5 HbuF2wuWv8ALs4AVLxjGuOjchmcJAZQrejgYR1f/5dfTHlc7NYcTYHL1oaZPY+8r Z/o/RQyFkVWPZoE6eWhbgIOE1W8ZPxJrOKGB+v61uMSuP7z+V+H6rVaZq1/LXisr fQb+/jlTRc0QVfBVDPPNPYMbI9lmyfLnewpZGIL8LfuttHTU7av8A4bAQrOdYnc/ m9dCRCJQ3ElaqoKl83QPaf+7n3/T2vIeeF8W70ksTNAy1o0O3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEklpm6pOQQ+WekPFxrSFcHGj1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc0OWZlY2UtM2NmNi0z ZTcyLTkwNWYtNjE2OWU2MGVmZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCQ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7tB2ESPpiHMsuY+9o1JacqHNV1K2rahOsUboozkXlu9KZGt+POnCDh YnCoM6/8wH9nUj48aFgqLVOFCBgL5hlYNGWCRaeJaQt4kDqijFOVUm/KYS905kD4 ZUzWOVI+tiZ934v+Cdkhk2bPxSwQnZBuK2Lnp3NGpGj+ffwgYRAhasJpZ30eW1Ud c1SxHT3DZOA/bd4nUAzyodLf7DReft0HR+rQF44zFd1MObKF5pTqvPdMmFd+bQe0 5/P9teiKXb+aeiBOijoFp7iVevKznqtNP1QcI0nxcMymwIwAeFcDEV4Jr1OmB4wK ITtKP/m7KWFZXCk7IoXpWu9Mv3PQdMM= -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:45 2026 by rpki-client