$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d94e7f-84d2-38c0-95a0-e7c3becb96dc.roa File: a9d94e7f-84d2-38c0-95a0-e7c3becb96dc.roa (raw, json) Hash identifier: Z1Tz+w7iJPfsdEuUe/RtIK0sDZxME7IlAwU+1fHwdCI= Subject key identifier: 29:B1:73:58:88:03:0B:14:89:1A:20:96:05:D2:62:4D:DE:D8:AF:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BE704750F54E73A5B200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d94e7f-84d2-38c0-95a0-e7c3becb96dc.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.56.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:be:70:47:50:f5:4e:73:a5:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=7c80ce3d-3563-4d7b-88b0-1e2cd6a87d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:74:b3:ac:99:a2:2c:55:ea:34:2e:d1:db: e8:30:16:92:73:da:7c:b3:ce:49:25:e1:99:66:f3: c0:17:86:34:e7:8b:41:bc:7e:bc:4b:13:7a:60:29: 92:3c:64:ab:cc:f0:a7:31:f8:11:78:b1:b0:10:e5: 96:2b:82:bb:f6:7d:3a:a9:c5:3e:bf:f7:c6:08:d4: 77:d4:91:36:c0:9c:be:c6:ad:34:6e:b1:0d:22:e8: 14:9c:ee:21:13:60:3e:65:5d:b6:c6:35:14:f8:b0: 78:61:47:13:2a:91:d8:0f:0d:36:fc:7d:6e:e1:c2: c9:14:5d:a2:a8:5c:d6:aa:6f:bd:78:37:07:69:13: c3:c2:28:ee:37:a1:85:88:46:f8:2f:d1:61:64:48: 80:63:c3:38:1b:cd:2e:0c:79:97:a6:19:28:0e:44: 53:ae:43:f9:1e:bb:6d:86:19:86:5d:8b:57:70:8b: 63:3d:c4:a8:6c:3e:2e:1d:b2:a1:1a:55:45:4c:94: a7:80:28:d3:dd:f0:de:3c:84:4b:cc:2d:4f:ac:1f: b5:7c:7f:8f:cb:df:04:42:36:dc:bf:35:4c:3a:8a: 6d:ab:fc:fb:ed:c9:5c:69:71:46:ed:63:c3:6d:bd: 04:13:0b:5b:fa:7f:81:4f:64:64:c1:c8:f7:0e:5f: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B1:73:58:88:03:0B:14:89:1A:20:96:05:D2:62:4D:DE:D8:AF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9d94e7f-84d2-38c0-95a0-e7c3becb96dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b2:86:b2:77:38:fc:cf:c2:a5:6b:89:fa:51:71:d8:a2:d2: 7d:c7:65:fb:9c:f1:3d:16:f2:1a:ef:66:7e:83:5d:e1:88:23: 8a:35:f1:f8:07:a6:79:00:f1:92:2b:98:9f:5d:b2:4f:d6:cc: 91:0f:2e:6e:f3:67:e4:fe:cb:e8:45:de:79:0e:49:d8:bf:f2: 78:95:5d:36:fb:fa:c2:4c:45:1f:f5:47:28:40:68:df:f9:04: 9f:7a:95:16:33:5f:26:88:c5:e1:09:d6:4a:f8:d1:f4:13:61: 4e:36:45:05:e6:75:06:8f:a4:c9:5d:dc:ed:7b:c6:86:92:86: 43:83:96:a6:48:6f:e6:a8:24:73:64:40:3b:85:2b:9a:df:d5: 32:9c:d4:40:2a:d0:d9:ea:72:8e:5f:d4:71:3b:fd:3b:a3:22: d8:b9:94:9e:94:58:10:bf:4b:26:e3:70:24:76:02:d0:b6:55: 1e:60:fb:70:be:80:01:3a:b1:f6:ca:41:eb:56:7c:54:90:bd: 5f:d6:43:f2:b5:65:f4:34:d6:85:07:f1:61:00:45:da:56:43: eb:11:e6:d5:da:10:00:62:2e:e4:92:9c:eb:00:4c:ff:06:48: b3:80:22:bf:26:5e:db:dd:48:ea:5e:ec:e9:1b:c3:64:64:7c: 12:70:90:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr5wR1D1TnOlsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk N2M4MGNlM2QtMzU2My00ZDdiLTg4YjAtMWUyY2Q2YTg3ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJ0s6yZoixV6jQu0dvoMBaSc9p8s85JJeGZ ZvPAF4Y054tBvH68SxN6YCmSPGSrzPCnMfgReLGwEOWWK4K79n06qcU+v/fGCNR3 1JE2wJy+xq00brENIugUnO4hE2A+ZV22xjUU+LB4YUcTKpHYDw02/H1u4cLJFF2i qFzWqm+9eDcHaRPDwijuN6GFiEb4L9FhZEiAY8M4G80uDHmXphkoDkRTrkP5Hrtt hhmGXYtXcItjPcSobD4uHbKhGlVFTJSngCjT3fDePIRLzC1PrB+1fH+Py98EQjbc vzVMOoptq/z77clcaXFG7WPDbb0EEwtb+n+BT2Rkwcj3Dl+qFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmxc1iIAwsUiRoglgXSYk3e2K/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlkOTRlN2YtODRkMi0z OGMwLTk1YTAtZTdjM2JlY2I5NmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyyhrJ3OPzPwqVrifpRcdii0n3HZfuc8T0W8hrvZn6DXeGII4o18fgH pnkA8ZIrmJ9dsk/WzJEPLm7zZ+T+y+hF3nkOSdi/8niVXTb7+sJMRR/1RyhAaN/5 BJ96lRYzXyaIxeEJ1kr40fQTYU42RQXmdQaPpMld3O17xoaShkODlqZIb+aoJHNk QDuFK5rf1TKc1EAq0Nnqco5f1HE7/TujIti5lJ6UWBC/SybjcCR2AtC2VR5g+3C+ gAE6sfbKQetWfFSQvV/WQ/K1ZfQ01oUH8WEARdpWQ+sR5tXaEABiLuSSnOsATP8G SLOAIr8mXtvdSOpe7Okbw2RkfBJwkPg= -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:22 2026 by rpki-client