$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae25d351-bcc2-3c80-bfdd-9db55a4ea9e3.roa File: ae25d351-bcc2-3c80-bfdd-9db55a4ea9e3.roa (raw, json) Hash identifier: 960ocC2mHWjUox26kyKFfzlRoh/ZkCKe3G0KKUNpfDQ= Subject key identifier: DC:05:3E:61:B4:62:6F:4D:2F:FE:59:7B:1E:D1:F2:A5:1A:C0:92:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863E3ABBE7652EF6F078C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae25d351-bcc2-3c80-bfdd-9db55a4ea9e3.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.49.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:e3:ab:be:76:52:ef:6f:07:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=1916e63a-015a-48b0-8577-80412c6c9967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:ae:11:ad:56:89:60:f6:b9:e2:30:f2:25: 74:f1:99:0b:c5:87:4d:0c:21:ad:61:99:87:b3:6c: 00:3b:ce:2e:68:84:93:69:69:ea:f8:ef:51:98:22: a4:aa:a1:de:e6:6e:c3:33:42:cb:0f:6a:98:4c:29: d8:63:37:27:6f:39:20:10:24:ee:fb:3b:c9:9e:9c: 11:85:5e:30:b0:e5:0f:0b:c5:98:08:88:c9:4f:b5: 96:a2:4c:70:1e:6d:c7:7c:b3:0d:ae:44:f6:4b:e0: 02:e3:a9:fa:2f:c9:70:8a:1c:a4:f0:af:1a:d9:91: 73:18:c9:f1:5d:7a:73:ff:e1:02:44:5f:db:bf:c4: df:17:90:3c:8f:88:7c:9b:4c:9d:82:ea:48:29:de: 3f:01:a7:a8:8f:82:6d:af:39:7d:5e:5b:6b:5a:89: 40:11:b1:f6:58:63:ab:3d:d4:59:9d:9f:5a:3b:4a: 65:c5:01:e8:63:3b:51:e3:64:3a:7b:14:38:a0:14: 4a:1e:b3:57:e5:7e:c9:39:52:8e:0e:05:ed:a4:0c: 2c:32:0f:79:9c:1d:53:be:4d:82:b4:d3:33:05:c5: 66:24:5b:6c:6a:c7:36:aa:44:c1:86:6e:b7:4d:47: f7:6c:88:2c:73:cf:a8:28:0f:91:61:2c:c6:66:fe: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:3E:61:B4:62:6F:4D:2F:FE:59:7B:1E:D1:F2:A5:1A:C0:92:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae25d351-bcc2-3c80-bfdd-9db55a4ea9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:da:36:5a:5b:f0:5d:5b:4f:0b:21:6f:2d:ac:30:b5:e1:d1: 59:f6:80:58:7c:da:08:a1:57:69:14:a5:bf:63:12:d0:87:c8: ec:07:c0:78:b6:e4:67:55:0c:5e:9b:45:ff:14:54:7f:1d:77: 99:71:48:c1:2f:77:5a:18:e2:b0:d7:10:7e:46:87:3b:36:db: c9:63:70:17:a6:7f:cf:86:38:45:3c:fc:c7:33:b3:da:a4:b2: 96:4c:c0:57:ba:61:97:42:f4:6e:f1:6b:ca:85:ab:ba:dd:e0: 69:ec:e7:b1:b9:96:5b:91:6f:14:6c:05:e0:91:83:ea:33:aa: be:bd:02:78:f2:50:fa:81:29:e4:a7:ca:18:ce:02:7b:a3:5f: 40:30:a9:34:6f:3c:5a:d0:2c:a4:a1:ff:6f:35:33:87:8e:dd: d5:3a:7e:5b:38:5d:61:35:73:15:7b:c3:5e:35:ce:74:bd:c2: 5e:46:91:3a:df:e4:3b:ef:9c:80:7f:67:e3:f9:84:b1:1a:ba: 85:8f:16:b4:1b:6e:0c:89:10:35:e6:91:b3:1a:95:75:93:cb: 8e:78:ab:3f:3a:9b:91:bc:42:bb:ee:23:6a:82:a9:1e:f1:23: e9:03:a3:0a:92:70:52:df:8a:a6:46:c5:49:3f:23:32:dd:21: 96:bc:2f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+OrvnZS728HjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MTkxNmU2M2EtMDE1YS00OGIwLTg1NzctODA0MTJjNmM5OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUyuEa1WiWD2ueIw8iV08ZkLxYdNDCGtYZmH s2wAO84uaISTaWnq+O9RmCKkqqHe5m7DM0LLD2qYTCnYYzcnbzkgECTu+zvJnpwR hV4wsOUPC8WYCIjJT7WWokxwHm3HfLMNrkT2S+AC46n6L8lwihyk8K8a2ZFzGMnx XXpz/+ECRF/bv8TfF5A8j4h8m0ydgupIKd4/Aaeoj4Jtrzl9XltrWolAEbH2WGOr PdRZnZ9aO0plxQHoYztR42Q6exQ4oBRKHrNX5X7JOVKODgXtpAwsMg95nB1Tvk2C tNMzBcVmJFtsasc2qkTBhm63TUf3bIgsc8+oKA+RYSzGZv4WqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwFPmG0Ym9NL/5Zex7R8qUawJIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUyNWQzNTEtYmNjMi0z YzgwLWJmZGQtOWRiNTVhNGVhOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjaNlpb8F1bTwshby2sMLXh0Vn2gFh82gihV2kUpb9jEtCHyOwHwHi2 5GdVDF6bRf8UVH8dd5lxSMEvd1oY4rDXEH5Ghzs228ljcBemf8+GOEU8/Mczs9qk spZMwFe6YZdC9G7xa8qFq7rd4Gns57G5lluRbxRsBeCRg+ozqr69AnjyUPqBKeSn yhjOAnujX0AwqTRvPFrQLKSh/281M4eO3dU6fls4XWE1cxV7w141znS9wl5GkTrf 5DvvnIB/Z+P5hLEauoWPFrQbbgyJEDXmkbMalXWTy454qz86m5G8QrvuI2qCqR7x I+kDowqScFLfiqZGxUk/IzLdIZa8L+o= -----END CERTIFICATE-----Generated at Tue Sep 1 05:20:52 2026 by rpki-client