$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa File: af0059cb-14d9-35f8-aa56-704c2806d4d2.roa (raw, json) Hash identifier: krmuoFGHFdXGyGx1mpz0PQcNby59RJTs+rlveSewXHQ= Subject key identifier: F8:57:5A:66:1E:52:44:E1:73:AF:AB:C4:A4:87:4C:75:B4:E4:79:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78E9F0795DB86C122721800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33659 IP address blocks: 68.86.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:9f:07:95:db:86:c1:22:72:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9a7f5259-b30a-4fa2-9683-c77c4c9de243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:d0:1a:bd:60:2b:16:88:f6:3a:91:4c:7f: f6:a2:33:c2:8f:53:93:9b:2e:db:ec:50:c9:f6:76: 94:ed:01:66:3b:9f:90:64:48:bf:bc:b1:04:8d:6f: d2:39:5c:30:4a:03:ec:f7:36:48:f1:44:ed:3c:37: e9:af:aa:3e:6f:83:cb:62:a2:7e:ec:53:4c:b9:bf: c3:32:11:53:bd:f2:fe:92:bd:eb:95:b8:d6:53:51: 90:df:b3:36:c2:1b:77:4b:a7:25:7b:bf:6b:27:8d: be:77:95:b1:ba:d8:68:f9:dd:b5:c8:96:57:b9:26: 9a:78:a7:38:50:01:ee:97:ff:6f:1b:2c:68:c8:97: 3c:91:6b:02:26:58:58:d9:8d:58:df:d9:36:c6:c9: a4:5d:67:8a:7e:10:3a:d4:41:87:95:af:25:e3:53: 85:fc:65:bf:d0:26:a9:1d:ba:6b:2b:f5:5f:2d:8c: 92:7b:6a:aa:a8:33:d1:37:ae:01:c8:8e:23:4d:cb: 97:15:7d:7a:5d:60:57:33:ed:d8:0e:16:f2:42:9a: ff:df:a1:ea:da:03:6d:14:2e:76:42:8a:e6:90:9a: fc:9b:8d:76:b9:56:b0:0f:b5:4b:05:5d:92:20:30: 36:cf:55:d6:29:f1:58:73:40:3e:7b:ca:43:69:87: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:5A:66:1E:52:44:E1:73:AF:AB:C4:A4:87:4C:75:B4:E4:79:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af0059cb-14d9-35f8-aa56-704c2806d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:91:0a:a3:34:23:7b:78:c9:8b:de:3b:1e:1e:d3:d4:ea:1a: c8:46:a4:92:1f:2f:27:62:e1:35:52:8f:15:e4:dd:94:ea:7b: d1:f0:bd:09:38:ce:99:38:d7:74:5f:ce:cc:3b:af:17:65:6d: d0:bf:a0:62:00:70:30:73:12:a1:01:5e:e2:b4:d3:22:56:68: 63:c5:79:0e:04:87:6d:0c:b0:f7:00:2e:ae:07:20:90:6a:d3: ad:f0:7a:60:81:a5:c5:4d:8e:c6:35:f5:7b:16:10:f4:45:7d: 76:28:a1:e7:7f:48:18:7d:54:3c:a9:d7:01:c7:d1:2b:b3:cf: 75:01:f3:89:39:e7:53:c0:9d:39:69:e2:71:e7:2c:fb:77:c3: d5:5a:0d:f1:32:62:86:7d:9c:7c:bc:5a:d5:5c:ec:23:c0:b1: bd:2d:6d:c3:f7:69:b3:44:af:3c:f0:fc:b6:63:5f:65:15:b8: 50:b2:f8:82:40:6c:c2:a9:75:87:7a:0a:f1:29:c7:2d:a4:24: bd:cf:85:0e:1b:4b:75:41:47:89:18:c0:2b:71:ba:8d:f4:b5: 53:61:0b:c6:86:ca:a5:c6:bf:63:34:ff:de:b9:c9:ce:b0:d2: 0d:13:74:66:86:24:1c:be:da:a4:99:48:81:4e:0c:b9:7e:60: 95:65:6d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njp8HlduGwSJyGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWE3ZjUyNTktYjMwYS00ZmEyLTk2ODMtYzc3YzRjOWRlMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwzQGr1gKxaI9jqRTH/2ojPCj1OTmy7b7FDJ 9naU7QFmO5+QZEi/vLEEjW/SOVwwSgPs9zZI8UTtPDfpr6o+b4PLYqJ+7FNMub/D MhFTvfL+kr3rlbjWU1GQ37M2wht3S6cle79rJ42+d5Wxutho+d21yJZXuSaaeKc4 UAHul/9vGyxoyJc8kWsCJlhY2Y1Y39k2xsmkXWeKfhA61EGHla8l41OF/GW/0Cap HbprK/VfLYySe2qqqDPRN64ByI4jTcuXFX16XWBXM+3YDhbyQpr/36Hq2gNtFC52 QormkJr8m412uVawD7VLBV2SIDA2z1XWKfFYc0A+e8pDaYcDEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhXWmYeUkThc6+rxKSHTHW05HlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWYwMDU5Y2ItMTRkOS0z NWY4LWFhNTYtNzA0YzI4MDZkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6RCqM0I3t4yYveOx4e09TqGshGpJIfLydi4TVSjxXk3ZTqe9HwvQk4 zpk413Rfzsw7rxdlbdC/oGIAcDBzEqEBXuK00yJWaGPFeQ4Eh20MsPcALq4HIJBq 063wemCBpcVNjsY19XsWEPRFfXYooed/SBh9VDyp1wHH0Suzz3UB84k551PAnTlp 4nHnLPt3w9VaDfEyYoZ9nHy8WtVc7CPAsb0tbcP3abNErzzw/LZjX2UVuFCy+IJA bMKpdYd6CvEpxy2kJL3PhQ4bS3VBR4kYwCtxuo30tVNhC8aGyqXGv2M0/965yc6w 0g0TdGaGJBy+2qSZSIFODLl+YJVlbQY= -----END CERTIFICATE-----Generated at Sat Sep 5 01:58:11 2026 by rpki-client