$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ea4dc-ebb3-32a0-a0d5-ea8ccdc3ef88.roa File: af5ea4dc-ebb3-32a0-a0d5-ea8ccdc3ef88.roa (raw, json) Hash identifier: LqGoItlM1cmoNROytDUP0z3S5P6HblZI3JxLvOemlLo= Subject key identifier: E6:54:4E:6E:07:73:A1:53:AE:96:F9:2C:63:C3:E5:8A:60:76:17:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BF2555968A89867CAE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ea4dc-ebb3-32a0-a0d5-ea8ccdc3ef88.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.58.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:bf:25:55:96:8a:89:86:7c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=a0ac3a42-67a0-4254-bbc6-3da30dddde41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:a8:a3:f4:55:68:06:81:2f:a3:8a:e4:1f: 93:e5:b1:7f:bf:ed:9f:de:52:71:fe:fa:17:52:8e: 6b:be:e2:fd:db:f3:3f:1a:b7:0f:53:77:fd:19:7c: fd:37:49:68:0e:d0:c1:fa:13:22:62:90:dc:06:69: 4a:0c:2c:0c:09:21:6b:03:da:1e:a2:8a:ba:21:bf: 2b:f8:d3:b4:4d:90:c3:3a:2f:c5:3c:fe:06:63:fb: cb:b7:3b:26:b9:ae:8a:b5:34:fa:dc:c5:2a:c7:15: 7e:37:a1:86:51:a7:e3:70:87:1d:54:b1:14:09:13: 12:51:05:27:86:48:81:1b:a9:eb:63:04:23:97:ad: fc:7b:f1:0f:82:5d:64:d6:e7:d7:1f:2f:e6:ed:ad: 62:4b:25:36:fe:c6:9a:3d:cd:31:7c:44:33:82:f7: ef:ec:fc:51:d6:2c:be:c2:e8:73:ec:5c:36:6d:3d: cc:09:95:d0:8a:40:19:b3:62:32:bc:c5:4c:a7:35: a8:95:b6:b9:98:aa:14:64:dc:1a:ad:ae:75:b4:e5: 84:4b:c1:ee:40:ac:fd:46:c3:17:ed:4a:01:45:fc: fe:87:0d:44:b6:db:cc:dd:28:38:14:b0:47:d3:51: 0d:9f:91:d9:61:ed:3f:b5:4d:c2:a2:95:ed:a9:ae: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:4E:6E:07:73:A1:53:AE:96:F9:2C:63:C3:E5:8A:60:76:17:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ea4dc-ebb3-32a0-a0d5-ea8ccdc3ef88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:15:90:83:0d:c2:81:ab:e2:b9:8f:c9:7e:fc:97:e8:a6:78: 7b:3b:00:f5:ed:4a:74:cc:7d:6d:d7:80:ec:3c:c8:df:62:d9: be:ee:f2:bc:0d:97:39:40:83:7b:dc:9d:ac:36:a5:3b:71:a3: 88:72:5b:c7:c2:29:dc:4e:0f:55:9a:80:99:93:20:ef:8a:fd: e5:57:6c:6c:fe:f2:32:63:dc:2c:5d:15:ac:13:01:c8:0f:3e: 5b:8c:f6:d5:59:39:eb:6b:2b:3b:b3:9e:6e:4d:76:f2:82:92: b7:1b:ab:7c:04:e4:2c:29:e2:76:b3:97:80:c8:36:6a:2a:75: b6:82:0c:6b:a8:07:fd:4f:2b:ed:1f:5b:c4:21:2d:f3:84:ea: 5a:bf:b4:9f:7f:09:dd:3b:cc:39:19:56:07:24:25:f0:b2:53: 9d:23:e1:d5:47:12:da:dc:7e:c2:d3:fd:21:e0:42:c7:b4:75: 87:cc:ba:ca:69:05:cd:e1:20:d4:17:b2:cc:68:1a:33:58:f4: 4c:12:0a:7b:ef:0f:eb:07:af:8c:45:bc:c3:49:9c:f1:58:74: 01:b3:6e:06:31:59:b6:56:dd:36:13:2c:83:fa:4c:3d:70:82: 76:f1:75:e5:09:f3:48:da:67:ed:82:70:d9:86:2c:71:ea:cc: bc:f6:6d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr8lVZaKiYZ8rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YTBhYzNhNDItNjdhMC00MjU0LWJiYzYtM2RhMzBkZGRkZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2eoo/RVaAaBL6OK5B+T5bF/v+2f3lJx/voX Uo5rvuL92/M/GrcPU3f9GXz9N0loDtDB+hMiYpDcBmlKDCwMCSFrA9oeooq6Ib8r +NO0TZDDOi/FPP4GY/vLtzsmua6KtTT63MUqxxV+N6GGUafjcIcdVLEUCRMSUQUn hkiBG6nrYwQjl638e/EPgl1k1ufXHy/m7a1iSyU2/saaPc0xfEQzgvfv7PxR1iy+ wuhz7Fw2bT3MCZXQikAZs2IyvMVMpzWolba5mKoUZNwara51tOWES8HuQKz9RsMX 7UoBRfz+hw1EttvM3Sg4FLBH01ENn5HZYe0/tU3CopXtqa6aRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZUTm4Hc6FTrpb5LGPD5Ypgdhc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY1ZWE0ZGMtZWJiMy0z MmEwLWEwZDUtZWE4Y2NkYzNlZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0VkIMNwoGr4rmPyX78l+imeHs7APXtSnTMfW3XgOw8yN9i2b7u8rwN lzlAg3vcnaw2pTtxo4hyW8fCKdxOD1WagJmTIO+K/eVXbGz+8jJj3CxdFawTAcgP PluM9tVZOetrKzuznm5NdvKCkrcbq3wE5Cwp4nazl4DINmoqdbaCDGuoB/1PK+0f W8QhLfOE6lq/tJ9/Cd07zDkZVgckJfCyU50j4dVHEtrcfsLT/SHgQse0dYfMuspp Bc3hINQXssxoGjNY9EwSCnvvD+sHr4xFvMNJnPFYdAGzbgYxWbZW3TYTLIP6TD1w gnbxdeUJ80jaZ+2CcNmGLHHqzLz2bco= -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:38 2026 by rpki-client