$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa File: b08b7563-4f7c-385c-b6f4-9fead572b03b.roa (raw, json) Hash identifier: 3w6GBpFR91DQnM+aWXR6FdjdqHgVjRwT0+ZhHOyDpL0= Subject key identifier: 77:4E:FB:91:2F:26:A4:AD:40:AE:60:FF:43:FD:41:FC:4A:A3:7D:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DF3840F2AED606EBEF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.43.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:df:38:40:f2:ae:d6:06:eb:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=92edbfd7-8a24-4404-8c7a-a8f03a335d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:e5:fc:ad:b7:75:bc:7b:7f:af:09:ff:51: 05:49:09:07:d5:32:13:c2:ca:05:8e:06:77:6a:30: 6e:ff:07:1e:38:0e:36:6d:96:3c:5b:c1:bd:34:b7: 83:4d:c9:d3:e5:26:dd:a1:28:56:3e:70:8c:48:c5: d7:ad:6a:01:85:00:89:8a:ca:2d:af:de:8e:e0:53: ab:f1:d3:d4:4f:70:b7:13:84:94:0a:bb:5b:27:9d: 15:9f:80:85:b2:ef:21:69:ce:eb:7f:25:8a:6e:ba: 3d:6e:de:fc:a6:b8:2f:70:df:9e:3e:ea:fc:54:88: 2a:71:b9:15:25:88:ec:2e:41:2b:ee:9e:fd:8a:ca: 78:a0:fe:1c:96:f1:ff:62:66:f9:d3:05:5c:33:a9: 9a:3a:b8:6d:97:2e:0d:e2:1c:ba:9b:b4:f3:4d:0b: ed:a3:8f:82:79:9a:be:22:b1:db:18:6d:f8:71:2d: c8:8f:a3:79:e4:1e:6c:de:f7:7a:cc:6a:08:af:53: cf:f3:83:08:74:41:2e:a6:01:6f:49:97:34:2e:63: 02:2f:23:15:4b:db:86:be:b6:18:3f:ad:a0:f3:e6: c0:56:54:6e:d6:bb:b6:3a:f2:b8:85:be:e8:a9:31: 7b:37:5b:9b:66:89:8c:65:71:d4:20:97:14:c4:2d: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:FB:91:2F:26:A4:AD:40:AE:60:FF:43:FD:41:FC:4A:A3:7D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08b7563-4f7c-385c-b6f4-9fead572b03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:d9:85:35:e4:ad:3b:06:5f:48:d9:53:f6:fd:3f:91:9a:49: f5:c3:f6:f0:63:80:c2:c5:ab:21:56:e6:59:18:e0:08:8c:64: f2:59:e8:0f:7c:05:19:80:91:36:a5:cf:bd:7c:86:10:2c:a0: 72:1b:75:3a:db:e4:c7:91:84:cc:c7:e3:bd:c4:8f:99:df:d9: e1:48:6f:a2:91:7c:d3:51:65:65:67:85:ed:0d:33:81:21:bf: a7:b7:57:bb:cc:28:bb:92:32:19:aa:d9:8b:10:5c:92:2f:10: 80:4f:a9:58:da:09:6a:c0:03:8e:73:c5:cd:9c:5f:fc:81:6a: 1e:02:2b:fd:39:43:15:ed:37:8c:42:f9:0b:aa:96:47:fa:0f: bb:95:85:6c:57:4a:c1:74:5e:1f:f8:74:cc:b2:aa:5e:fc:15: b5:2c:5c:07:e6:1b:bd:53:af:5b:17:18:af:5d:90:17:5f:36: dc:1e:c1:e7:1a:9c:a1:c4:cb:23:64:28:73:21:25:51:3f:e1: b9:8c:39:44:2d:23:7a:dd:41:6b:42:ae:97:5d:ae:c4:89:e2: 4d:4c:e1:4f:40:fc:20:28:15:26:fa:00:d4:f9:27:10:1e:65: d3:6c:33:63:fe:9a:bd:4a:eb:92:18:f5:d7:88:f1:ff:a8:1d: 6c:e7:18:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY984QPKu1gbr74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OTJlZGJmZDctOGEyNC00NDA0LThjN2EtYThmMDNhMzM1ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrLl/K23dbx7f68J/1EFSQkH1TITwsoFjgZ3 ajBu/wceOA42bZY8W8G9NLeDTcnT5SbdoShWPnCMSMXXrWoBhQCJisotr96O4FOr 8dPUT3C3E4SUCrtbJ50Vn4CFsu8hac7rfyWKbro9bt78prgvcN+ePur8VIgqcbkV JYjsLkEr7p79isp4oP4clvH/Ymb50wVcM6maOrhtly4N4hy6m7TzTQvto4+CeZq+ IrHbGG34cS3Ij6N55B5s3vd6zGoIr1PP84MIdEEupgFvSZc0LmMCLyMVS9uGvrYY P62g8+bAVlRu1ru2OvK4hb7oqTF7N1ubZomMZXHUIJcUxC3/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdO+5EvJqStQK5g/0P9QfxKo300MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA4Yjc1NjMtNGY3Yy0z ODVjLWI2ZjQtOWZlYWQ1NzJiMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANnZhTXkrTsGX0jZU/b9P5GaSfXD9vBjgMLFqyFW5lkY4AiMZPJZ6A98 BRmAkTalz718hhAsoHIbdTrb5MeRhMzH473Ej5nf2eFIb6KRfNNRZWVnhe0NM4Eh v6e3V7vMKLuSMhmq2YsQXJIvEIBPqVjaCWrAA45zxc2cX/yBah4CK/05QxXtN4xC +Quqlkf6D7uVhWxXSsF0Xh/4dMyyql78FbUsXAfmG71Tr1sXGK9dkBdfNtweweca nKHEyyNkKHMhJVE/4bmMOUQtI3rdQWtCrpddrsSJ4k1M4U9A/CAoFSb6ANT5JxAe ZdNsM2P+mr1K65IY9deI8f+oHWznGFw= -----END CERTIFICATE-----Generated at Tue Sep 1 05:34:54 2026 by rpki-client