$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1868fbe-ab20-3413-9bee-67965da291b1.roa File: b1868fbe-ab20-3413-9bee-67965da291b1.roa (raw, json) Hash identifier: VOy5iyJiPOvXK0qmG1aadoRy5quyVtMnPJkIE/gLFKk= Subject key identifier: 38:E3:96:EB:B8:97:11:E7:26:7B:B6:00:37:AE:E4:BE:E1:72:F4:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E6EF788BBF75CD7E56580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1868fbe-ab20-3413-9bee-67965da291b1.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.51.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:6e:f7:88:bb:f7:5c:d7:e5:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=baf1d471-1a9d-496a-890e-37a656475f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:7d:57:6d:04:ca:bd:bd:ee:48:41:6b:8c: 44:38:5c:58:99:12:ea:ea:57:af:88:d7:f4:30:d5: 47:63:54:4e:ca:61:ee:72:17:4f:4b:0e:39:9f:c9: 03:fe:8e:4b:bd:6d:d1:d9:03:67:92:4d:9a:90:5c: 48:9b:8f:ad:8c:e0:fb:6f:ae:11:02:8b:cd:95:58: e6:27:bf:8b:c3:c3:b1:d5:b1:82:cf:c6:33:26:07: 8a:ba:99:3c:71:e8:be:0b:3b:13:83:bc:55:76:18: 33:92:01:d3:6c:b5:40:2f:48:74:89:b7:cd:89:39: cd:34:83:67:04:2d:12:e7:48:23:be:19:0d:13:35: ae:9a:3c:67:aa:56:d2:2d:fb:80:9d:15:c7:08:20: cc:a3:08:0a:cd:d5:38:9c:19:cb:44:a8:ea:2e:39: 78:ac:3f:7f:88:1d:8a:7d:95:3f:13:44:2a:57:14: b2:cf:71:12:2f:18:92:20:d0:77:c7:a9:a2:52:d7: c6:cf:72:dc:85:3b:f9:99:3f:46:ab:f4:01:a8:c8: 6c:70:e6:2c:be:73:99:61:2b:31:6d:a2:df:8e:86: f5:b4:92:84:98:ca:6e:d3:f4:b3:dd:1b:f0:47:41: b5:3a:5e:a5:82:79:c8:7f:56:0a:56:37:0f:b5:b6: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:96:EB:B8:97:11:E7:26:7B:B6:00:37:AE:E4:BE:E1:72:F4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1868fbe-ab20-3413-9bee-67965da291b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b1:47:60:c4:8e:c9:63:66:e1:5b:55:0b:e9:93:b9:61:c6: 6c:42:40:59:a2:ea:9f:20:74:b1:d8:d5:23:f2:4e:71:74:2b: e0:55:ac:54:68:32:d6:f6:cd:02:58:5a:c0:4d:85:b7:ba:f3: cd:73:61:db:18:9b:37:e0:17:cd:a7:91:c2:62:30:92:7f:72: 0b:49:a3:a2:38:da:82:06:65:4b:81:2b:99:2c:36:17:d1:da: c5:7c:96:0e:d6:1c:9f:8b:0f:1d:33:fd:ec:56:94:89:8d:32: 82:71:e6:1d:51:c1:a3:48:f3:5e:c4:60:b0:50:7d:18:40:97: 28:0b:0d:e9:ae:de:11:32:b8:1a:a2:ed:7f:49:18:f6:05:ea: 18:68:c5:47:9b:09:6c:86:58:2e:bf:d5:91:eb:33:74:da:b4: 75:7f:b2:7f:25:eb:d4:60:1a:8d:eb:a7:8e:ae:00:62:8b:76: 60:8e:a3:86:e2:cb:69:79:a8:5d:a7:fb:6d:04:0b:f4:53:e5: 4f:df:0d:5a:8d:a1:2a:85:3f:ea:b2:7f:cc:40:b8:2e:eb:7e: 6e:22:c4:e8:47:03:13:60:49:34:07:71:1b:c3:d3:a3:67:3f: a0:b0:22:18:85:95:a5:71:bd:ea:3f:36:bc:1c:9b:a9:4f:06: 1b:d8:1f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tm73iLv3XNflZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmFmMWQ0NzEtMWE5ZC00OTZhLTg5MGUtMzdhNjU2NDc1Zjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRB9V20Eyr297khBa4xEOFxYmRLq6leviNf0 MNVHY1ROymHuchdPSw45n8kD/o5LvW3R2QNnkk2akFxIm4+tjOD7b64RAovNlVjm J7+Lw8Ox1bGCz8YzJgeKupk8cei+CzsTg7xVdhgzkgHTbLVAL0h0ibfNiTnNNINn BC0S50gjvhkNEzWumjxnqlbSLfuAnRXHCCDMowgKzdU4nBnLRKjqLjl4rD9/iB2K fZU/E0QqVxSyz3ESLxiSINB3x6miUtfGz3LchTv5mT9Gq/QBqMhscOYsvnOZYSsx baLfjob1tJKEmMpu0/Sz3RvwR0G1Ol6lgnnIf1YKVjcPtbY58QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjjluu4lxHnJnu2ADeu5L7hcvRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE4NjhmYmUtYWIyMC0z NDEzLTliZWUtNjc5NjVkYTI5MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByxR2DEjsljZuFbVQvpk7lhxmxCQFmi6p8gdLHY1SPyTnF0K+BVrFRo Mtb2zQJYWsBNhbe6881zYdsYmzfgF82nkcJiMJJ/cgtJo6I42oIGZUuBK5ksNhfR 2sV8lg7WHJ+LDx0z/exWlImNMoJx5h1RwaNI817EYLBQfRhAlygLDemu3hEyuBqi 7X9JGPYF6hhoxUebCWyGWC6/1ZHrM3TatHV/sn8l69RgGo3rp46uAGKLdmCOo4bi y2l5qF2n+20EC/RT5U/fDVqNoSqFP+qyf8xAuC7rfm4ixOhHAxNgSTQHcRvD06Nn P6CwIhiFlaVxveo/Nrwcm6lPBhvYH1g= -----END CERTIFICATE-----Generated at Mon Oct 26 11:30:33 2026 by rpki-client