$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa File: bd860549-3f89-30bd-a86a-e6550ed97700.roa (raw, json) Hash identifier: 4QPO+wnTwf4i2JEKkSvkP5MmXyyNUoY1k6gtyV3kZmE= Subject key identifier: 21:0B:43:2B:35:32:EA:69:43:07:7A:07:72:52:F8:CF:B3:D7:3A:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F8DA97F92FF3DD7FE2480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.34.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:8d:a9:7f:92:ff:3d:d7:fe:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=69c4b73e-3d76-4a9b-b6fd-e9006daea21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:1a:27:16:73:38:2e:5c:ec:ca:be:70:c9: cb:36:0d:da:03:3d:9c:9d:22:21:31:34:a7:74:ab: b6:74:66:60:04:b8:af:26:2f:0f:e8:54:9f:16:bc: 37:4b:e6:87:be:30:ff:f0:ea:78:fe:2b:82:23:a5: 64:0f:c9:c2:65:cd:c6:51:60:af:ef:70:6b:cb:31: b6:1c:02:b5:50:f6:69:85:ed:3c:7f:eb:fd:a8:69: 03:f6:06:d1:25:97:8e:03:3f:1d:ef:bf:34:08:8a: 62:c3:9b:0e:40:0a:0a:aa:a2:8a:5b:8f:ea:ab:eb: cc:42:fd:86:29:fd:7c:f4:3d:98:db:76:64:66:60: 4d:c5:cc:32:64:09:8a:c6:72:29:ed:df:ea:d3:38: b7:8a:77:98:8b:f6:a0:f9:4d:0c:83:06:90:45:ee: 09:5c:7a:71:5e:a2:1c:20:ba:7e:60:93:19:49:66: 1d:87:6d:73:8e:ae:d2:2c:4a:b5:14:29:31:87:06: 7e:6e:21:f5:af:4a:57:a3:22:d7:20:04:9f:fb:f9: 5b:2d:8e:0c:c9:bc:cb:ef:68:7a:93:0c:07:d5:3a: 6d:c7:f3:11:74:11:da:51:4a:18:aa:8c:7b:c2:0a: 97:92:e2:c2:d6:e3:e7:05:1d:3d:49:84:8b:07:a7: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0B:43:2B:35:32:EA:69:43:07:7A:07:72:52:F8:CF:B3:D7:3A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd860549-3f89-30bd-a86a-e6550ed97700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.34.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e9:c0:24:32:a3:af:0c:94:68:e9:88:c5:d3:6c:8d:2f:6e: 29:26:d0:fc:be:f4:e8:d4:21:23:3f:09:50:38:8a:56:e7:cb: f5:f2:70:e1:e4:4c:d7:ff:dd:5d:de:ec:18:dc:e4:95:0d:e9: 8c:52:94:30:b8:43:29:24:3c:9f:2a:4a:b5:11:81:2a:e8:b0: a2:89:35:be:83:99:48:a6:e0:5f:fe:58:68:fa:f2:22:0d:97: 7b:49:99:88:c1:8d:77:48:fc:5a:48:e9:50:ac:36:29:52:fe: 6a:db:d4:b0:fc:4a:9d:25:e1:5a:44:a7:ad:b0:a5:09:fd:37: 0a:0c:1a:bd:26:58:3a:7b:d8:0d:9a:48:69:56:0d:54:40:c8: 57:75:ef:d6:59:90:9f:f4:93:cb:4a:16:ab:fd:fc:fd:75:66: 5c:d9:83:30:4e:93:dc:3e:84:80:6d:06:d2:09:46:be:fb:56: aa:95:03:86:16:49:f0:a4:a7:a3:b8:69:e9:86:b1:75:8d:ab: 77:b0:ab:2f:e8:fb:57:c8:b2:3d:e1:7e:37:b6:d0:56:60:d1: 5f:80:30:49:c0:a8:00:ad:1f:05:df:96:04:b3:18:6e:6d:9c: 03:4f:8e:32:e4:60:95:34:09:90:63:d3:f0:57:54:c8:ba:8d: 92:9a:a4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T42pf5L/Pdf+JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjljNGI3M2UtM2Q3Ni00YTliLWI2ZmQtZTkwMDZkYWVhMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNkaJxZzOC5c7Mq+cMnLNg3aAz2cnSIhMTSn dKu2dGZgBLivJi8P6FSfFrw3S+aHvjD/8Op4/iuCI6VkD8nCZc3GUWCv73BryzG2 HAK1UPZphe08f+v9qGkD9gbRJZeOAz8d7780CIpiw5sOQAoKqqKKW4/qq+vMQv2G Kf189D2Y23ZkZmBNxcwyZAmKxnIp7d/q0zi3ineYi/ag+U0MgwaQRe4JXHpxXqIc ILp+YJMZSWYdh21zjq7SLEq1FCkxhwZ+biH1r0pXoyLXIASf+/lbLY4MybzL72h6 kwwH1Tptx/MRdBHaUUoYqox7wgqXkuLC1uPnBR09SYSLB6c4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCELQys1MuppQwd6B3JS+M+z1zr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ4NjA1NDktM2Y4OS0z MGJkLWE4NmEtZTY1NTBlZDk3NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLpwCQyo68MlGjpiMXTbI0vbikm0Py+9OjUISM/CVA4ilbny/XycOHk TNf/3V3e7Bjc5JUN6YxSlDC4QykkPJ8qSrURgSrosKKJNb6DmUim4F/+WGj68iIN l3tJmYjBjXdI/FpI6VCsNilS/mrb1LD8Sp0l4VpEp62wpQn9NwoMGr0mWDp72A2a SGlWDVRAyFd179ZZkJ/0k8tKFqv9/P11ZlzZgzBOk9w+hIBtBtIJRr77VqqVA4YW SfCkp6O4aemGsXWNq3ewqy/o+1fIsj3hfje20FZg0V+AMEnAqACtHwXflgSzGG5t nANPjjLkYJU0CZBj0/BXVMi6jZKapDc= -----END CERTIFICATE-----Generated at Thu Oct 22 05:41:35 2026 by rpki-client