$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed21814-1a4c-3b42-808c-af94d9027a32.roa File: bed21814-1a4c-3b42-808c-af94d9027a32.roa (raw, json) Hash identifier: d5lb3IhS0XeGwrd0X26w5CMHdizUm2K+cn2RaltUwPA= Subject key identifier: BE:D2:F1:FF:18:9F:9C:89:6C:27:98:07:F3:FA:54:63:C6:55:BA:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E743B2FC1AA349234C600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed21814-1a4c-3b42-808c-af94d9027a32.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.58.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:74:3b:2f:c1:aa:34:92:34:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bd6de6e7-af54-4d2d-9d7a-824e1cf0ba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:11:33:fb:bd:21:61:32:0c:fa:b6:6a:20: b9:46:4d:53:53:44:9f:ea:14:41:d5:2e:f2:8a:60: 86:62:68:ca:2a:df:79:a7:41:a5:7f:57:42:ed:03: a8:e4:6c:8b:c3:db:50:a4:3d:db:0c:a0:13:31:56: 57:c1:33:7c:67:dc:d2:d0:1d:3f:42:f8:ff:ee:7c: 9f:08:fe:31:df:c7:2b:7b:db:f9:2c:ee:e3:82:bd: e6:8a:aa:bb:a6:ef:8d:11:8d:89:88:de:f4:a6:2a: 83:f4:5f:e7:48:5c:53:d8:69:2b:18:ff:b7:94:eb: 95:7b:f6:50:95:15:bb:2e:92:b0:ec:27:b7:89:b6: 48:ba:29:89:4a:49:80:0f:db:19:ae:2d:4e:ca:e6: 02:31:86:f3:17:4d:02:a2:8f:d0:0c:0a:cf:fe:0f: c3:a4:bb:e3:b0:0b:c1:9c:dd:4a:5f:e0:7b:c3:5e: 40:04:3d:d0:7a:82:e2:f8:f6:69:6b:dc:19:ae:06: fa:88:94:39:22:e8:96:73:d0:5c:fc:53:e8:5d:a1: 83:a1:08:73:c3:22:8a:b8:77:2e:c6:f2:bf:49:60: 6d:9f:2e:b7:67:fb:8e:e8:11:0d:3d:fc:b8:67:12: e3:22:cf:e2:d5:2a:37:1d:3c:2d:1a:e7:d6:c1:71: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:F1:FF:18:9F:9C:89:6C:27:98:07:F3:FA:54:63:C6:55:BA:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bed21814-1a4c-3b42-808c-af94d9027a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6e:a2:bb:c1:a7:96:b5:c8:f9:49:15:18:97:44:15:4c:4a: 61:42:60:67:2e:ff:67:00:17:d7:a4:d5:97:32:98:3d:29:2f: c4:90:be:49:43:f1:bc:97:b4:ec:d8:0d:4b:63:aa:df:99:20: de:33:88:a7:57:d7:74:45:e5:5b:30:e7:b8:8f:4d:9a:aa:76: fb:cd:be:14:b6:81:26:a5:36:a0:b1:30:fb:1b:08:15:e1:2c: 73:ac:bc:cf:8a:b1:5d:76:d5:27:a3:79:b0:96:ee:dd:c5:9a: f3:e9:5e:1c:d8:df:14:18:6e:a7:e3:27:42:15:13:60:7a:4b: ac:62:83:35:93:d4:eb:bd:76:83:1c:17:78:51:ab:19:6c:08: 61:68:38:0b:dc:bf:8c:4d:69:cb:c8:98:57:4b:63:89:bc:c1: 20:8e:08:21:79:97:3c:6a:c5:7a:1d:ee:2f:82:9c:7f:97:7e: 71:dc:f6:57:03:39:60:b0:86:eb:4c:2b:59:e9:fa:58:27:04: 00:5c:f3:af:50:0a:47:4f:f6:83:7c:aa:61:94:1b:63:d2:d3: cd:6e:54:94:3a:d3:52:71:8c:f1:47:93:2c:d0:11:db:21:2c: b4:de:b4:89:45:4d:01:b4:59:ab:13:67:0d:7c:4f:a2:a5:6a: 3a:e3:20:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TnQ7L8GqNJI0xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmQ2ZGU2ZTctYWY1NC00ZDJkLTlkN2EtODI0ZTFjZjBiYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIYRM/u9IWEyDPq2aiC5Rk1TU0Sf6hRB1S7y imCGYmjKKt95p0Glf1dC7QOo5GyLw9tQpD3bDKATMVZXwTN8Z9zS0B0/Qvj/7nyf CP4x38cre9v5LO7jgr3miqq7pu+NEY2JiN70piqD9F/nSFxT2GkrGP+3lOuVe/ZQ lRW7LpKw7Ce3ibZIuimJSkmAD9sZri1OyuYCMYbzF00Coo/QDArP/g/DpLvjsAvB nN1KX+B7w15ABD3QeoLi+PZpa9wZrgb6iJQ5IuiWc9Bc/FPoXaGDoQhzwyKKuHcu xvK/SWBtny63Z/uO6BENPfy4ZxLjIs/i1So3HTwtGufWwXH7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7S8f8Yn5yJbCeYB/P6VGPGVboAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmVkMjE4MTQtMWE0Yy0z YjQyLTgwOGMtYWY5NGQ5MDI3YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJluorvBp5a1yPlJFRiXRBVMSmFCYGcu/2cAF9ek1ZcymD0pL8SQvklD 8byXtOzYDUtjqt+ZIN4ziKdX13RF5Vsw57iPTZqqdvvNvhS2gSalNqCxMPsbCBXh LHOsvM+KsV121SejebCW7t3FmvPpXhzY3xQYbqfjJ0IVE2B6S6xigzWT1Ou9doMc F3hRqxlsCGFoOAvcv4xNacvImFdLY4m8wSCOCCF5lzxqxXod7i+CnH+XfnHc9lcD OWCwhutMK1np+lgnBABc869QCkdP9oN8qmGUG2PS081uVJQ601JxjPFHkyzQEdsh LLTetIlFTQG0WasTZw18T6KlajrjIHE= -----END CERTIFICATE-----Generated at Wed Oct 28 10:10:30 2026 by rpki-client