$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa File: bf1ff146-60bc-3944-81ee-e53e6b26648b.roa (raw, json) Hash identifier: gWKmushqopa0+CXzhIlIB9eM7egiui8yHctDz3d92xo= Subject key identifier: 37:91:E5:3D:96:3C:6E:E7:34:F6:99:9D:82:CE:BB:C2:79:99:15:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E695B7F3745CFD6D9DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.43.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:69:5b:7f:37:45:cf:d6:d9:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=fd92c8ae-6e68-4fc3-8b81-6a67c9fa44da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:26:65:16:c2:35:57:45:73:71:56:5f:31: d4:08:69:82:eb:27:65:ec:21:7e:95:1b:8b:60:21: da:c7:09:d7:65:82:3a:a2:54:4a:cd:3e:9a:d2:d4: e4:74:3a:a4:75:9e:f9:2b:3f:14:15:f8:cd:a8:45: 36:aa:a1:b1:34:75:76:3d:ab:cd:34:bc:6e:d4:50: 58:d3:55:96:36:a2:88:0e:ea:d5:41:59:53:d0:92: 09:7e:bb:7a:36:31:0e:af:06:43:92:1e:95:03:68: 25:d6:37:90:65:15:92:e5:e0:42:cd:ff:2f:0c:d0: 48:7d:bd:21:6d:35:f9:80:91:88:68:ec:fd:73:58: c8:b9:a9:6a:1a:3c:87:c3:30:7b:4a:b1:de:75:31: 6e:77:65:f7:f7:db:00:3f:18:6a:61:33:08:7a:b0: e8:e9:82:06:6b:89:a9:15:72:36:22:b5:b4:99:83: 59:78:cb:35:84:f4:a2:16:d6:08:57:9c:dd:90:84: 33:e4:47:8f:99:b0:6b:7a:c4:83:fd:19:f6:14:4d: ee:6f:e3:fd:42:18:8a:b8:17:b2:26:e3:0c:79:11: 28:26:45:61:1a:c8:6d:ab:12:79:5e:36:58:8a:65: a5:75:5f:66:90:56:11:0e:cb:d0:3e:4e:aa:2f:ea: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:E5:3D:96:3C:6E:E7:34:F6:99:9D:82:CE:BB:C2:79:99:15:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf1ff146-60bc-3944-81ee-e53e6b26648b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2f:38:90:64:4c:9a:98:08:af:19:d6:ef:05:04:50:df:37: e8:0f:7a:37:23:42:c9:ed:12:a1:67:45:47:6f:fc:a6:83:7d: b9:b5:de:7e:3b:9c:30:b0:48:a1:dc:33:f8:ce:6d:60:41:1f: 6e:01:fc:8e:5c:58:b6:4a:d6:60:19:b7:dc:20:98:1b:32:61: 92:4c:b3:66:b9:4a:2a:9a:f2:2b:de:cd:aa:f0:9d:6b:3b:15: d0:11:46:4e:d9:ba:ba:d2:7d:ae:a4:8e:c0:3d:11:90:f8:41: b3:4f:d8:5c:a5:ba:8c:41:05:91:a5:8f:b6:3a:fe:e8:e4:b1: e5:86:26:cb:5e:4f:18:96:15:b5:f9:13:84:82:4d:cf:f6:38: a6:c7:8b:55:9e:ce:b4:83:fd:28:ca:f6:75:48:a3:60:20:4d: 5a:a5:62:05:db:ca:9a:8e:e2:91:de:00:3f:db:de:33:05:e9: 68:1a:7a:89:79:d8:e1:64:00:e0:8f:25:a1:bf:6a:08:3f:60: 25:97:d1:0e:7f:06:72:27:f7:cb:af:5a:db:61:c7:82:67:02: f9:a2:c4:b6:65:8e:f2:6a:f2:89:c2:0a:9d:77:ec:a9:08:fc: 20:e7:19:d2:7c:0f:71:f0:e1:a5:93:e6:e2:32:19:36:a3:03: d4:93:f6:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmlbfzdFz9bZ34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ5MmM4YWUtNmU2OC00ZmMzLThiODEtNmE2N2M5ZmE0NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN8mZRbCNVdFc3FWXzHUCGmC6ydl7CF+lRuL YCHaxwnXZYI6olRKzT6a0tTkdDqkdZ75Kz8UFfjNqEU2qqGxNHV2PavNNLxu1FBY 01WWNqKIDurVQVlT0JIJfrt6NjEOrwZDkh6VA2gl1jeQZRWS5eBCzf8vDNBIfb0h bTX5gJGIaOz9c1jIualqGjyHwzB7SrHedTFud2X399sAPxhqYTMIerDo6YIGa4mp FXI2IrW0mYNZeMs1hPSiFtYIV5zdkIQz5EePmbBresSD/Rn2FE3ub+P9QhiKuBey JuMMeREoJkVhGshtqxJ5XjZYimWldV9mkFYRDsvQPk6qL+osiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeR5T2WPG7nNPaZnYLOu8J5mRU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYxZmYxNDYtNjBiYy0z OTQ0LTgxZWUtZTUzZTZiMjY2NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcvOJBkTJqYCK8Z1u8FBFDfN+gPejcjQsntEqFnRUdv/KaDfbm13n47 nDCwSKHcM/jObWBBH24B/I5cWLZK1mAZt9wgmBsyYZJMs2a5Siqa8ivezarwnWs7 FdARRk7ZurrSfa6kjsA9EZD4QbNP2FyluoxBBZGlj7Y6/ujkseWGJsteTxiWFbX5 E4SCTc/2OKbHi1WezrSD/SjK9nVIo2AgTVqlYgXbypqO4pHeAD/b3jMF6Wgaeol5 2OFkAOCPJaG/agg/YCWX0Q5/BnIn98uvWtthx4JnAvmixLZljvJq8onCCp137KkI /CDnGdJ8D3Hw4aWT5uIyGTajA9ST9s8= -----END CERTIFICATE-----Generated at Sat Oct 24 18:53:50 2026 by rpki-client