$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa File: ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa (raw, json) Hash identifier: 9AVQ3zlsUVDESEQ4CFY8awWm83NJZDQQ1FcmiLljgh8= Subject key identifier: 16:95:5A:BD:02:81:84:23:0F:A9:E3:54:74:97:04:C2:A4:8A:6B:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E617BF1C210E5DB2F4540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.37.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:61:7b:f1:c2:10:e5:db:2f:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bb9c934b-1cfa-4466-ac76-239a7d1fc882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:64:17:61:55:da:39:44:83:96:75:78:52: f9:e0:a0:10:31:ee:97:8f:78:56:b5:a1:60:7a:5e: a4:c0:8f:3a:16:53:de:34:54:cf:53:87:79:09:31: 1d:d7:e4:f5:c0:60:ef:58:4e:99:00:94:39:e4:2c: ce:7a:70:2c:3b:fa:e0:60:3a:5f:95:af:af:46:26: 5c:b6:f9:40:c9:bd:ac:e8:81:fe:97:00:37:47:44: 67:e2:94:46:1b:e5:8b:fc:94:6b:03:dc:ec:a4:1c: fa:10:9f:0f:46:b8:1b:25:4a:13:b0:28:8a:83:88: 27:3f:be:b8:45:37:16:a3:47:3d:70:47:90:74:4d: 20:6d:05:b9:c5:68:ee:e9:b2:d0:d3:b0:39:f5:e8: de:0f:e1:8b:42:4c:6b:a0:b2:6d:9d:5b:f8:74:08: be:8b:c5:36:38:d6:86:8a:3f:68:34:98:8b:09:a1: 82:88:55:df:1a:c6:cc:a3:f3:f8:1c:03:e5:f3:90: 41:08:1a:6d:02:95:9f:e5:2e:63:f7:95:f6:4f:cc: fb:2c:b9:fc:f6:5f:aa:e2:0d:ca:43:e9:2c:6b:51: 77:d1:af:b3:0f:9c:91:c9:cf:62:fa:3c:5a:f2:f7: 1c:e2:ca:ea:dd:ee:77:9d:a0:59:ee:fc:f6:02:55: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:5A:BD:02:81:84:23:0F:A9:E3:54:74:97:04:C2:A4:8A:6B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3bbf49-8b91-35b1-afc2-f34991aad29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:66:6a:5c:1c:6e:7e:6d:ea:ec:74:cd:e7:f4:09:8a:b5:f5: 59:a1:1a:da:04:0a:be:fb:57:c2:c5:b7:09:09:84:30:89:64: be:5d:6a:28:07:95:d8:34:c6:d1:11:c2:9d:5e:3e:e2:7e:3b: ce:08:13:c8:a4:4a:88:d6:49:20:61:b2:db:6e:62:e8:8b:d0: 6e:83:84:69:d0:0d:ba:bf:a5:c5:7d:45:17:92:8c:13:ce:df: 1b:dd:e0:23:04:f7:18:c6:0c:1a:76:74:6c:6b:e9:1f:32:09: 0c:67:c3:2a:71:f7:ac:fb:6c:fc:b6:3f:04:33:1a:3e:0b:f9: 24:b5:d0:b6:71:ba:eb:61:de:45:f0:ca:9a:04:8a:20:09:50: de:78:b8:07:65:8f:fa:d1:ad:07:34:7f:b1:dd:eb:23:20:30: 17:9f:24:a9:d1:84:1d:1b:06:0f:d2:49:34:46:8c:0e:98:ce: 05:69:d5:17:ce:dd:d3:c5:37:a9:4c:21:d1:cb:bf:f6:4a:23: 42:7f:79:69:0f:6d:61:20:94:a5:84:dd:1d:17:0d:2c:6a:03: 02:fa:45:44:a1:1e:7b:b3:04:de:0c:e8:bf:4d:ba:a4:c0:c8: d0:b4:c5:1c:01:28:79:8e:62:83:6d:70:e8:66:e9:8f:45:c3: 29:63:b1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmF78cIQ5dsvRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmI5YzkzNGItMWNmYS00NDY2LWFjNzYtMjM5YTdkMWZjODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4xkF2FV2jlEg5Z1eFL54KAQMe6Xj3hWtaFg el6kwI86FlPeNFTPU4d5CTEd1+T1wGDvWE6ZAJQ55CzOenAsO/rgYDpfla+vRiZc tvlAyb2s6IH+lwA3R0Rn4pRGG+WL/JRrA9zspBz6EJ8PRrgbJUoTsCiKg4gnP764 RTcWo0c9cEeQdE0gbQW5xWju6bLQ07A59ejeD+GLQkxroLJtnVv4dAi+i8U2ONaG ij9oNJiLCaGCiFXfGsbMo/P4HAPl85BBCBptApWf5S5j95X2T8z7LLn89l+q4g3K Q+ksa1F30a+zD5yRyc9i+jxa8vcc4srq3e53naBZ7vz2AlXlYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaVWr0CgYQjD6njVHSXBMKkimvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2EzYmJmNDktOGI5MS0z NWIxLWFmYzItZjM0OTkxYWFkMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlmalwcbn5t6ux0zef0CYq19VmhGtoECr77V8LFtwkJhDCJZL5daigH ldg0xtERwp1ePuJ+O84IE8ikSojWSSBhsttuYuiL0G6DhGnQDbq/pcV9RReSjBPO 3xvd4CME9xjGDBp2dGxr6R8yCQxnwypx96z7bPy2PwQzGj4L+SS10LZxuuth3kXw ypoEiiAJUN54uAdlj/rRrQc0f7Hd6yMgMBefJKnRhB0bBg/SSTRGjA6YzgVp1RfO 3dPFN6lMIdHLv/ZKI0J/eWkPbWEglKWE3R0XDSxqAwL6RUShHnuzBN4M6L9NuqTA yNC0xRwBKHmOYoNtcOhm6Y9FwyljsWc= -----END CERTIFICATE-----Generated at Sun Oct 25 20:58:52 2026 by rpki-client