$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cabd371d-b738-336b-9f6c-d7218b0fba1e.roa File: cabd371d-b738-336b-9f6c-d7218b0fba1e.roa (raw, json) Hash identifier: M1zyM592xKDmd2qOccn7L15lvhDm0/TLsvpNn7fEa8A= Subject key identifier: 0F:B0:77:3A:31:DD:A5:C7:5C:23:F3:1E:70:A8:B6:03:0E:D9:54:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DBB2BCB54A7D133C7400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cabd371d-b738-336b-9f6c-d7218b0fba1e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.40.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:db:b2:bc:b5:4a:7d:13:3c:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=3f608876-a5f5-4aa2-8051-9756c9ff197c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:9a:ea:54:31:19:f7:58:2e:5c:e4:57:c9: a6:4b:ce:3f:ce:32:57:40:54:0d:9d:d1:8c:ea:7c: b0:6a:4a:f5:f9:14:a9:99:94:a9:d3:8a:b7:5b:48: d6:7b:82:0c:df:b7:82:f1:cf:8f:01:0e:85:4e:50: f8:f6:e8:f8:78:63:46:bd:7c:bd:56:24:75:18:ac: 19:88:fd:57:d0:3d:27:a0:5b:66:66:d0:9c:64:7b: 76:fc:85:19:17:48:4a:83:93:94:0a:e7:13:18:9b: 4f:b8:da:28:84:71:76:9d:d5:33:61:80:87:68:59: a6:fa:93:5e:70:7a:d5:fc:bc:6e:21:68:8d:7d:b6: 52:78:3d:06:77:80:7a:88:80:52:cc:78:4e:dd:6a: f3:e1:2a:0d:3b:77:06:e0:75:a6:29:cb:c2:b6:b1: e9:a9:d7:18:8b:1d:17:64:9e:96:3e:3e:40:99:27: 9b:68:65:0a:64:1b:d1:d6:b8:f9:cb:c0:27:92:5c: 3e:9f:36:5d:2c:ab:c2:66:90:2c:8b:70:83:84:f6: c1:80:3c:49:29:51:24:c8:b0:ac:c6:44:da:4c:33: 7a:98:b1:61:79:88:32:17:db:74:8d:8b:0b:fd:7f: b8:df:5c:c2:27:0d:f3:d3:a2:11:37:26:14:90:6b: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:77:3A:31:DD:A5:C7:5C:23:F3:1E:70:A8:B6:03:0E:D9:54:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cabd371d-b738-336b-9f6c-d7218b0fba1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:15:49:fc:cd:b8:8b:3c:89:9e:53:81:00:db:0e:50:03:14: e4:84:3a:ce:66:22:b6:6b:c4:28:5a:f9:ec:d0:0a:46:8d:4c: 1f:52:df:e5:43:6a:a5:55:b5:b9:34:26:f0:37:f3:8c:a3:63: 95:80:8e:bc:00:ff:80:e9:35:63:8d:16:9e:dc:73:3a:7f:33: 0b:3a:75:51:97:55:48:46:fd:38:78:ba:f3:a6:37:2a:e5:06: d8:3b:d5:46:5a:80:19:24:7d:84:e8:13:4a:5f:7b:d2:14:67: 4f:d1:c3:5e:32:bf:55:f3:b8:22:a4:9d:37:2a:56:5f:33:8d: 66:f3:5c:d7:3e:c9:59:48:c8:64:61:b8:1c:42:ec:a3:d0:39: 00:63:ab:27:53:e4:fd:6b:64:86:dd:5c:33:90:bf:58:2c:67: 6b:ff:68:4d:98:e7:75:10:28:36:4a:9a:b6:54:a9:87:83:a0: 1c:c1:52:93:27:a8:5f:8f:03:b8:99:74:13:ed:87:c6:cc:45: 5d:a9:52:09:93:82:a4:da:0d:2c:41:1b:7b:71:6b:a3:0c:36: 3e:09:a9:f7:0d:7a:c5:33:3b:65:9c:5e:f6:66:63:3c:aa:82: 40:09:d7:2f:8d:fc:c7:f1:0f:e6:bf:1e:20:60:12:2f:5f:53: 6d:0b:ec:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9uyvLVKfRM8dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk M2Y2MDg4NzYtYTVmNS00YWEyLTgwNTEtOTc1NmM5ZmYxOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwaa6lQxGfdYLlzkV8mmS84/zjJXQFQNndGM 6nywakr1+RSpmZSp04q3W0jWe4IM37eC8c+PAQ6FTlD49uj4eGNGvXy9ViR1GKwZ iP1X0D0noFtmZtCcZHt2/IUZF0hKg5OUCucTGJtPuNoohHF2ndUzYYCHaFmm+pNe cHrV/LxuIWiNfbZSeD0Gd4B6iIBSzHhO3Wrz4SoNO3cG4HWmKcvCtrHpqdcYix0X ZJ6WPj5AmSebaGUKZBvR1rj5y8Anklw+nzZdLKvCZpAsi3CDhPbBgDxJKVEkyLCs xkTaTDN6mLFheYgyF9t0jYsL/X+431zCJw3z06IRNyYUkGurhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+wdzox3aXHXCPzHnCotgMO2VRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FiZDM3MWQtYjczOC0z MzZiLTlmNmMtZDcyMThiMGZiYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4VSfzNuIs8iZ5TgQDbDlADFOSEOs5mIrZrxCha+ezQCkaNTB9S3+VD aqVVtbk0JvA384yjY5WAjrwA/4DpNWONFp7cczp/Mws6dVGXVUhG/Th4uvOmNyrl Btg71UZagBkkfYToE0pfe9IUZ0/Rw14yv1XzuCKknTcqVl8zjWbzXNc+yVlIyGRh uBxC7KPQOQBjqydT5P1rZIbdXDOQv1gsZ2v/aE2Y53UQKDZKmrZUqYeDoBzBUpMn qF+PA7iZdBPth8bMRV2pUgmTgqTaDSxBG3txa6MMNj4JqfcNesUzO2WcXvZmYzyq gkAJ1y+N/MfxD+a/HiBgEi9fU20L7LI= -----END CERTIFICATE-----Generated at Tue Sep 1 12:00:18 2026 by rpki-client