$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa File: cb800a05-9a01-30d9-9210-55ad0745af5b.roa (raw, json) Hash identifier: n8Q3/WjXn5JkqXO6fy06f0eVBgzbQinJoBT9zxxRn4U= Subject key identifier: EE:4D:0B:16:19:88:9E:B8:77:EB:66:DC:DC:0F:BE:00:D8:52:5A:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A5B14E1C33E94A57D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.32.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a5:b1:4e:1c:33:e9:4a:57:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=cd3de9ef-aa9c-44d5-8042-e5138b30e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:96:e5:c2:64:90:0c:86:89:ad:9c:a3:8e: e6:c2:1f:b7:22:00:8a:ea:be:26:5c:da:e3:ab:08: 67:c6:fe:73:f7:42:2a:86:98:dd:29:48:a2:59:87: 49:c7:ad:50:6f:d3:c4:51:ae:4a:10:66:64:c4:25: 20:d3:b7:e3:5a:17:0b:2c:b5:77:bc:7d:41:b0:c3: 7c:4b:91:77:a9:46:33:5e:4f:23:41:9f:09:1b:de: 43:1c:2f:ed:9f:c0:be:fc:bb:c2:13:3f:6d:94:a6: 25:f9:f3:f2:c6:fc:08:45:71:ae:ae:d8:90:45:6f: ea:e0:d1:fa:22:99:3e:cb:10:93:67:09:08:73:b7: e4:6d:9d:57:84:fe:e2:f4:1d:14:99:e1:3f:30:1c: 86:61:b1:43:ed:39:d6:38:e2:ec:18:19:de:e2:c5: 49:fe:20:0a:3d:9c:83:81:82:c4:79:c7:ec:69:a7: ef:cc:91:92:f4:d0:b9:76:4e:82:73:60:f6:d9:8e: 71:3a:a0:5e:a4:29:df:4e:0b:32:ea:14:91:99:68: fa:f9:f7:24:fb:05:18:c0:35:e9:9d:cf:79:b9:89: 70:3f:f0:2a:c5:98:bd:7f:09:a3:66:c5:15:fd:e9: c1:6e:4c:3e:84:07:c6:ec:0b:17:46:d7:ef:dc:30: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:0B:16:19:88:9E:B8:77:EB:66:DC:DC:0F:BE:00:D8:52:5A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb800a05-9a01-30d9-9210-55ad0745af5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:32:b8:dd:c1:f4:29:af:40:a3:bd:80:99:8e:6a:90:86:27: 0c:37:31:2a:68:83:0a:82:a8:90:b4:51:4d:23:9f:3d:7d:04: fb:25:7f:19:8d:a9:93:e3:0b:84:cb:10:7a:c6:a9:1a:ab:5c: 60:52:e0:79:32:df:20:ec:0e:53:aa:96:5a:cf:a5:41:7b:89: 84:cf:14:3e:ca:8c:1a:c8:e1:f5:87:bd:fa:05:61:90:c2:97: 6f:a7:57:81:d2:67:f4:24:f5:5e:c0:cf:56:c3:5a:67:fd:7a: c4:00:1f:55:e2:fa:82:68:38:5f:1f:09:80:e0:73:b1:d7:42: a7:06:f8:33:fc:97:d5:88:58:e2:0f:36:b2:87:ae:0b:98:66: 72:c5:71:82:cf:24:39:e8:7c:6b:41:f5:dc:0b:d6:69:69:14: 31:c7:26:48:0b:22:67:1f:1d:0e:ee:ef:f6:2e:ae:dc:a9:cc: 6d:02:97:3f:09:9f:0a:ed:ba:c3:a6:07:63:61:2b:e0:55:ee: a4:cb:38:2f:74:eb:41:d1:00:fa:64:76:e6:9e:bb:d0:de:90: fb:0b:22:f3:14:26:b4:28:3f:9f:9a:29:16:f6:4b:e2:60:2c: 53:e2:ff:ec:8c:a5:52:50:15:17:51:9b:15:44:11:e2:11:d9: c5:c1:a5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqWxThwz6UpX1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk Y2QzZGU5ZWYtYWE5Yy00NGQ1LTgwNDItZTUxMzhiMzBlMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVyW5cJkkAyGia2co47mwh+3IgCK6r4mXNrj qwhnxv5z90IqhpjdKUiiWYdJx61Qb9PEUa5KEGZkxCUg07fjWhcLLLV3vH1BsMN8 S5F3qUYzXk8jQZ8JG95DHC/tn8C+/LvCEz9tlKYl+fPyxvwIRXGurtiQRW/q4NH6 Ipk+yxCTZwkIc7fkbZ1XhP7i9B0UmeE/MByGYbFD7TnWOOLsGBne4sVJ/iAKPZyD gYLEecfsaafvzJGS9NC5dk6Cc2D22Y5xOqBepCnfTgsy6hSRmWj6+fck+wUYwDXp nc95uYlwP/AqxZi9fwmjZsUV/enBbkw+hAfG7AsXRtfv3DC7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5NCxYZiJ64d+tm3NwPvgDYUloLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I4MDBhMDUtOWEwMS0z MGQ5LTkyMTAtNTVhZDA3NDVhZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4yuN3B9CmvQKO9gJmOapCGJww3MSpogwqCqJC0UU0jnz19BPslfxmN qZPjC4TLEHrGqRqrXGBS4Hky3yDsDlOqllrPpUF7iYTPFD7KjBrI4fWHvfoFYZDC l2+nV4HSZ/Qk9V7Az1bDWmf9esQAH1Xi+oJoOF8fCYDgc7HXQqcG+DP8l9WIWOIP NrKHrguYZnLFcYLPJDnofGtB9dwL1mlpFDHHJkgLImcfHQ7u7/YurtypzG0Clz8J nwrtusOmB2NhK+BV7qTLOC9060HRAPpkduaeu9DekPsLIvMUJrQoP5+aKRb2S+Jg LFPi/+yMpVJQFRdRmxVEEeIR2cXBpY4= -----END CERTIFICATE-----Generated at Tue Sep 1 12:38:48 2026 by rpki-client