$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcda82b-c496-3778-bee1-d01e92f6a106.roa File: cfcda82b-c496-3778-bee1-d01e92f6a106.roa (raw, json) Hash identifier: 8Rg/nkmGNleQe+njqdsWY8Gf9OZ0JPgGSqwONu7E9MM= Subject key identifier: 5D:CE:5A:37:31:7D:E5:09:1A:38:61:D5:5C:3D:DB:2F:0C:AB:6D:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862A79567568F79EA9C0280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcda82b-c496-3778-bee1-d01e92f6a106.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.32.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:a7:95:67:56:8f:79:ea:9c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=3a07766f-e0b7-40d1-b626-3bd0dc8dd861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:bf:be:2e:c4:8c:eb:d1:73:38:ee:d6:e7: 0d:ce:99:28:0d:7c:e1:14:94:30:7a:05:a1:f4:27: ed:ca:87:46:cc:32:b6:73:aa:bb:47:82:c1:db:0b: 31:e0:2a:ee:42:56:05:73:43:d4:cb:05:70:2f:6f: b9:93:e7:86:db:5e:2a:f3:84:8e:59:43:13:96:87: 1f:4d:df:63:e5:07:5b:81:da:bc:f2:ca:b3:29:01: 12:59:bc:d3:c4:de:3b:37:f8:f8:62:fb:87:0b:a1: 67:f5:d6:a0:50:7e:d8:e5:c1:d0:ca:26:b0:24:f7: dd:f9:f2:ed:b5:ee:dc:7a:2a:ea:5f:de:87:79:22: a8:5c:28:5f:59:52:e4:29:25:18:b8:1f:f9:c1:86: 1c:04:d0:e9:d9:16:8d:eb:49:71:e3:f0:e8:24:e8: 5c:d5:eb:06:bb:30:d3:e9:f1:d9:bc:a5:35:f1:87: 7a:03:f1:7f:13:9b:8d:dc:29:fa:cc:34:23:02:87: ac:ba:5c:f4:f4:82:0b:15:b0:c4:16:a9:54:b0:28: 8c:87:18:48:14:30:02:95:bd:d6:e4:9d:27:63:ef: c6:22:39:9e:1b:92:75:d8:02:b7:2b:d3:71:86:16: ce:6e:9f:92:09:f2:59:74:fe:5f:c6:12:00:1d:dc: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:5A:37:31:7D:E5:09:1A:38:61:D5:5C:3D:DB:2F:0C:AB:6D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfcda82b-c496-3778-bee1-d01e92f6a106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:97:c0:7b:3a:a7:bc:65:f3:b9:52:b7:72:e2:7d:10:d1:c6: 9a:fa:dd:a8:25:a8:7c:77:e7:f4:8e:a8:98:5a:85:8c:11:00: f1:46:15:42:4f:39:fc:16:0a:c8:f2:8c:a8:0f:ec:14:61:e6: ed:6e:fe:f9:73:46:df:af:5a:c6:fa:71:ac:31:cc:97:f8:2e: 73:30:ba:35:3b:40:7b:d9:c8:b1:05:d8:69:b0:f8:e6:b2:ce: 7a:59:c0:66:2d:48:45:73:0b:14:b6:2b:fb:70:83:ec:96:e3: 7d:af:77:f2:69:6e:7c:43:e5:fd:70:2b:53:00:18:45:b1:f4: b6:63:33:6c:6a:41:11:1a:36:d3:5b:af:0c:c3:33:0e:01:bc: 69:ee:25:dd:02:22:2d:ad:62:c0:f0:db:65:a8:66:ce:99:73: d6:c9:13:06:0d:16:08:76:3f:b5:0c:22:fe:4a:35:d5:d5:e6: aa:6c:02:a1:2f:63:6b:cb:e4:33:d7:6a:b0:8c:06:66:0c:2b: 2f:63:f1:d0:54:9f:aa:b3:ca:f7:c7:9b:5e:7d:4b:5b:b8:a2: 45:36:8b:09:e8:b3:dc:32:5f:a7:83:aa:48:fe:ea:c8:46:27: 6b:ad:f5:ed:46:bb:5d:44:11:aa:2d:64:7f:bd:cc:eb:e6:18: 59:0e:55:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqeVZ1aPeeqcAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk M2EwNzc2NmYtZTBiNy00MGQxLWI2MjYtM2JkMGRjOGRkODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/i/vi7EjOvRczju1ucNzpkoDXzhFJQwegWh 9CftyodGzDK2c6q7R4LB2wsx4CruQlYFc0PUywVwL2+5k+eG214q84SOWUMTlocf Td9j5Qdbgdq88sqzKQESWbzTxN47N/j4YvuHC6Fn9dagUH7Y5cHQyiawJPfd+fLt te7ceirqX96HeSKoXChfWVLkKSUYuB/5wYYcBNDp2RaN60lx4/DoJOhc1esGuzDT 6fHZvKU18Yd6A/F/E5uN3Cn6zDQjAoesulz09IILFbDEFqlUsCiMhxhIFDAClb3W 5J0nY+/GIjmeG5J12AK3K9NxhhbObp+SCfJZdP5fxhIAHdy3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3OWjcxfeUJGjhh1Vw92y8Mq204MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZjZGE4MmItYzQ5Ni0z Nzc4LWJlZTEtZDAxZTkyZjZhMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCBSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6XwHs6p7xl87lSt3LifRDRxpr63aglqHx35/SOqJhahYwRAPFGFUJP OfwWCsjyjKgP7BRh5u1u/vlzRt+vWsb6cawxzJf4LnMwujU7QHvZyLEF2Gmw+Oay znpZwGYtSEVzCxS2K/twg+yW432vd/JpbnxD5f1wK1MAGEWx9LZjM2xqQREaNtNb rwzDMw4BvGnuJd0CIi2tYsDw22WoZs6Zc9bJEwYNFgh2P7UMIv5KNdXV5qpsAqEv Y2vL5DPXarCMBmYMKy9j8dBUn6qzyvfHm159S1u4okU2iwnos9wyX6eDqkj+6shG J2ut9e1Gu11EEaotZH+9zOvmGFkOVQs= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:50 2026 by rpki-client