$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a1c43f-876b-3ccb-af70-d12996545a61.roa File: d1a1c43f-876b-3ccb-af70-d12996545a61.roa (raw, json) Hash identifier: 0npVoe5ebW+1eBzTjcYX+GDSN0UgjA3GYQIReYThV98= Subject key identifier: 5F:FB:36:9C:41:36:8E:7F:87:01:CB:A5:BE:E6:D1:E2:BA:EB:C8:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863E4F3B7D552E7560F9B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a1c43f-876b-3ccb-af70-d12996545a61.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.51.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:e4:f3:b7:d5:52:e7:56:0f:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d71d5d22-ad8f-40b6-883e-93d88cfafaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:02:6b:d4:ae:16:69:28:79:7a:68:bc:ab: 00:d7:01:97:dd:47:b6:ed:7d:2f:dc:58:5a:b5:d3: 02:cf:88:de:e5:c0:a5:e8:9b:5e:9e:c1:0d:e9:75: a2:e4:d9:a7:51:30:45:51:fe:c5:d8:8f:69:89:63: c1:2b:8c:34:23:87:df:7e:5f:2b:ea:98:f3:4e:bf: e5:a5:97:f9:73:4a:20:b9:a6:6e:96:42:4f:e0:ef: 17:97:f1:84:5b:a2:54:1f:12:c3:35:04:b5:02:4f: 9d:14:d0:22:02:84:9b:26:0d:08:d7:ef:ed:9c:43: b3:5e:c6:9a:84:93:34:66:cc:54:3e:8c:ca:ac:02: b6:83:43:43:48:c8:64:f2:d6:8c:98:84:d4:a3:00: 99:93:08:cd:c6:05:ea:76:1c:cd:91:b1:38:80:16: fd:14:69:22:e6:18:39:85:c8:02:11:f8:ff:19:6e: 71:77:4e:f8:dd:5e:c4:b8:73:26:84:3a:75:50:79: 1f:96:d5:cb:40:a1:b2:21:28:7a:fb:a3:9a:84:66: 7f:8b:c0:41:f1:f7:95:13:ae:51:61:bd:a5:88:c8: 23:b6:04:76:ec:56:b0:da:82:c8:fd:5a:b2:63:50: 87:96:02:6e:78:4d:9e:c1:3f:a9:a4:fc:6c:dc:52: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:36:9C:41:36:8E:7F:87:01:CB:A5:BE:E6:D1:E2:BA:EB:C8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a1c43f-876b-3ccb-af70-d12996545a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:28:fd:0d:28:86:ca:65:b1:f3:a8:aa:6e:af:11:d7:0a:06: 1f:80:41:f3:2f:71:b5:3f:37:eb:4d:8e:94:9c:45:45:b2:a1: ee:85:6c:4f:83:08:88:30:91:8c:93:57:dc:1b:34:5a:f5:8b: 30:0a:5c:a2:ab:e3:9e:3d:bc:a1:29:11:4d:34:4f:8d:46:3d: 63:b4:89:66:29:de:a5:a8:2a:de:6a:f6:98:1e:89:23:17:be: 55:0e:28:5f:30:21:e9:5d:51:66:41:23:99:39:38:bf:65:06: 58:b8:3c:20:16:99:93:de:01:78:b3:f1:c5:f8:22:8d:ac:f4: c5:7c:5a:4c:d2:69:fb:28:9a:b9:fa:18:e7:fd:d9:2c:7d:f0: 5e:c7:ac:00:cc:90:13:a9:a5:de:b8:b3:c6:8e:e3:5e:87:31: 6d:eb:a5:19:94:0b:83:72:2b:c4:1e:5e:fe:7a:d6:26:89:f8: 27:8e:cd:0c:f1:c1:5e:3d:a1:00:86:fb:2d:e3:c3:60:ee:c8: bd:17:83:f9:70:f6:88:69:3a:d8:24:d3:2b:04:4d:66:51:1c: e8:5e:e3:63:9d:47:d2:7c:b4:b7:3d:5b:31:ba:93:77:03:8c: 75:f0:2f:e6:e1:14:d4:80:b3:95:6f:08:9d:6c:9f:7b:9c:7a: a7:87:3a:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+Tzt9VS51YPmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDcxZDVkMjItYWQ4Zi00MGI2LTg4M2UtOTNkODhjZmFmYWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH8Ca9SuFmkoeXpovKsA1wGX3Ue27X0v3Fha tdMCz4je5cCl6JtensEN6XWi5NmnUTBFUf7F2I9piWPBK4w0I4fffl8r6pjzTr/l pZf5c0oguaZulkJP4O8Xl/GEW6JUHxLDNQS1Ak+dFNAiAoSbJg0I1+/tnEOzXsaa hJM0ZsxUPozKrAK2g0NDSMhk8taMmITUowCZkwjNxgXqdhzNkbE4gBb9FGki5hg5 hcgCEfj/GW5xd0743V7EuHMmhDp1UHkfltXLQKGyISh6+6OahGZ/i8BB8feVE65R Yb2liMgjtgR27Faw2oLI/VqyY1CHlgJueE2ewT+ppPxs3FL4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/7NpxBNo5/hwHLpb7m0eK668ixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFhMWM0M2YtODc2Yi0z Y2NiLWFmNzAtZDEyOTk2NTQ1YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8o/Q0ohsplsfOoqm6vEdcKBh+AQfMvcbU/N+tNjpScRUWyoe6FbE+D CIgwkYyTV9wbNFr1izAKXKKr4549vKEpEU00T41GPWO0iWYp3qWoKt5q9pgeiSMX vlUOKF8wIeldUWZBI5k5OL9lBli4PCAWmZPeAXiz8cX4Io2s9MV8WkzSafsomrn6 GOf92Sx98F7HrADMkBOppd64s8aO416HMW3rpRmUC4NyK8QeXv561iaJ+CeOzQzx wV49oQCG+y3jw2DuyL0Xg/lw9ohpOtgk0ysETWZRHOhe42OdR9J8tLc9WzG6k3cD jHXwL+bhFNSAs5VvCJ1sn3uceqeHOoo= -----END CERTIFICATE-----Generated at Tue Sep 1 05:01:13 2026 by rpki-client