$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa File: d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa (raw, json) Hash identifier: QbrApqwlWxD/Bdf5snCxCCqLmeGLCe6QwMbN3s6sdmQ= Subject key identifier: A8:B5:4D:B7:DC:91:EC:30:26:C5:01:2F:80:B9:55:B8:69:B6:60:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F9274D20F038FD23F2600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.37.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:92:74:d2:0f:03:8f:d2:3f:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=8f7f9452-ca2e-4d41-91e4-50e9edbbf5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:3e:1d:f0:2c:d4:81:b5:a5:7b:bf:9a:20: f1:c7:55:9a:85:1e:84:e9:ae:2d:2a:bd:ef:30:ec: 2e:3c:b8:66:e3:ce:31:2d:90:4f:5c:57:36:a7:75: d1:f0:0b:1f:64:d1:59:76:e5:34:b7:60:bf:2a:30: 2e:3e:07:f4:84:8f:94:dc:0b:6b:b0:83:26:2d:1c: b0:ec:14:fb:70:6c:72:55:d1:d9:27:30:b7:a3:d0: 78:41:4e:17:f8:11:b2:83:4e:45:a2:f6:ff:80:f9: 75:ea:75:b4:7e:c1:b2:9a:28:9d:cf:92:87:c4:89: 17:55:ae:86:c5:e4:2e:cb:1a:1c:32:ef:d9:8c:5a: 9a:4c:dc:32:4d:ef:56:17:44:49:43:4d:12:a3:f4: 07:81:27:f4:3d:ec:9a:af:86:fb:66:a4:e3:d6:33: ee:70:63:91:a4:52:7e:5f:de:24:dc:74:77:6e:1c: ec:f2:3a:6b:1f:a8:d8:df:a7:93:43:da:91:71:ce: 2f:96:ad:99:c0:02:b7:18:52:e5:c5:36:38:f6:b1: af:89:19:61:fc:0a:9b:88:2b:40:7e:65:3d:24:f0: 66:f1:08:1a:eb:d1:82:cd:d7:53:ae:fa:63:e1:bf: 1d:9e:4f:05:28:37:fb:6e:50:3d:83:9e:69:a5:a4: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:4D:B7:DC:91:EC:30:26:C5:01:2F:80:B9:55:B8:69:B6:60:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b5:9f:41:99:21:55:8b:ba:33:c6:f3:d4:95:7a:a6:65:6d: a5:13:15:aa:5f:0e:c7:ee:9f:9c:c0:1c:e1:77:aa:8f:f6:78: d1:58:d3:72:bb:75:6b:53:34:f5:05:ec:33:20:7f:7e:d9:73: 42:4b:cb:94:3c:e3:56:9b:af:db:bd:e6:1b:46:fe:40:de:2c: 8d:1d:25:2c:bd:69:07:9f:0f:0d:19:e3:67:f2:b5:b1:b4:fb: c4:ef:f1:2c:98:81:d4:f6:11:0e:94:91:99:30:b7:a8:37:6e: 66:3f:70:c3:54:e1:82:7e:48:61:30:52:99:dd:94:b7:3b:da: c4:39:46:b4:16:f1:3d:df:a9:14:f9:01:2b:5b:81:3d:b4:64: 8f:74:83:91:c3:83:cf:20:af:25:73:2e:57:87:1a:1d:da:25: d8:e8:7a:1e:20:1e:93:06:2f:75:18:3b:b8:28:6a:98:28:3f: c2:24:53:b3:2b:f9:75:ff:1c:a3:cc:8e:46:10:15:c1:ab:19: c3:fa:fb:e8:15:1c:4c:4c:c4:e4:63:fd:b3:37:86:4c:c2:82: 3f:06:bb:ca:56:f4:8c:7b:4c:c5:31:13:19:ef:52:00:b6:6b: 42:e0:54:34:f4:ad:cf:f1:0a:97:4b:d6:77:11:eb:27:24:dc: 47:35:b8:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5J00g8Dj9I/JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk OGY3Zjk0NTItY2EyZS00ZDQxLTkxZTQtNTBlOWVkYmJmNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS8+HfAs1IG1pXu/miDxx1WahR6E6a4tKr3v MOwuPLhm484xLZBPXFc2p3XR8AsfZNFZduU0t2C/KjAuPgf0hI+U3AtrsIMmLRyw 7BT7cGxyVdHZJzC3o9B4QU4X+BGyg05Fovb/gPl16nW0fsGymiidz5KHxIkXVa6G xeQuyxocMu/ZjFqaTNwyTe9WF0RJQ00So/QHgSf0Peyar4b7ZqTj1jPucGORpFJ+ X94k3HR3bhzs8jprH6jY36eTQ9qRcc4vlq2ZwAK3GFLlxTY49rGviRlh/AqbiCtA fmU9JPBm8Qga69GCzddTrvpj4b8dnk8FKDf7blA9g55ppaRUWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi1TbfckewwJsUBL4C5VbhptmBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJiODk4MDEtZWMwNC0z ZDA4LTgxMDItOGU1Y2E3ODhiN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi1n0GZIVWLujPG89SVeqZlbaUTFapfDsfun5zAHOF3qo/2eNFY03K7 dWtTNPUF7DMgf37Zc0JLy5Q841abr9u95htG/kDeLI0dJSy9aQefDw0Z42fytbG0 +8Tv8SyYgdT2EQ6UkZkwt6g3bmY/cMNU4YJ+SGEwUpndlLc72sQ5RrQW8T3fqRT5 AStbgT20ZI90g5HDg88gryVzLleHGh3aJdjoeh4gHpMGL3UYO7goapgoP8IkU7Mr +XX/HKPMjkYQFcGrGcP6++gVHExMxORj/bM3hkzCgj8Gu8pW9Ix7TMUxExnvUgC2 a0LgVDT0rc/xCpdL1ncR6yck3Ec1uB0= -----END CERTIFICATE-----Generated at Tue Oct 20 10:54:17 2026 by rpki-client