$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d72d49ca-708d-314d-8cca-820fa503ee05.roa File: d72d49ca-708d-314d-8cca-820fa503ee05.roa (raw, json) Hash identifier: zhNKlA6eFxT3ovgj2E8nwLsL3Gs6fQs/jlQcgaTH4Yk= Subject key identifier: 91:20:0D:CF:B1:77:2F:A2:EE:30:30:ED:83:84:55:CD:71:CE:80:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863E954325D92350F1EFAA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d72d49ca-708d-314d-8cca-820fa503ee05.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.59.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:e9:54:32:5d:92:35:0f:1e:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4eacaccd-c5e8-425f-9b4c-3c763bc19779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:c1:68:13:0f:9e:34:b0:94:45:31:e0:a8: b2:1d:ba:f1:1b:04:33:94:a9:75:3d:b0:b9:b1:71: b0:32:41:ef:56:c5:35:01:53:a1:29:f1:7a:2a:4a: 5e:89:e4:e3:7d:31:be:04:90:6a:e1:35:f4:8c:21: a0:bd:09:d3:29:04:a6:5b:30:dc:16:6b:d7:6f:0e: 9c:e0:1c:ad:e9:9b:27:9c:87:47:9b:5d:6f:b2:71: 75:86:dd:8c:1c:a4:00:eb:32:26:88:ad:c3:f3:6d: 18:b7:5f:6f:be:26:aa:38:c8:c8:1a:16:22:63:a1: df:89:c2:ac:d1:61:99:61:4b:af:d7:e5:10:36:3c: ec:a7:ba:3d:7c:75:37:d4:4c:7c:3e:7d:45:ea:11: 2d:fa:81:eb:13:ff:51:73:aa:8a:4d:22:c1:ac:aa: 78:23:aa:62:60:7a:b0:d9:ea:e4:92:cf:13:3d:10: ee:18:c7:5f:99:9f:fa:2a:65:45:9c:34:30:50:1c: 44:2b:4e:b5:6e:3d:2b:d8:da:ec:90:40:60:29:d4: 24:c2:d5:50:a8:d3:20:d4:d8:93:0a:dd:ad:ec:a2: 31:b8:5c:1d:06:90:04:bd:29:be:e1:4f:9e:b9:66: f9:b9:e3:5b:4e:1e:29:44:f9:34:08:4c:28:1d:dd: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:0D:CF:B1:77:2F:A2:EE:30:30:ED:83:84:55:CD:71:CE:80:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d72d49ca-708d-314d-8cca-820fa503ee05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a8:c0:4a:da:1b:4e:15:9e:a7:95:43:e0:7b:6e:6f:98:6f: e1:60:1b:96:5e:18:4d:a4:7d:6f:ed:19:bf:a0:45:9d:d0:0c: ee:88:ab:95:11:6b:c5:73:27:d3:14:fa:82:07:77:a4:56:54: 72:96:ea:c1:d7:45:be:7f:2a:5a:a0:11:34:27:6f:46:c5:28: 3b:f1:66:c1:b9:d5:27:2c:84:49:38:b2:7f:a9:70:40:6f:2f: 12:bd:74:88:45:a2:55:56:77:65:c8:da:7d:1f:75:bc:5e:69: 4e:de:40:8d:2d:b6:a2:c5:b4:a2:f7:6f:80:97:bc:c9:55:9d: 6d:58:02:86:5f:f8:4f:06:6c:d4:c6:e8:6d:90:ad:92:c5:12: bc:da:95:95:6c:6a:eb:9d:a5:be:a9:66:dd:c1:25:7c:54:28: ca:0d:18:91:cf:b3:11:6b:77:65:91:f8:d3:af:12:cb:e4:2c: e9:1d:fd:75:36:5a:a9:92:14:02:a1:a6:b9:32:53:c5:65:36: cf:d5:78:3b:ff:e5:95:0a:75:ee:03:b7:31:ca:38:c7:9f:81: 4a:fd:d1:8a:39:e2:78:04:40:48:c4:3e:43:eb:75:06:38:2f: 33:a0:73:25:15:c0:65:be:b8:e0:88:42:4a:af:ea:c2:9e:19: 37:46:8c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY+lUMl2SNQ8e+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGVhY2FjY2QtYzVlOC00MjVmLTliNGMtM2M3NjNiYzE5Nzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkvBaBMPnjSwlEUx4KiyHbrxGwQzlKl1PbC5 sXGwMkHvVsU1AVOhKfF6KkpeieTjfTG+BJBq4TX0jCGgvQnTKQSmWzDcFmvXbw6c 4Byt6ZsnnIdHm11vsnF1ht2MHKQA6zImiK3D820Yt19vviaqOMjIGhYiY6HficKs 0WGZYUuv1+UQNjzsp7o9fHU31Ex8Pn1F6hEt+oHrE/9Rc6qKTSLBrKp4I6piYHqw 2erkks8TPRDuGMdfmZ/6KmVFnDQwUBxEK061bj0r2NrskEBgKdQkwtVQqNMg1NiT Ct2t7KIxuFwdBpAEvSm+4U+euWb5ueNbTh4pRPk0CEwoHd3pBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEgDc+xdy+i7jAw7YOEVc1xzoDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDcyZDQ5Y2EtNzA4ZC0z MTRkLThjY2EtODIwZmE1MDNlZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaowEraG04VnqeVQ+B7bm+Yb+FgG5ZeGE2kfW/tGb+gRZ3QDO6Iq5UR a8VzJ9MU+oIHd6RWVHKW6sHXRb5/KlqgETQnb0bFKDvxZsG51ScshEk4sn+pcEBv LxK9dIhFolVWd2XI2n0fdbxeaU7eQI0ttqLFtKL3b4CXvMlVnW1YAoZf+E8GbNTG 6G2QrZLFErzalZVsauudpb6pZt3BJXxUKMoNGJHPsxFrd2WR+NOvEsvkLOkd/XU2 WqmSFAKhprkyU8VlNs/VeDv/5ZUKde4DtzHKOMefgUr90Yo54ngEQEjEPkPrdQY4 LzOgcyUVwGW+uOCIQkqv6sKeGTdGjGA= -----END CERTIFICATE-----Generated at Tue Sep 1 05:13:53 2026 by rpki-client