$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd775f9-3512-39eb-bdca-daf4d4a52628.roa File: dbd775f9-3512-39eb-bdca-daf4d4a52628.roa (raw, json) Hash identifier: S6Wi51a8wDtA14ttffL3l7yDTUlWOOOtfnewD/7nhtE= Subject key identifier: 4C:2E:61:0F:DA:3E:9C:55:23:EA:73:07:F3:A6:4F:74:7C:87:B3:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497FADD6CE500F2C731F79A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd775f9-3512-39eb-bdca-daf4d4a52628.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.53.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:ad:d6:ce:50:0f:2c:73:1f:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c3b5272-0d9c-4446-b588-740a52759128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:96:0a:50:c3:6c:be:96:e6:19:d1:42:b2:3c: 49:6f:72:42:1d:90:f1:cd:c9:06:fe:f1:0a:5c:33: e4:9f:6d:42:3c:8e:c7:22:31:18:30:55:c8:40:2b: 78:9d:22:f4:b7:2b:c0:45:91:9b:28:9a:8d:78:28: ca:23:b3:3b:f3:d3:6c:0e:5f:51:80:72:7c:3e:5b: a2:f2:b0:d6:c3:00:af:ec:35:3f:b7:f3:5c:b5:34: 5b:10:43:b1:1d:78:a6:1a:3a:a8:55:fd:37:19:2c: 51:d7:92:55:69:7c:79:58:3b:ca:38:ce:26:53:9a: 8c:59:fc:f6:0a:04:f5:19:83:06:16:dd:df:c8:94: f3:85:40:1b:b2:c9:21:70:7b:1c:e6:29:b2:ba:68: 65:d4:27:60:bd:6b:9b:15:1e:db:72:b9:92:75:f3: d1:b4:a2:32:4f:db:8d:cf:0d:2c:6b:52:30:db:47: 44:21:1c:84:62:45:2e:be:32:8a:63:48:e3:b0:2d: 51:9d:b2:10:09:71:5d:9b:de:cd:87:06:1a:2f:82: 29:eb:d6:1f:1b:59:fe:25:04:dd:70:3a:c6:6f:c6: dd:d2:02:44:ac:b2:f0:42:50:40:33:9e:e4:ea:d1: 8d:66:0c:64:bf:c4:63:2d:ba:be:0a:9d:f6:25:da: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:61:0F:DA:3E:9C:55:23:EA:73:07:F3:A6:4F:74:7C:87:B3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbd775f9-3512-39eb-bdca-daf4d4a52628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.53.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1d:5f:04:8f:31:6c:91:d7:ee:62:55:5e:ec:a5:7b:ce:bf: a5:95:97:95:82:7d:2d:89:56:72:8c:5b:bb:7b:4d:e1:ee:15: d2:da:e8:1c:18:c4:b2:81:9b:27:14:f1:8b:95:64:52:e6:e0: 03:af:45:38:60:0d:4c:e5:7b:c1:2a:21:59:c6:86:d6:6e:20: 13:09:5c:72:ab:98:bb:3d:a4:df:3e:61:e7:65:a9:30:ad:a6: e7:e1:ae:11:21:f2:95:af:a4:91:35:ce:ce:57:0c:50:ee:04: 02:45:f4:3f:22:a3:01:f4:7f:f2:47:77:4b:c7:40:a5:8c:2d: 39:47:51:42:bd:a5:a7:5e:22:38:34:49:6a:b3:16:5a:00:8a: 25:98:f1:ae:f9:79:43:f9:91:1d:26:97:61:b3:be:be:4f:93: 60:ac:74:24:8c:fc:b2:7a:af:39:4a:06:7d:68:19:72:38:a8: 81:26:4c:2e:77:59:0b:18:e9:0b:d1:cb:18:8d:c5:fa:0f:3f: ad:f3:18:80:66:5a:24:67:83:f7:a7:cd:55:65:82:c3:5b:49: c2:e7:f6:2d:9f:63:c0:f3:a4:b7:e8:f6:a1:cc:d4:ee:89:7c: ae:36:25:e0:82:a0:3a:3a:3f:ee:b2:8d:9a:73:71:e0:b7:a0: f1:b1:3c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf63WzlAPLHMfeaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmMzYjUyNzItMGQ5Yy00NDQ2LWI1ODgtNzQwYTUyNzU5MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZYKUMNsvpbmGdFCsjxJb3JCHZDxzckG/vEK XDPkn21CPI7HIjEYMFXIQCt4nSL0tyvARZGbKJqNeCjKI7M789NsDl9RgHJ8Plui 8rDWwwCv7DU/t/NctTRbEEOxHXimGjqoVf03GSxR15JVaXx5WDvKOM4mU5qMWfz2 CgT1GYMGFt3fyJTzhUAbsskhcHsc5imyumhl1CdgvWubFR7bcrmSdfPRtKIyT9uN zw0sa1Iw20dEIRyEYkUuvjKKY0jjsC1RnbIQCXFdm97NhwYaL4Ip69YfG1n+JQTd cDrGb8bd0gJErLLwQlBAM57k6tGNZgxkv8RjLbq+Cp32Jdr3ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwuYQ/aPpxVI+pzB/OmT3R8h7P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJkNzc1ZjktMzUxMi0z OWViLWJkY2EtZGFmNGQ0YTUyNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAdXwSPMWyR1+5iVV7spXvOv6WVl5WCfS2JVnKMW7t7TeHuFdLa6BwY xLKBmycU8YuVZFLm4AOvRThgDUzle8EqIVnGhtZuIBMJXHKrmLs9pN8+YedlqTCt pufhrhEh8pWvpJE1zs5XDFDuBAJF9D8iowH0f/JHd0vHQKWMLTlHUUK9padeIjg0 SWqzFloAiiWY8a75eUP5kR0ml2Gzvr5Pk2CsdCSM/LJ6rzlKBn1oGXI4qIEmTC53 WQsY6QvRyxiNxfoPP63zGIBmWiRng/enzVVlgsNbScLn9i2fY8DzpLfo9qHM1O6J fK42JeCCoDo6P+6yjZpzceC3oPGxPD4= -----END CERTIFICATE-----Generated at Wed Oct 21 14:53:07 2026 by rpki-client