$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa File: dfdb6820-06eb-3782-b934-97cafc7afa7c.roa (raw, json) Hash identifier: 5fooeD0djg1Z2dEw6Oi3Lp7Tuaor4dgC/05PyrTq1z4= Subject key identifier: E7:6A:0D:F8:94:23:33:F4:98:5E:0C:DA:6D:30:E3:41:07:84:44:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E5F3EF4010DE3B7320340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.36.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:5f:3e:f4:01:0d:e3:b7:32:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=a56e1691-dc63-445b-8b2a-aa47fb41a24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:2f:83:18:ea:99:4a:70:fd:50:43:b0:0f: 89:c3:81:7d:e5:f1:07:e7:ff:08:1b:cf:4e:2b:33: a9:b2:5c:67:de:cb:61:05:7e:77:39:d5:c1:84:03: 0f:a3:05:19:36:aa:6a:01:cb:74:f9:1a:8f:08:bf: da:ef:24:48:69:50:fd:95:ac:ed:52:e7:4a:fd:a4: ba:b1:19:33:5b:aa:2f:44:fd:5c:d3:cb:66:09:03: 2b:65:ce:8c:0c:9f:17:b3:4a:0f:ce:5b:70:9c:eb: a2:35:ec:37:8b:8e:c9:4b:ad:98:fb:85:53:28:d7: 66:bc:4e:dc:7a:64:4e:bc:4c:d6:78:86:58:2e:09: 80:fe:0f:3d:8a:91:9a:94:d1:f0:fd:23:41:e0:35: c3:cc:3b:61:74:b1:2a:fc:16:e3:17:eb:07:8a:f5: 8e:d5:b0:ba:e4:4c:5d:8a:cf:80:7b:c6:9e:8c:93: bd:32:b9:cb:3a:e6:a7:26:fe:0d:e5:c0:d5:6e:a4: 77:b5:17:b7:a6:b9:f1:e4:5e:c1:15:84:3f:d5:a6: 38:d9:b1:32:1c:04:bc:d2:c3:ce:26:cb:04:bc:52: 87:23:b8:82:4e:f8:4a:2d:eb:fa:66:8c:01:df:09: 8b:59:77:51:39:5a:bb:9f:c1:3d:6b:65:9f:84:2b: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6A:0D:F8:94:23:33:F4:98:5E:0C:DA:6D:30:E3:41:07:84:44:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1c:5b:fd:52:d1:28:8b:ff:46:41:84:e4:64:f6:a9:da:f1: cb:19:31:f1:f3:ea:c3:80:fb:77:99:80:d4:65:f1:ee:d5:ea: 02:00:48:21:0b:55:f7:09:9e:97:fc:d4:7e:c0:76:d3:0d:2d: c9:83:29:9a:a0:c8:c4:d4:d3:59:3e:9d:83:63:d7:09:09:65: c2:e0:40:5f:b1:04:17:a4:3b:a6:5a:fd:d3:65:4d:a6:00:88: 33:23:6e:b5:2b:f5:5e:e1:dd:a0:6d:49:52:50:69:bf:7b:a3: 24:36:e3:8a:3f:32:13:bb:76:95:7e:e0:a6:57:88:a6:ab:43: 4e:b2:bf:fc:27:42:20:e2:3b:05:ee:f3:cc:7b:d9:d3:16:73: 0b:ab:a1:fc:cf:8f:16:84:cb:55:77:67:ee:f8:55:5f:03:80: cd:2b:f3:92:9c:47:19:d0:53:52:84:a0:59:8a:5f:d7:a2:3f: 20:47:ec:d0:5f:76:2e:e8:89:72:6c:59:75:31:39:e3:f2:90: 7c:07:28:51:81:54:30:05:19:a2:be:e6:f5:d8:63:f9:7b:22: 6c:56:7e:22:b9:5f:9e:e9:be:37:38:dd:4c:c0:b5:bd:e7:96: f3:0e:44:69:d2:ad:96:b9:76:3f:37:af:6c:46:f0:61:e0:9e: 06:3e:3d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tl8+9AEN47cyA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YTU2ZTE2OTEtZGM2My00NDViLThiMmEtYWE0N2ZiNDFhMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBkvgxjqmUpw/VBDsA+Jw4F95fEH5/8IG89O KzOpslxn3sthBX53OdXBhAMPowUZNqpqAct0+RqPCL/a7yRIaVD9laztUudK/aS6 sRkzW6ovRP1c08tmCQMrZc6MDJ8Xs0oPzltwnOuiNew3i47JS62Y+4VTKNdmvE7c emROvEzWeIZYLgmA/g89ipGalNHw/SNB4DXDzDthdLEq/BbjF+sHivWO1bC65Exd is+Ae8aejJO9MrnLOuanJv4N5cDVbqR3tRe3prnx5F7BFYQ/1aY42bEyHAS80sPO JssEvFKHI7iCTvhKLev6ZowB3wmLWXdROVq7n8E9a2WfhCv8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdqDfiUIzP0mF4M2m0w40EHhET8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkYjY4MjAtMDZlYi0z NzgyLWI5MzQtOTdjYWZjN2FmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwcW/1S0SiL/0ZBhORk9qna8csZMfHz6sOA+3eZgNRl8e7V6gIASCEL VfcJnpf81H7AdtMNLcmDKZqgyMTU01k+nYNj1wkJZcLgQF+xBBekO6Za/dNlTaYA iDMjbrUr9V7h3aBtSVJQab97oyQ244o/MhO7dpV+4KZXiKarQ06yv/wnQiDiOwXu 88x72dMWcwurofzPjxaEy1V3Z+74VV8DgM0r85KcRxnQU1KEoFmKX9eiPyBH7NBf di7oiXJsWXUxOePykHwHKFGBVDAFGaK+5vXYY/l7ImxWfiK5X57pvjc43UzAtb3n lvMORGnSrZa5dj83r2xG8GHgngY+PRo= -----END CERTIFICATE-----Generated at Mon Oct 26 16:57:32 2026 by rpki-client