$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa File: dfdb6820-06eb-3782-b934-97cafc7afa7c.roa (raw, json) Hash identifier: kQsWhSrpZc736hez4rZyWgyu9peQq06yDBHCUDerG1c= Subject key identifier: A3:6D:7C:E2:11:1B:E4:5F:3F:8F:9A:DF:81:29:C7:51:71:02:5D:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862AAFAEB381FF93F907B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.36.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:aa:fa:eb:38:1f:f9:3f:90:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=14373435-37e0-42ec-b933-c77e85f39734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:7c:d3:60:d1:22:91:35:fc:00:74:93:8a: 33:ff:0a:91:f7:92:09:2f:19:de:aa:57:e6:dc:86: c7:34:7f:4b:8e:d9:66:b8:a3:f4:73:e3:d5:41:e8: d9:b2:3f:b4:65:ab:d0:c6:22:d6:ed:c1:cb:93:ee: 99:24:17:43:8c:d3:ad:bb:11:b1:dd:63:4e:12:d2: 46:09:10:79:e7:30:db:85:eb:72:21:98:21:38:4b: d2:bb:0d:3a:46:fd:3b:cf:3f:54:b6:43:06:66:b0: 71:63:62:ff:06:ed:1c:ca:85:a3:af:10:b4:8e:9c: e7:06:8e:d0:02:89:74:66:13:07:20:6c:3c:ee:1b: d8:1d:e6:31:1f:ae:0f:f5:38:12:79:2f:03:f2:3f: 67:9d:3e:fa:ee:ee:fb:33:8e:aa:ef:9c:16:34:f9: 8c:9b:49:f9:4b:70:e3:cd:30:13:d5:69:c0:7d:64: 3f:a8:b3:07:6e:9b:6e:4f:68:4f:95:26:04:31:d0: 81:00:92:51:51:19:0f:15:f1:65:78:ef:04:8c:73: 54:56:4b:7c:81:c8:94:dc:42:32:43:d7:4b:9d:46: 8e:86:91:60:37:df:ab:01:9e:ae:aa:b5:48:3d:c9: b7:b6:74:8d:9d:e9:3e:82:bb:c1:fe:73:37:31:af: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6D:7C:E2:11:1B:E4:5F:3F:8F:9A:DF:81:29:C7:51:71:02:5D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:ff:d3:a3:85:ac:af:18:0f:e0:0b:82:7d:22:36:61:56:4c: 03:99:72:19:e7:7c:14:9b:8b:d8:ec:b5:7a:0f:51:19:1b:63: d2:30:08:7c:67:19:0c:82:e6:02:dd:7a:5a:f1:f4:0f:6b:0c: 86:ae:9b:f7:c7:2d:a6:84:22:5e:87:db:04:d0:d0:ca:10:1f: 98:e4:7f:16:9a:f3:5c:cf:c3:47:8c:34:44:0d:fd:4e:35:e8: 35:18:13:9f:44:18:58:0b:36:8d:d9:37:7c:e5:2a:86:ab:3c: 40:e1:69:ef:ff:96:86:f9:4d:f2:cf:f4:90:a5:0e:8d:3d:69: 68:24:d1:56:9e:b6:33:33:bd:0f:77:1b:b5:32:bb:59:21:4f: 7e:47:38:38:6a:bb:65:14:56:ab:20:68:e8:82:1e:aa:18:4a: bb:34:71:bf:20:ee:c3:3c:11:d5:6a:be:1c:8a:bc:eb:c9:00: ba:76:72:ea:a8:9e:a2:6c:36:3b:c1:11:ac:bb:7a:61:4b:2e: 64:4f:3e:03:98:09:4b:b5:75:b4:ba:dc:89:fe:e5:41:d7:0d: 4f:3d:01:82:18:78:8f:c6:21:b6:c9:85:b9:db:2b:17:27:96: cb:f7:fc:bf:e2:0c:31:eb:a4:8f:ae:13:52:78:11:0d:b2:b8: 1d:f9:82:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqr66zgf+T+QewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MTQzNzM0MzUtMzdlMC00MmVjLWI5MzMtYzc3ZTg1ZjM5NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRJ802DRIpE1/AB0k4oz/wqR95IJLxneqlfm 3IbHNH9LjtlmuKP0c+PVQejZsj+0ZavQxiLW7cHLk+6ZJBdDjNOtuxGx3WNOEtJG CRB55zDbhetyIZghOEvSuw06Rv07zz9UtkMGZrBxY2L/Bu0cyoWjrxC0jpznBo7Q Aol0ZhMHIGw87hvYHeYxH64P9TgSeS8D8j9nnT767u77M46q75wWNPmMm0n5S3Dj zTAT1WnAfWQ/qLMHbptuT2hPlSYEMdCBAJJRURkPFfFleO8EjHNUVkt8gciU3EIy Q9dLnUaOhpFgN9+rAZ6uqrVIPcm3tnSNnek+grvB/nM3Ma+MMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNtfOIRG+RfP4+a34Epx1FxAl00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkYjY4MjAtMDZlYi0z NzgyLWI5MzQtOTdjYWZjN2FmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMn/06OFrK8YD+ALgn0iNmFWTAOZchnnfBSbi9jstXoPURkbY9IwCHxn GQyC5gLdelrx9A9rDIaum/fHLaaEIl6H2wTQ0MoQH5jkfxaa81zPw0eMNEQN/U41 6DUYE59EGFgLNo3ZN3zlKoarPEDhae//lob5TfLP9JClDo09aWgk0VaetjMzvQ93 G7Uyu1khT35HODhqu2UUVqsgaOiCHqoYSrs0cb8g7sM8EdVqvhyKvOvJALp2cuqo nqJsNjvBEay7emFLLmRPPgOYCUu1dbS63In+5UHXDU89AYIYeI/GIbbJhbnbKxcn lsv3/L/iDDHrpI+uE1J4EQ2yuB35gmo= -----END CERTIFICATE-----Generated at Tue Sep 1 12:37:11 2026 by rpki-client