$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa File: dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa (raw, json) Hash identifier: u8OGNTZqw7SOKnmRCEzjGXZI2qcnNZjsQe+PzFmHdD4= Subject key identifier: E4:9E:2A:59:94:98:0A:1C:4F:96:AE:A1:52:42:5D:19:5B:F5:06:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497772D12BF52FFDCF7C30D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 68.52.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:72:d1:2b:f5:2f:fd:cf:7c:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ad2a2fc-30ab-4117-8c30-e04ca460a227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:90:66:38:06:f0:b5:8d:c2:c2:c8:0c:78: 9a:58:df:14:a1:b9:8b:6c:6e:78:80:f5:5b:4e:d7: 73:53:78:c2:49:0a:1f:88:16:a7:8b:e5:56:6a:ee: 1f:d5:49:5e:93:d4:6e:0c:41:28:c0:cd:03:89:16: 8a:93:20:79:4c:22:10:88:67:5e:f4:07:3d:d9:de: a2:43:e3:1e:d3:46:b7:51:da:32:08:84:36:65:b0: ca:d0:3c:5a:d5:22:80:5c:d2:c8:7a:5a:2f:f9:2d: 2d:0b:72:d5:a5:3e:81:0d:7e:c0:2d:2f:fc:93:74: 37:51:79:b7:3f:d3:26:e1:3c:6b:5a:f8:05:f7:51: b5:b5:ce:12:72:23:6a:91:a2:7c:76:6f:0a:82:51: 28:e1:21:85:f2:63:f4:9e:8d:bf:65:f4:e0:a9:eb: 2b:41:4e:b3:34:b9:93:cf:99:26:90:1f:c6:74:e3: f0:16:de:24:54:ae:49:6e:fa:ae:5e:fc:01:46:e3: 09:01:7c:bb:87:09:0a:93:da:e0:52:93:87:2d:39: a1:b5:b3:fd:9f:d3:37:d0:21:7e:36:dd:2a:e1:64: 0e:b0:fb:5a:56:fe:32:5a:15:f3:d2:03:8a:d6:6f: 01:eb:69:95:b5:ad:67:ea:38:8b:e0:52:a2:05:76: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:2A:59:94:98:0A:1C:4F:96:AE:A1:52:42:5D:19:5B:F5:06:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dffcea6e-cfdb-3fea-b1be-3d1db8b6968b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1e:a5:ee:71:76:81:b3:d1:91:a8:c6:7b:98:d6:a8:c3:48: 9b:c4:95:c7:58:df:09:09:fb:54:01:43:6a:b6:b8:00:c7:c6: 1f:95:5b:e6:f1:48:92:c5:2b:7a:96:6d:4a:f7:38:5d:d4:78: fe:df:21:03:58:a6:5c:34:88:d0:43:6c:12:4a:07:ae:7a:7b: 33:3f:79:f7:f5:75:23:ed:ca:5b:be:f3:cf:95:ae:d9:2f:c3: 50:c2:1a:c9:3d:89:54:43:d0:27:b3:40:67:c7:51:9e:8f:be: 33:94:13:77:04:aa:92:a9:f0:88:69:7b:99:b0:c3:66:24:9a: ae:36:92:05:af:b8:fe:29:39:4f:7a:14:4c:e2:c8:45:19:6b: 7d:8f:46:39:62:bc:d2:11:dc:92:f1:41:95:a3:f3:7f:20:e0: 38:99:f0:48:62:8b:9f:88:18:7b:ee:34:f0:c1:cf:cd:a6:8a: 3c:4c:ce:4b:3a:d2:ad:8b:2c:61:28:a5:c9:5f:33:98:7c:16: b8:40:c1:85:43:6b:05:6f:ac:96:2e:39:27:2a:d7:1d:09:4c: aa:6b:ca:58:56:75:ba:93:65:2f:75:90:fd:39:65:03:a2:ed: 6d:e7:74:d9:ed:92:7f:85:c4:e1:d9:2c:2b:72:65:8d:31:5c: fb:7e:f9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd3LRK/Uv/c98MNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFkMmEyZmMtMzBhYi00MTE3LThjMzAtZTA0Y2E0NjBhMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA6QZjgG8LWNwsLIDHiaWN8UobmLbG54gPVb TtdzU3jCSQofiBani+VWau4f1Ulek9RuDEEowM0DiRaKkyB5TCIQiGde9Ac92d6i Q+Me00a3UdoyCIQ2ZbDK0Dxa1SKAXNLIelov+S0tC3LVpT6BDX7ALS/8k3Q3UXm3 P9Mm4TxrWvgF91G1tc4SciNqkaJ8dm8KglEo4SGF8mP0no2/ZfTgqesrQU6zNLmT z5kmkB/GdOPwFt4kVK5JbvquXvwBRuMJAXy7hwkKk9rgUpOHLTmhtbP9n9M30CF+ Nt0q4WQOsPtaVv4yWhXz0gOK1m8B62mVta1n6jiL4FKiBXZphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSeKlmUmAocT5auoVJCXRlb9QYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZmY2VhNmUtY2ZkYi0z ZmVhLWIxYmUtM2QxZGI4YjY5NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDRZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkepe5xdoGz0ZGoxnuY1qjDSJvElcdY3wkJ+1QBQ2q2uADHxh+VW+bx SJLFK3qWbUr3OF3UeP7fIQNYplw0iNBDbBJKB656ezM/eff1dSPtylu+88+Vrtkv w1DCGsk9iVRD0CezQGfHUZ6PvjOUE3cEqpKp8Ihpe5mww2Ykmq42kgWvuP4pOU96 FEziyEUZa32PRjlivNIR3JLxQZWj838g4DiZ8Ehii5+IGHvuNPDBz82mijxMzks6 0q2LLGEopclfM5h8FrhAwYVDawVvrJYuOScq1x0JTKprylhWdbqTZS91kP05ZQOi 7W3ndNntkn+FxOHZLCtyZY0xXPt++dU= -----END CERTIFICATE-----Generated at Sat Oct 24 23:40:41 2026 by rpki-client