$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa File: f4def27c-301f-3740-9dcd-1df2352990f8.roa (raw, json) Hash identifier: qGknPu1qg5v37mA3rYjwqrNrTvmn4wDhDxrra7+gJiI= Subject key identifier: 7E:33:56:F4:DA:C8:BE:51:61:B5:A0:0F:11:6D:FB:8F:68:8D:D5:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E66EFDFDA499A7B8B4500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.42.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:66:ef:df:da:49:9a:7b:8b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=bf602b15-9002-4b17-b8b9-c4e9b57769f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:44:53:1e:d9:3f:a0:c2:9e:49:17:f5:7d: 90:62:36:99:6d:b4:e7:5e:57:b4:13:19:a9:33:ea: 88:2c:99:bc:6e:f8:28:ff:80:3d:32:65:f5:a6:3f: 80:99:38:22:4d:9b:48:d0:ac:8b:b8:30:47:3c:b2: 40:f9:a9:21:ac:44:ae:87:81:d9:82:82:1c:a9:52: 59:10:c1:59:94:39:eb:fc:be:6b:cc:64:ab:c5:fa: e4:fe:4c:10:25:c2:ef:13:15:f4:aa:c8:ee:37:12: 37:44:88:14:0c:3f:09:78:a3:57:a4:92:43:78:f4: 75:fb:87:67:09:bf:db:17:82:ed:2c:12:ee:46:0d: 8c:b0:a6:69:22:1d:75:c5:38:e0:84:3f:08:b6:de: 96:7e:d1:e8:db:4b:b3:c2:1f:01:a7:92:4f:46:e6: 6d:dc:4e:79:5b:af:53:e8:51:74:ee:86:8c:fd:33: 86:3f:b1:c6:bc:85:b7:67:d8:c8:85:15:8a:71:5f: f9:2c:b6:d3:ef:ca:0c:2b:8a:46:7f:94:21:3e:c9: 49:e5:56:30:61:bc:61:40:bb:29:1d:ad:0a:a3:1a: 6b:4c:a5:0e:be:63:90:2b:44:a5:b4:26:3a:60:b4: 81:55:5e:56:fb:74:2e:d8:17:e9:93:59:99:58:63: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:33:56:F4:DA:C8:BE:51:61:B5:A0:0F:11:6D:FB:8F:68:8D:D5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4def27c-301f-3740-9dcd-1df2352990f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:3a:73:ec:e2:54:ab:33:5a:a9:69:2a:a7:f8:82:f4:38:1e: 58:a6:6e:05:91:03:a7:45:87:09:39:06:55:7c:82:2b:8e:59: 93:c0:51:fc:23:f4:87:7d:f5:1a:7e:d1:1b:00:30:9b:5c:68: 97:4d:9a:49:00:74:42:c6:06:9b:8a:c3:de:9b:26:05:d1:b0: 09:ff:a0:fc:cf:fe:b5:e3:63:99:10:f2:88:ca:8f:5b:77:82: 16:33:6c:74:72:2a:41:7d:1e:7a:88:42:d2:34:f2:8e:5c:58: f2:c2:23:32:e1:41:14:d1:ef:a3:50:38:36:b0:f7:48:d3:81: 73:23:ed:e6:8d:49:51:07:d6:bb:d8:b0:92:6f:f6:74:b4:a1: de:00:0a:02:91:45:a3:e1:99:63:4e:33:2f:22:21:2e:73:a5: 0e:29:65:5a:69:49:c2:6f:dd:bf:6a:43:89:ff:f2:09:35:aa: fe:01:9f:23:f3:67:8f:58:49:9e:88:1b:67:2a:a9:47:dc:41: 10:80:bd:80:9d:30:b0:46:81:d7:05:84:f0:d1:c9:64:f8:60: 3a:b9:d6:aa:f8:30:6f:65:be:61:8c:73:f8:01:41:d9:9e:43: 57:ab:f6:68:c8:fd:a1:6e:7e:d1:c0:23:fb:8f:52:09:cd:48: b6:74:6c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tmbv39pJmnuLRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmY2MDJiMTUtOTAwMi00YjE3LWI4YjktYzRlOWI1Nzc2OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hEUx7ZP6DCnkkX9X2QYjaZbbTnXle0Exmp M+qILJm8bvgo/4A9MmX1pj+AmTgiTZtI0KyLuDBHPLJA+akhrESuh4HZgoIcqVJZ EMFZlDnr/L5rzGSrxfrk/kwQJcLvExX0qsjuNxI3RIgUDD8JeKNXpJJDePR1+4dn Cb/bF4LtLBLuRg2MsKZpIh11xTjghD8Itt6WftHo20uzwh8Bp5JPRuZt3E55W69T 6FF07oaM/TOGP7HGvIW3Z9jIhRWKcV/5LLbT78oMK4pGf5QhPslJ5VYwYbxhQLsp Ha0KoxprTKUOvmOQK0SltCY6YLSBVV5W+3Qu2Bfpk1mZWGNAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4zVvTayL5RYbWgDxFt+49ojdXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRkZWYyN2MtMzAxZi0z NzQwLTlkY2QtMWRmMjM1Mjk5MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANI6c+ziVKszWqlpKqf4gvQ4HlimbgWRA6dFhwk5BlV8giuOWZPAUfwj 9Id99Rp+0RsAMJtcaJdNmkkAdELGBpuKw96bJgXRsAn/oPzP/rXjY5kQ8ojKj1t3 ghYzbHRyKkF9HnqIQtI08o5cWPLCIzLhQRTR76NQODaw90jTgXMj7eaNSVEH1rvY sJJv9nS0od4ACgKRRaPhmWNOMy8iIS5zpQ4pZVppScJv3b9qQ4n/8gk1qv4BnyPz Z49YSZ6IG2cqqUfcQRCAvYCdMLBGgdcFhPDRyWT4YDq51qr4MG9lvmGMc/gBQdme Q1er9mjI/aFuftHAI/uPUgnNSLZ0bE0= -----END CERTIFICATE-----Generated at Wed Oct 21 17:10:54 2026 by rpki-client