$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa File: f98a1db4-40a7-3600-9225-54d646616fad.roa (raw, json) Hash identifier: l4ySTXIdQ/eQzj0PXnfrfdLpQTnvW9LA2GR6xEHD08E= Subject key identifier: 66:56:2D:E9:21:EB:8F:C1:BD:8E:9D:17:E4:E2:33:71:FE:D9:37:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E69A98AD78D07CB906080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.43.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:69:a9:8a:d7:8d:07:cb:90:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=627ccabb-a218-4203-881e-3cefa95d4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:c6:97:ec:a0:be:24:11:bd:86:48:d5:34: 01:82:38:28:78:c1:cb:e4:87:01:2c:e1:95:6b:4a: 56:23:ca:2f:a0:94:7b:af:05:ea:6f:19:85:e8:e6: 00:9e:db:8f:7a:fd:10:59:36:3c:7d:b7:ff:76:bb: 52:6e:95:61:34:c9:7d:88:53:e7:2c:3f:69:a4:d4: 75:22:95:d8:d2:5c:5c:1b:ac:bc:7a:22:56:04:91: 2e:d0:14:1f:5b:45:d0:4e:f8:81:d4:45:4a:bd:d0: 9d:55:cd:43:18:72:e2:9f:b2:7d:4a:c5:c1:ef:46: d7:67:fa:12:53:e7:79:1f:de:93:a4:e0:b4:26:98: b4:e8:45:b0:fa:51:24:78:a1:7a:02:25:ca:d6:e6: 78:c0:82:19:32:b8:a6:2f:d1:ef:65:2d:ce:5c:8a: be:78:5b:1b:ca:83:1f:b0:67:05:c7:ea:02:07:74: ae:1a:bf:1f:11:7f:7e:a4:d2:48:33:7c:24:b0:4a: 3d:35:f5:58:f6:a3:3c:b4:c5:10:06:08:4e:56:d2: a7:cf:ca:3f:85:ae:7f:88:fd:ee:e7:0b:0a:57:bc: 4b:bd:48:04:3a:3c:ef:1f:a5:7e:9c:36:cd:83:ee: a2:26:4d:2c:f2:07:26:1d:63:87:6c:da:50:86:b0: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:56:2D:E9:21:EB:8F:C1:BD:8E:9D:17:E4:E2:33:71:FE:D9:37:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f98a1db4-40a7-3600-9225-54d646616fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d9:e0:09:2c:2d:b4:5e:82:fb:20:16:1e:04:6e:20:1e:44: 85:59:d4:fb:5b:36:35:2d:79:eb:fd:56:cb:ed:77:52:48:bc: f9:50:e2:15:63:f7:3c:21:b6:f4:fe:53:75:a3:f9:9f:82:54: e1:72:48:1a:b4:7a:a4:69:83:ec:35:11:40:e5:dc:62:10:98: 20:d3:59:d9:af:92:ce:2d:19:a1:99:a4:72:85:1a:9d:e4:84: bc:9c:e0:4f:5c:f1:7e:42:12:10:c7:28:17:56:d7:42:78:60: 54:cf:c3:a5:dd:fd:ca:bb:f2:d6:04:c9:00:92:a1:3b:e8:5b: 3b:4f:39:50:b7:3a:5a:81:f8:f6:8d:f5:e4:33:ab:98:86:60: a0:2b:39:a2:93:14:77:5e:8f:36:02:e2:74:be:45:43:a5:b3: 73:d8:6a:8e:b2:94:77:c4:1c:59:b5:f9:56:22:c8:f3:47:11: 36:6f:50:9e:80:3a:2a:4d:9f:6a:45:fe:16:51:e7:79:5b:e1: 0e:f5:de:a8:5b:03:9e:08:2c:7a:6d:a6:9e:06:b0:a0:76:64: 1b:da:8c:e7:12:ed:16:a1:fb:73:db:13:97:30:03:c4:5a:12: e0:12:01:9a:a2:ba:1f:84:19:01:34:09:12:5f:af:34:98:7f: dd:8f:3f:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmmpiteNB8uQYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjI3Y2NhYmItYTIxOC00MjAzLTg4MWUtM2NlZmE5NWQ0MTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQrGl+ygviQRvYZI1TQBgjgoeMHL5IcBLOGV a0pWI8ovoJR7rwXqbxmF6OYAntuPev0QWTY8fbf/drtSbpVhNMl9iFPnLD9ppNR1 IpXY0lxcG6y8eiJWBJEu0BQfW0XQTviB1EVKvdCdVc1DGHLin7J9SsXB70bXZ/oS U+d5H96TpOC0Jpi06EWw+lEkeKF6AiXK1uZ4wIIZMrimL9HvZS3OXIq+eFsbyoMf sGcFx+oCB3SuGr8fEX9+pNJIM3wksEo9NfVY9qM8tMUQBghOVtKnz8o/ha5/iP3u 5wsKV7xLvUgEOjzvH6V+nDbNg+6iJk0s8gcmHWOHbNpQhrD9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZWLekh64/BvY6dF+TiM3H+2TdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk4YTFkYjQtNDBhNy0z NjAwLTkyMjUtNTRkNjQ2NjE2ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjZ4AksLbRegvsgFh4EbiAeRIVZ1PtbNjUteev9Vsvtd1JIvPlQ4hVj 9zwhtvT+U3Wj+Z+CVOFySBq0eqRpg+w1EUDl3GIQmCDTWdmvks4tGaGZpHKFGp3k hLyc4E9c8X5CEhDHKBdW10J4YFTPw6Xd/cq78tYEyQCSoTvoWztPOVC3OlqB+PaN 9eQzq5iGYKArOaKTFHdejzYC4nS+RUOls3PYao6ylHfEHFm1+VYiyPNHETZvUJ6A OipNn2pF/hZR53lb4Q713qhbA54ILHptpp4GsKB2ZBvajOcS7Rah+3PbE5cwA8Ra EuASAZqiuh+EGQE0CRJfrzSYf92PP0o= -----END CERTIFICATE-----Generated at Wed Oct 21 10:22:20 2026 by rpki-client