$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa File: fab5c470-deee-3070-b6d4-585ec108f03f.roa (raw, json) Hash identifier: 0pEBebvXBBUwUoCmh7Gl2mhZonw/aGiKMPqyhVr3JKg= Subject key identifier: DE:E2:DA:1F:51:E4:18:30:1F:62:8E:50:B4:74:5B:A1:0C:2F:CC:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E68B02B8665F5CCF6F820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 68.43.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:68:b0:2b:86:65:f5:cc:f6:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6016685c-3c51-445b-94f0-fe0d9c858dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:c7:19:c2:f9:73:ac:2f:0e:52:d2:76:1e: 2e:6e:6b:e6:2b:bf:a9:8e:2a:4d:74:55:00:83:fb: 67:c5:a1:df:da:e9:c6:a7:d7:79:e0:9d:a4:a6:1e: 53:97:aa:b9:2c:a4:e9:27:01:ad:b2:4e:30:a2:6c: 30:7e:96:84:f6:ce:39:d4:d6:f7:6f:38:92:16:19: 8a:ff:25:f2:a1:14:2f:94:57:87:38:9e:17:ae:3a: 09:4a:a6:0f:e0:3e:95:e9:ab:aa:49:ab:f2:60:e3: 37:73:fa:0f:00:f3:50:e8:4a:b3:62:ce:3b:b7:9d: bb:2c:d0:de:d4:22:64:15:1d:8b:45:89:8b:a5:98: e1:b4:45:62:82:25:ec:82:73:52:06:5c:71:27:fc: 45:38:2b:7f:0d:33:ea:bb:41:50:e8:a4:30:e3:1c: 58:ba:92:41:1f:bc:44:39:1c:61:83:73:01:d2:91: af:f7:4a:d3:14:eb:7d:63:72:65:29:06:74:0c:7a: 7c:6d:8f:d8:7c:d4:5f:a8:22:46:b4:62:0f:c4:a6: a3:ce:91:8c:61:eb:ef:1a:59:d0:89:06:ba:65:ca: e9:a0:f6:80:e0:8b:87:d5:b7:35:7f:36:7d:a6:42: 63:f8:9b:95:e4:5c:34:40:63:12:80:2a:04:2a:44: 1e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E2:DA:1F:51:E4:18:30:1F:62:8E:50:B4:74:5B:A1:0C:2F:CC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab5c470-deee-3070-b6d4-585ec108f03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:14:3c:bd:33:c2:68:75:65:d1:39:1f:1f:44:b9:78:56:ac: 03:17:f6:09:2f:fe:cd:79:22:39:13:cb:7c:ce:eb:e5:64:58: 1a:87:50:b7:9b:fd:54:6f:9e:be:c1:52:33:98:e0:9e:50:cf: a4:86:73:13:34:62:7c:6e:59:43:ab:d8:37:94:a4:f7:76:5c: b8:40:5a:db:34:17:21:a2:ec:38:4c:51:da:57:15:4f:d7:4c: 3e:d3:a3:25:fe:6b:a3:9c:a9:59:e4:38:64:29:a0:8e:af:ad: 31:13:4f:c4:23:0c:5d:67:28:b6:33:4d:2d:6b:b9:e0:1c:e5: 78:f4:d1:ec:e6:e9:41:23:64:08:cb:b7:7c:f3:12:e0:01:b4: 85:9e:fc:9c:21:09:55:05:ec:30:f4:f0:96:28:63:eb:93:d6: 09:36:c4:a4:eb:e8:c1:ef:fe:9f:e9:8a:a1:cd:3b:ae:cd:2d: 78:20:61:46:a6:6c:d2:0c:9b:b1:71:43:c7:13:49:2a:42:60: c1:e1:b0:86:ea:02:ac:38:ed:90:26:cd:27:c8:a1:63:21:d7: f3:61:b9:2b:c9:84:40:70:fe:4f:8c:06:8d:f2:71:ad:18:c1: 81:24:64:ea:a0:0d:a3:51:38:a4:92:3d:e6:fb:93:ae:60:64: 1b:c2:a9:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TmiwK4Zl9cz2+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjAxNjY4NWMtM2M1MS00NDViLTk0ZjAtZmUwZDljODU4ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmTHGcL5c6wvDlLSdh4ubmvmK7+pjipNdFUA g/tnxaHf2unGp9d54J2kph5Tl6q5LKTpJwGtsk4womwwfpaE9s451Nb3bziSFhmK /yXyoRQvlFeHOJ4XrjoJSqYP4D6V6auqSavyYOM3c/oPAPNQ6EqzYs47t527LNDe 1CJkFR2LRYmLpZjhtEVigiXsgnNSBlxxJ/xFOCt/DTPqu0FQ6KQw4xxYupJBH7xE ORxhg3MB0pGv90rTFOt9Y3JlKQZ0DHp8bY/YfNRfqCJGtGIPxKajzpGMYevvGlnQ iQa6ZcrpoPaA4IuH1bc1fzZ9pkJj+JuV5Fw0QGMSgCoEKkQeqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7i2h9R5BgwH2KOULR0W6EML8zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFiNWM0NzAtZGVlZS0z MDcwLWI2ZDQtNTg1ZWMxMDhmMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgUPL0zwmh1ZdE5Hx9EuXhWrAMX9gkv/s15IjkTy3zO6+VkWBqHULeb /VRvnr7BUjOY4J5Qz6SGcxM0YnxuWUOr2DeUpPd2XLhAWts0FyGi7DhMUdpXFU/X TD7ToyX+a6OcqVnkOGQpoI6vrTETT8QjDF1nKLYzTS1rueAc5Xj00ezm6UEjZAjL t3zzEuABtIWe/JwhCVUF7DD08JYoY+uT1gk2xKTr6MHv/p/piqHNO67NLXggYUam bNIMm7FxQ8cTSSpCYMHhsIbqAqw47ZAmzSfIoWMh1/NhuSvJhEBw/k+MBo3yca0Y wYEkZOqgDaNROKSSPeb7k65gZBvCqbc= -----END CERTIFICATE-----Generated at Wed Oct 21 07:19:57 2026 by rpki-client