$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb522901-5e66-3732-8e19-beaaf18f643e.roa File: fb522901-5e66-3732-8e19-beaaf18f643e.roa (raw, json) Hash identifier: q4oGnt7/MJcCrpUqwb/y2HD99Oh5Bdr+PTzgAO8scTc= Subject key identifier: 76:37:1E:74:2A:D1:F7:8A:62:76:24:34:16:FE:8F:BD:10:53:3C:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862BF7361588803A6706830 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb522901-5e66-3732-8e19-beaaf18f643e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.58.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:bf:73:61:58:88:03:a6:70:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=bf032e19-924e-4476-ade1-897ba02f4d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a2:95:58:64:1d:3c:62:55:33:c6:19:5c:a1: b2:e2:79:08:80:05:b6:02:15:84:e5:a4:e6:8b:f7: 24:65:65:6a:16:27:26:2e:3a:03:34:70:ae:4c:d7: 9b:4b:52:22:b9:35:d0:08:76:8b:1c:23:ab:7e:a2: 8e:4a:ad:de:3f:c9:f1:9d:09:78:c3:4a:e9:8c:82: df:39:0b:ee:00:07:a3:fc:fc:b0:4c:33:db:8e:f1: fc:ed:3f:a1:d0:73:e0:cc:e2:5d:d3:aa:5d:16:d7: 6d:ac:b0:b7:98:ab:e7:c6:02:89:8d:92:aa:98:12: 79:c2:71:dd:1f:2d:9d:b8:9d:c8:ff:44:6f:57:19: 19:d0:0d:13:b0:37:bc:dd:56:12:c2:85:b0:89:a7: b2:34:a8:12:e6:d9:fe:86:a5:25:01:58:ae:35:47: 20:b6:74:dc:57:e0:6b:ef:de:8e:fb:b9:d7:31:c7: 17:58:1e:1f:82:fc:ea:18:75:0d:4a:e6:ec:5c:06: f0:36:5a:96:9b:4d:f1:48:40:64:b0:95:ef:8e:51: 86:8a:79:6a:1f:d0:5f:64:5e:7f:72:fe:dd:82:7e: 9a:80:17:f3:a2:49:93:38:74:39:50:cf:2b:f5:d4: 8b:ef:69:1c:d9:6f:d6:53:0c:96:47:85:5d:73:0e: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:1E:74:2A:D1:F7:8A:62:76:24:34:16:FE:8F:BD:10:53:3C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb522901-5e66-3732-8e19-beaaf18f643e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c4:66:10:36:d3:c6:6b:8d:a1:ff:91:fa:39:4f:0e:9b:ff: 7a:1b:e5:45:07:4e:d9:17:fa:2e:10:c7:e5:54:9e:49:c4:df: fd:29:e9:22:97:08:76:4b:ab:b8:d8:b3:58:02:ce:06:19:af: a9:e8:18:20:16:7d:95:33:75:de:75:01:be:c0:c7:ba:d5:1b: 62:06:f4:be:0c:31:82:30:10:35:3a:38:18:f7:39:54:4f:5a: e9:19:9d:a0:5b:8c:86:56:4d:83:c8:93:5f:68:cd:72:94:08: 45:b9:25:00:29:73:10:dc:82:d9:7f:1f:86:b3:5a:ea:46:f9: 97:b6:3e:74:b0:db:b8:b3:d2:49:d6:23:d2:bf:62:00:94:e5: 43:ef:7f:1b:2e:42:8d:4c:9b:e3:e4:4f:55:62:b8:2f:63:92: d3:19:a7:c3:9f:20:dd:e3:12:e6:c9:d2:91:fc:65:55:75:db: 77:22:62:69:19:b1:fa:c1:55:10:38:ec:5a:9b:8a:78:f9:ee: 12:bb:05:1a:f6:86:31:21:99:ff:1c:b6:18:bf:82:c0:0e:ca: a6:b9:6c:d7:f7:4d:53:27:ca:74:f7:be:8f:1c:14:e2:e8:4a: 80:44:15:c9:e9:a6:68:7e:db:26:32:d5:22:8c:8e:b7:b6:fa: ed:a5:20:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYr9zYViIA6ZwaDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YmYwMzJlMTktOTI0ZS00NDc2LWFkZTEtODk3YmEwMmY0ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KKVWGQdPGJVM8YZXKGy4nkIgAW2AhWE5aTm i/ckZWVqFicmLjoDNHCuTNebS1IiuTXQCHaLHCOrfqKOSq3eP8nxnQl4w0rpjILf OQvuAAej/PywTDPbjvH87T+h0HPgzOJd06pdFtdtrLC3mKvnxgKJjZKqmBJ5wnHd Hy2duJ3I/0RvVxkZ0A0TsDe83VYSwoWwiaeyNKgS5tn+hqUlAViuNUcgtnTcV+Br 796O+7nXMccXWB4fgvzqGHUNSubsXAbwNlqWm03xSEBksJXvjlGGinlqH9BfZF5/ cv7dgn6agBfzokmTOHQ5UM8r9dSL72kc2W/WUwyWR4Vdcw64LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY3HnQq0feKYnYkNBb+j70QUzwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI1MjI5MDEtNWU2Ni0z NzMyLThlMTktYmVhYWYxOGY2NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnEZhA208ZrjaH/kfo5Tw6b/3ob5UUHTtkX+i4Qx+VUnknE3/0p6SKX CHZLq7jYs1gCzgYZr6noGCAWfZUzdd51Ab7Ax7rVG2IG9L4MMYIwEDU6OBj3OVRP WukZnaBbjIZWTYPIk19ozXKUCEW5JQApcxDcgtl/H4azWupG+Ze2PnSw27iz0knW I9K/YgCU5UPvfxsuQo1Mm+PkT1ViuC9jktMZp8OfIN3jEubJ0pH8ZVV123ciYmkZ sfrBVRA47Fqbinj57hK7BRr2hjEhmf8cthi/gsAOyqa5bNf3TVMnynT3vo8cFOLo SoBEFcnppmh+2yYy1SKMjre2+u2lIJY= -----END CERTIFICATE-----Generated at Tue Sep 1 12:37:32 2026 by rpki-client