$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: iq58ZXfeE8dqcqds9MqTdHPhlRHiSqC44lKbBQzQ3i8= Subject key identifier: 25:D2:F0:C1:1D:E4:EC:9C:46:53:80:EA:C1:64:90:16:68:1A:86:E7 Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584EC7A1D1E14E9AA3568FDFF040 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d1:e1:4e:9a:a3:56:8f:df:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=e0ed5162-fdc7-4014-9b7e-3ee4fe1a9567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b7:69:7b:66:d7:3d:66:ef:9b:a7:89:a2:47: 87:40:6a:a8:de:68:41:62:81:4f:f3:e1:fb:b0:0c: 0d:a3:09:de:36:91:d7:2e:77:90:09:d4:5e:f1:94: e7:44:9a:4e:64:15:69:d0:59:f4:ba:5f:16:0e:08: 12:e4:f9:01:0d:4e:85:96:57:72:2c:52:18:c3:11: e1:de:15:7e:0f:9d:d9:66:7e:39:43:a2:9a:eb:9a: ee:1d:6e:6f:7e:f4:71:12:3a:82:14:58:fb:cc:9c: 23:71:1b:e0:63:46:72:18:e1:e6:a1:b0:b4:ba:42: 23:a0:b7:59:55:ad:49:b2:69:8b:20:50:f3:41:78: 63:cb:fb:c4:77:1c:64:46:0a:68:98:d9:3d:e5:41: 5b:ea:65:86:f9:34:20:2e:d1:81:2e:65:92:36:f0: 56:f8:1f:8f:6e:d1:9f:84:90:30:69:47:0a:ea:00: cc:b9:c9:85:2f:12:3a:71:d1:95:ec:76:71:d7:8c: 0e:13:13:b8:38:4a:5a:87:47:d0:35:6d:b1:e4:2a: 04:7c:3e:f3:ac:a7:3d:a2:17:1e:ac:90:63:94:15: 31:4b:ba:4f:66:ff:ec:c2:56:29:23:13:3e:50:0f: 59:0e:ef:23:40:c8:3b:68:69:fa:36:e1:a8:76:1d: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:F0:C1:1D:E4:EC:9C:46:53:80:EA:C1:64:90:16:68:1A:86:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c0:f3:39:91:8d:b6:4e:cf:42:41:4c:51:db:e0:f2:e5:5a: d1:60:b3:8b:45:55:58:c6:8d:40:20:2a:d7:f2:ed:c6:dd:ae: e4:48:fd:be:94:74:c0:92:95:91:57:9e:a8:5b:3f:f7:ca:7e: 32:64:20:4e:87:2e:a0:8e:f7:a5:45:f9:02:68:bd:63:47:e4: 70:79:a0:14:d2:cc:f1:2f:43:a4:f0:aa:30:4a:d3:c5:fc:83: fc:3c:64:e4:6d:b1:c0:00:96:9f:2c:9e:be:bb:53:c1:50:91: 30:b5:7f:38:e8:5d:b8:a5:d0:6d:bf:28:0e:f4:ad:ab:bb:ed: 7b:c6:5a:dd:c0:dc:6e:20:3d:09:ff:9f:e9:17:17:21:08:b5: 4e:04:6e:ea:30:b3:83:b3:07:1f:fd:11:a2:07:8d:96:12:30: 53:a2:39:ea:19:91:bb:f7:21:68:6d:79:55:cc:b9:ff:2b:a1: ed:9b:95:7b:35:60:68:c0:91:f5:28:a0:4f:71:7c:65:f7:cd: 4c:36:93:2b:a8:5e:f7:db:87:88:4d:73:2e:99:f0:64:53:d1: fc:66:e0:3c:51:a7:c3:f3:a8:b6:a7:d6:3c:76:89:83:d8:98: 9a:17:6c:24:68:b1:68:2e:76:d6:9e:1d:d1:9d:86:ce:3e:5b: b0:59:39:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodHhTpqjVo/f8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTBlZDUxNjItZmRjNy00MDE0LTliN2UtM2VlNGZlMWE5NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7dpe2bXPWbvm6eJokeHQGqo3mhBYoFP8+H7 sAwNowneNpHXLneQCdRe8ZTnRJpOZBVp0Fn0ul8WDggS5PkBDU6FlldyLFIYwxHh 3hV+D53ZZn45Q6Ka65ruHW5vfvRxEjqCFFj7zJwjcRvgY0ZyGOHmobC0ukIjoLdZ Va1JsmmLIFDzQXhjy/vEdxxkRgpomNk95UFb6mWG+TQgLtGBLmWSNvBW+B+PbtGf hJAwaUcK6gDMucmFLxI6cdGV7HZx14wOExO4OEpah0fQNW2x5CoEfD7zrKc9ohce rJBjlBUxS7pPZv/swlYpIxM+UA9ZDu8jQMg7aGn6NuGodh2nIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXS8MEd5OycRlOA6sFkkBZoGobnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvA8zmRjbZOz0JBTFHb4PLlWtFgs4tFVVjGjUAgKtfy7cbdruRI/b6U dMCSlZFXnqhbP/fKfjJkIE6HLqCO96VF+QJovWNH5HB5oBTSzPEvQ6TwqjBK08X8 g/w8ZORtscAAlp8snr67U8FQkTC1fzjoXbil0G2/KA70rau77XvGWt3A3G4gPQn/ n+kXFyEItU4Ebuows4OzBx/9EaIHjZYSMFOiOeoZkbv3IWhteVXMuf8roe2blXs1 YGjAkfUooE9xfGX3zUw2kyuoXvfbh4hNcy6Z8GRT0fxm4DxRp8PzqLan1jx2iYPY mJoXbCRosWgudtaeHdGdhs4+W7BZOTU= -----END CERTIFICATE-----Generated at Sat Sep 5 06:46:05 2026 by rpki-client