$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f584ac-38dd-302d-a650-264d57c65213.roa File: 01f584ac-38dd-302d-a650-264d57c65213.roa (raw, json) Hash identifier: E40W1tu5qn68DYswTxVwhg8dglf6KrVLb6vrFU5UL7c= Subject key identifier: BE:4E:15:42:C0:25:2E:88:1D:04:45:08:CD:B4:15:22:B4:47:5F:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B9BF32DC9CC52AA8D5E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f584ac-38dd-302d-a650-264d57c65213.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.44.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:9b:f3:2d:c9:cc:52:aa:8d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=668b239b-90b5-48ac-be32-949be6b99e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:09:f2:e3:bb:27:ac:f6:bc:64:45:8c:23: bb:b4:44:32:fe:0a:25:4c:59:a3:f5:75:12:cd:4d: cb:2f:d2:3a:a2:7e:ab:ae:36:e5:0e:a8:2f:d7:05: 40:4c:ec:18:98:cf:a8:d7:21:8b:9e:5f:fc:63:72: bc:59:b0:c3:86:9a:77:62:16:86:07:33:87:2e:77: f7:ba:a0:b3:e9:a6:91:17:14:6a:3a:fa:ca:08:80: a8:30:c8:02:a1:89:ca:ba:c3:a3:49:94:24:ed:2e: 57:a3:3f:ea:7e:85:b7:19:fa:e8:ef:55:90:df:e6: cf:99:61:1b:a5:41:64:ca:fc:b3:3b:24:ca:f5:77: 99:b0:8b:45:e0:c1:a0:d4:06:57:f7:d3:89:b0:e7: 1e:0c:6f:d5:b5:cd:e3:fd:8a:e3:b6:88:c7:29:74: 4b:b2:78:e8:9d:a3:d6:07:ce:21:c9:20:de:7a:a2: 70:54:77:17:8f:df:b1:99:56:28:20:a8:b6:af:81: df:f9:38:3e:88:9d:68:b5:c3:cf:a8:7c:8a:2a:4c: 44:2e:92:1b:bf:78:54:bc:78:8c:d3:b0:a9:79:de: e5:4a:e7:9a:28:04:99:26:cb:08:25:57:48:e7:9a: 84:19:19:fa:4e:bb:e6:39:61:08:31:2d:bf:4b:95: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:15:42:C0:25:2E:88:1D:04:45:08:CD:B4:15:22:B4:47:5F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f584ac-38dd-302d-a650-264d57c65213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4c:38:14:56:e5:6c:ec:56:19:1e:c1:e4:98:97:aa:b6:4b: 73:97:88:b7:e9:b7:58:d6:2d:96:c4:19:4d:49:02:9d:12:20: 89:47:01:bb:20:1b:5f:8e:48:8e:f6:91:c4:27:f3:14:57:cf: 31:e1:51:db:0a:4e:5e:e0:23:77:a0:35:78:23:67:43:68:06: 09:0e:6e:b3:dc:78:ed:d2:74:dd:90:d9:f8:f8:65:2f:9b:68: 7c:4b:1e:07:70:1f:53:8b:1a:41:01:3e:ff:a9:78:a2:32:70: 32:c5:e1:92:ec:9e:90:09:11:78:fc:7e:47:67:ca:22:cb:df: 8b:b6:32:7d:30:1c:d0:a2:f8:0f:1f:03:c3:9c:13:6c:3a:cf: c7:78:aa:d4:07:0d:bc:82:9d:a3:53:ae:3f:4b:03:15:3d:61: 5b:34:31:f0:29:03:01:41:b7:a5:b1:f0:9a:3f:aa:8f:d5:1a: 98:64:6c:52:93:e3:ac:98:3a:b0:5d:6c:28:53:70:41:85:17: 6b:00:0c:b9:dc:d1:43:ec:eb:f8:f8:c4:4e:6e:91:d6:c9:54: 75:a7:f6:31:75:2c:9e:75:25:b1:05:d9:97:fe:a2:20:34:16: 9c:7c:6d:5c:d2:18:44:76:ff:97:92:ef:6a:6d:58:09:9e:2d: 7e:13:df:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5vzLcnMUqqNXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjY4YjIzOWItOTBiNS00OGFjLWJlMzItOTQ5YmU2Yjk5ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhUJ8uO7J6z2vGRFjCO7tEQy/golTFmj9XUS zU3LL9I6on6rrjblDqgv1wVATOwYmM+o1yGLnl/8Y3K8WbDDhpp3YhaGBzOHLnf3 uqCz6aaRFxRqOvrKCICoMMgCoYnKusOjSZQk7S5Xoz/qfoW3Gfro71WQ3+bPmWEb pUFkyvyzOyTK9XeZsItF4MGg1AZX99OJsOceDG/Vtc3j/YrjtojHKXRLsnjonaPW B84hySDeeqJwVHcXj9+xmVYoIKi2r4Hf+Tg+iJ1otcPPqHyKKkxELpIbv3hUvHiM 07Cped7lSueaKASZJssIJVdI55qEGRn6TrvmOWEIMS2/S5X4uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5OFULAJS6IHQRFCM20FSK0R18DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFmNTg0YWMtMzhkZC0z MDJkLWE2NTAtMjY0ZDU3YzY1MjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlMOBRW5WzsVhkeweSYl6q2S3OXiLfpt1jWLZbEGU1JAp0SIIlHAbsg G1+OSI72kcQn8xRXzzHhUdsKTl7gI3egNXgjZ0NoBgkObrPceO3SdN2Q2fj4ZS+b aHxLHgdwH1OLGkEBPv+peKIycDLF4ZLsnpAJEXj8fkdnyiLL34u2Mn0wHNCi+A8f A8OcE2w6z8d4qtQHDbyCnaNTrj9LAxU9YVs0MfApAwFBt6Wx8Jo/qo/VGphkbFKT 46yYOrBdbChTcEGFF2sADLnc0UPs6/j4xE5ukdbJVHWn9jF1LJ51JbEF2Zf+oiA0 Fpx8bVzSGER2/5eS72ptWAmeLX4T3zc= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:29 2026 by rpki-client