$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa File: 0406df55-70fc-3fed-8efb-224eeaab27aa.roa (raw, json) Hash identifier: bP0Y5gZjZNuG8uvpSjbfljIjwtXAoAFT1JErlUnQz+A= Subject key identifier: 81:42:88:6B:77:B9:13:B6:45:79:22:02:EF:95:E3:D6:F9:5A:D1:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE581548AE71C2B68C89F080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.44.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:15:48:ae:71:c2:b6:8c:89:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5d003935-402b-4b56-9dff-c784a82260f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:34:ec:8f:c3:d8:9e:a6:0a:1c:37:fc:3e: 45:7f:44:75:7f:30:c1:3d:07:b8:22:fb:2b:5b:8c: 2f:72:d6:03:08:80:f0:fe:2d:d8:b6:b7:81:27:11: f9:dc:74:b5:5e:dd:85:64:c6:91:40:24:6b:a7:10: a1:04:b2:70:aa:8f:8c:7a:d6:ac:60:62:24:50:ab: c1:eb:ac:d7:a2:db:80:05:fc:e7:e4:fd:d5:70:ed: bd:77:71:28:29:9f:01:72:e9:c8:ff:f9:a2:ab:fd: 14:f2:9c:4a:f3:96:c1:11:6c:8b:cf:3c:2d:f8:53: b9:68:d3:4e:31:37:7e:8e:76:05:e5:50:dd:93:2b: 52:da:8f:7b:07:d4:61:90:77:d6:5a:87:35:20:e6: 12:86:ad:a2:d1:2c:65:06:87:5d:cd:c3:d9:1a:4a: d8:d2:56:fc:ab:88:2f:78:b0:65:94:0e:0e:ab:1a: 60:09:26:4a:0e:2c:49:5d:ef:b1:9b:ec:e8:76:ee: 8e:45:a4:6f:16:f8:b2:d2:8c:06:68:a4:c5:69:0e: de:72:0b:bf:ac:3e:8f:45:a1:6a:ac:be:93:a2:a6: 7e:45:1b:ea:11:46:44:48:d9:e7:79:36:5e:3c:11: ab:bd:e9:c3:5a:5d:fc:ac:94:b2:2a:e8:c1:b8:21: 54:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:42:88:6B:77:B9:13:B6:45:79:22:02:EF:95:E3:D6:F9:5A:D1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:35:51:7f:e8:54:de:47:e2:32:97:8e:1e:e7:8b:4d:cf:3d: 4e:b2:1a:fd:80:a6:c4:5c:3b:7f:77:f5:0b:0c:04:f4:81:5d: 6d:b7:d1:6a:06:96:49:ba:73:86:c9:af:d1:15:9b:e5:38:92: ee:ee:b1:79:21:0b:ab:52:03:30:8a:14:84:1c:96:e0:4d:78: 8d:ce:0c:ac:47:c3:77:d0:8d:35:be:ec:89:30:39:bf:22:81: 6f:bb:5c:af:f2:b4:bd:0c:42:96:8e:22:1c:c7:13:d0:5d:79: cc:a7:ab:61:77:c7:01:4b:fc:b7:56:b9:91:b3:d5:79:01:84: 00:e6:bd:b6:bc:10:85:26:f2:c2:0e:85:04:a8:d0:6b:a9:ee: cd:6d:8f:3c:98:fe:d3:5f:a3:d1:b8:41:ec:4f:48:d0:6a:1a: 6a:ae:46:c8:31:5d:ff:de:19:81:d8:61:8b:41:ef:bb:2f:b4: cf:04:04:36:13:73:7b:c6:69:e8:c6:27:ea:42:a9:ff:fd:be: 41:21:fc:74:47:e5:c9:d7:19:d7:88:25:19:4a:e1:16:b5:3c: 3f:c5:41:a5:8e:0a:64:d4:5e:80:ee:74:31:69:d3:ae:a5:2d: e5:61:5c:b5:c0:fe:cb:2f:ff:ab:78:f0:97:48:b7:96:73:b6: c4:01:3e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBVIrnHCtoyJ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWQwMDM5MzUtNDAyYi00YjU2LTlkZmYtYzc4NGE4MjI2MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbc07I/D2J6mChw3/D5Ff0R1fzDBPQe4Ivsr W4wvctYDCIDw/i3YtreBJxH53HS1Xt2FZMaRQCRrpxChBLJwqo+MetasYGIkUKvB 66zXotuABfzn5P3VcO29d3EoKZ8BcunI//miq/0U8pxK85bBEWyLzzwt+FO5aNNO MTd+jnYF5VDdkytS2o97B9RhkHfWWoc1IOYShq2i0SxlBoddzcPZGkrY0lb8q4gv eLBllA4OqxpgCSZKDixJXe+xm+zodu6ORaRvFviy0owGaKTFaQ7ecgu/rD6PRaFq rL6ToqZ+RRvqEUZESNnneTZePBGrvenDWl38rJSyKujBuCFUGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFCiGt3uRO2RXkiAu+V49b5WtEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQwNmRmNTUtNzBmYy0z ZmVkLThlZmItMjI0ZWVhYWIyN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc1UX/oVN5H4jKXjh7ni03PPU6yGv2ApsRcO3939QsMBPSBXW230WoG lkm6c4bJr9EVm+U4ku7usXkhC6tSAzCKFIQcluBNeI3ODKxHw3fQjTW+7IkwOb8i gW+7XK/ytL0MQpaOIhzHE9Bdecynq2F3xwFL/LdWuZGz1XkBhADmvba8EIUm8sIO hQSo0Gup7s1tjzyY/tNfo9G4QexPSNBqGmquRsgxXf/eGYHYYYtB77svtM8EBDYT c3vGaejGJ+pCqf/9vkEh/HRH5cnXGdeIJRlK4Ra1PD/FQaWOCmTUXoDudDFp066l LeVhXLXA/ssv/6t48JdIt5ZztsQBPmA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:12 2026 by rpki-client