$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a9866e9-8365-3446-980b-7f6fb46e2429.roa File: 0a9866e9-8365-3446-980b-7f6fb46e2429.roa (raw, json) Hash identifier: WeB1WNfiTR+mlOKjdeJ7IfZQTCZxzGSsQMRNt5m3Mp8= Subject key identifier: 9B:68:B6:3A:A6:65:09:CB:78:2F:D3:42:52:4C:B3:91:9A:75:3D:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE597D817E92494FEDA35900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a9866e9-8365-3446-980b-7f6fb46e2429.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 68.83.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:7d:81:7e:92:49:4f:ed:a3:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=dc0b6388-d75f-4912-a4b1-fdadaabc5f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:de:f5:88:c9:f0:e6:07:8c:09:b1:6f:b1:a6: b7:58:89:73:a0:a5:ec:05:38:6b:d6:4a:d6:6d:16: c8:35:55:29:44:b5:99:9a:d4:ad:57:c9:c9:a8:6e: 7d:d1:a7:85:50:7a:6b:64:72:41:3b:6e:d1:89:90: 8a:98:24:cf:b2:2b:e0:26:7d:19:b4:0b:be:01:9e: 31:64:a8:d9:82:6e:ea:7c:01:df:21:6e:99:4d:0b: 23:c3:e0:29:9f:de:be:ba:eb:55:f5:9d:65:a7:76: 74:bc:4e:43:a9:5d:f6:78:4f:23:80:5f:0c:89:ab: 36:23:13:5f:3e:70:c3:2e:56:4d:f1:50:cd:cd:ac: ec:a5:36:8d:95:63:e9:80:79:38:83:02:cc:05:03: 76:b3:16:f2:ea:61:18:b5:52:18:3e:a6:f5:21:7b: 3b:cc:ee:9a:e0:bb:76:86:ef:25:7a:db:78:e0:6b: ab:ba:3e:80:2a:56:b4:96:d9:68:19:7e:98:3d:b5: e9:c2:a1:4f:08:39:39:7b:6d:d7:11:be:a7:0d:a0: 77:4f:8e:95:68:59:34:d8:74:ac:98:ff:f2:d4:ae: 6a:18:f2:46:36:84:9d:1a:97:4e:d8:b6:c8:cf:fa: d6:8e:a9:b1:cb:5b:90:73:f6:63:d9:e8:89:0c:43: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:B6:3A:A6:65:09:CB:78:2F:D3:42:52:4C:B3:91:9A:75:3D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a9866e9-8365-3446-980b-7f6fb46e2429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.83.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:18:06:7e:bc:de:d0:71:f3:39:1c:56:db:03:ce:ec:55:43: 97:01:0e:06:78:c2:ef:82:66:1c:96:27:8f:d5:9a:aa:9c:25: 3e:c6:b4:c8:cd:ee:96:f6:d3:bb:ea:43:e5:e5:f1:27:78:2e: 19:5c:57:bd:15:60:0b:2d:c2:ea:c2:52:4c:e5:67:96:90:5b: 70:4a:47:d6:24:a4:60:86:88:d0:9a:a7:22:ae:95:15:00:9f: 91:9f:5d:3e:2b:1b:85:a1:b4:89:3a:02:8a:23:39:66:b9:a6: 2a:3c:b6:8b:09:40:f2:eb:c7:3f:12:49:8f:62:74:45:cc:ae: 11:3a:86:72:35:f2:52:ae:57:bf:35:40:9b:bf:bf:44:24:dd: 34:d8:c2:24:63:66:db:62:a5:3b:e8:d7:4c:62:6c:dc:f4:87: 4a:8b:36:33:8a:6c:d7:6d:49:5b:92:ff:76:f9:39:37:20:b2: 16:58:4d:59:4d:07:68:d4:de:e0:7a:85:4d:c8:75:a7:af:c4: 97:ed:f0:09:e2:c9:d1:2a:3a:f4:5f:e6:da:32:ff:8c:43:7a: 4d:24:c1:d8:b4:64:70:75:ef:4d:ef:10:78:2c:9b:cf:c4:b9: 89:50:3e:69:98:57:c5:d1:bb:ec:4d:ac:94:34:8d:74:43:90: 96:9b:da:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWX2BfpJJT+2jWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGMwYjYzODgtZDc1Zi00OTEyLWE0YjEtZmRhZGFhYmM1ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld71iMnw5geMCbFvsaa3WIlzoKXsBThr1krW bRbINVUpRLWZmtStV8nJqG590aeFUHprZHJBO27RiZCKmCTPsivgJn0ZtAu+AZ4x ZKjZgm7qfAHfIW6ZTQsjw+Apn96+uutV9Z1lp3Z0vE5DqV32eE8jgF8Mias2IxNf PnDDLlZN8VDNzazspTaNlWPpgHk4gwLMBQN2sxby6mEYtVIYPqb1IXs7zO6a4Lt2 hu8lett44Guruj6AKla0ltloGX6YPbXpwqFPCDk5e23XEb6nDaB3T46VaFk02HSs mP/y1K5qGPJGNoSdGpdO2LbIz/rWjqmxy1uQc/Zj2eiJDEM0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtotjqmZQnLeC/TQlJMs5GadT05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE5ODY2ZTktODM2NS0z NDQ2LTk4MGItN2Y2ZmI0NmUyNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIYBn683tBx8zkcVtsDzuxVQ5cBDgZ4wu+CZhyWJ4/VmqqcJT7GtMjN 7pb207vqQ+Xl8Sd4LhlcV70VYAstwurCUkzlZ5aQW3BKR9YkpGCGiNCapyKulRUA n5GfXT4rG4WhtIk6AoojOWa5pio8tosJQPLrxz8SSY9idEXMrhE6hnI18lKuV781 QJu/v0Qk3TTYwiRjZttipTvo10xibNz0h0qLNjOKbNdtSVuS/3b5OTcgshZYTVlN B2jU3uB6hU3IdaevxJft8AniydEqOvRf5toy/4xDek0kwdi0ZHB1703vEHgsm8/E uYlQPmmYV8XRu+xNrJQ0jXRDkJab2ik= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:25 2026 by rpki-client