$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cba396c-cf0a-33b4-980a-12855be5e05c.roa File: 0cba396c-cf0a-33b4-980a-12855be5e05c.roa (raw, json) Hash identifier: v2po6Zs8DO88rH9XAJ7YXmAisbjZXCBbf0KDMbQlquI= Subject key identifier: 5C:E5:F1:35:3A:4A:51:93:DA:45:CD:9B:E5:7E:BF:AC:D7:D7:22:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BA9BD521C7BF5AFFFA340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cba396c-cf0a-33b4-980a-12855be5e05c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.51.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:a9:bd:52:1c:7b:f5:af:ff:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d6d6537c-2f3b-4def-a101-7c5d04726162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:5f:09:9d:8c:a9:6b:ba:b4:07:c5:27:03: aa:71:0f:23:02:72:99:5a:93:6b:82:c8:4b:14:52: f2:b1:f4:88:06:24:ae:1c:21:12:5b:3d:0e:06:9c: 20:97:1e:6d:5b:36:03:7a:7e:f2:f3:e7:50:35:a8: ae:64:56:96:b1:14:4b:23:b6:0f:6c:b8:a6:80:d9: 95:b3:33:49:93:56:d8:38:6b:65:84:b6:7a:e5:0b: a4:e4:b3:b8:48:1a:2d:de:6f:ed:ff:3c:eb:9d:45: 77:b9:2f:1a:f8:07:ea:12:bc:d6:33:d5:88:b4:e9: 56:6a:ce:3c:a6:07:ec:87:36:10:59:80:da:3e:3b: 8d:15:4a:fb:57:f2:23:bb:bc:bc:8b:82:f2:9a:3d: 2c:a1:3f:0c:43:92:40:5d:83:9b:b8:06:c9:ce:8f: d6:94:6b:d6:2b:86:ec:1e:1c:33:aa:c2:1c:3e:71: 6c:7d:11:57:88:5b:b5:6d:e5:25:86:51:89:70:9b: 40:a2:27:ec:4f:a4:f1:11:bc:3c:86:ae:27:06:fe: 0b:a7:bb:8a:56:6e:6a:6c:20:5d:3d:1f:c0:c5:47: 9c:ef:5c:7c:ff:cb:6c:3d:92:05:0e:6d:c3:c1:fa: 5b:26:9b:30:8e:0b:7e:06:b0:7f:2f:89:ce:f0:66: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:F1:35:3A:4A:51:93:DA:45:CD:9B:E5:7E:BF:AC:D7:D7:22:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0cba396c-cf0a-33b4-980a-12855be5e05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:33:44:74:3e:9d:e5:3e:47:80:25:5b:75:d8:79:c6:93:c4: 36:c7:26:87:d3:79:75:74:76:5c:ed:53:36:b4:ab:89:00:e7: 4a:a4:07:52:f7:e7:9b:87:17:d8:61:84:3f:71:00:1a:8b:ae: a5:78:76:2b:ca:10:d9:02:55:f9:1b:af:f7:17:b5:84:07:fa: 44:8d:39:d5:e8:ce:df:ab:08:2f:28:bd:3a:89:b7:fa:2a:81: 6b:c3:2b:79:1b:66:05:7a:47:29:dd:e3:43:c8:08:4d:59:eb: fb:08:69:e0:08:27:f5:07:f5:45:bb:84:e4:69:06:aa:1e:bf: ff:87:f3:49:d2:97:40:70:53:82:a9:5c:1e:53:1d:4f:99:00: 70:70:fa:28:e7:95:cb:56:c8:a6:a7:79:06:4f:3c:d9:51:2d: 8a:ce:e9:2e:1b:be:af:ac:b4:e7:47:bf:88:bb:7c:9b:63:30: d8:2a:92:e7:4d:3a:9e:ac:68:be:f5:90:30:54:4d:34:fd:59: cd:4c:71:a2:cf:71:25:59:7d:ef:42:d9:5d:df:d0:c1:eb:07: 5c:88:da:ab:31:2e:0b:7e:f6:b4:45:90:22:90:fb:a9:c5:67: cc:e4:f7:0e:a8:17:85:bc:cc:97:a2:72:29:71:d1:ad:4a:ef: 36:d7:44:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW6m9Uhx79a//o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDZkNjUzN2MtMmYzYi00ZGVmLWExMDEtN2M1ZDA0NzI2MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaRfCZ2MqWu6tAfFJwOqcQ8jAnKZWpNrgshL FFLysfSIBiSuHCESWz0OBpwglx5tWzYDen7y8+dQNaiuZFaWsRRLI7YPbLimgNmV szNJk1bYOGtlhLZ65Quk5LO4SBot3m/t/zzrnUV3uS8a+AfqErzWM9WItOlWas48 pgfshzYQWYDaPjuNFUr7V/Iju7y8i4Lymj0soT8MQ5JAXYObuAbJzo/WlGvWK4bs HhwzqsIcPnFsfRFXiFu1beUlhlGJcJtAoifsT6TxEbw8hq4nBv4Lp7uKVm5qbCBd PR/AxUec71x8/8tsPZIFDm3DwfpbJpswjgt+BrB/L4nO8GamxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzl8TU6SlGT2kXNm+V+v6zX1yJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNiYTM5NmMtY2YwYS0z M2I0LTk4MGEtMTI4NTViZTVlMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDN6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADszRHQ+neU+R4AlW3XYecaTxDbHJofTeXV0dlztUza0q4kA50qkB1L3 55uHF9hhhD9xABqLrqV4divKENkCVfkbr/cXtYQH+kSNOdXozt+rCC8ovTqJt/oq gWvDK3kbZgV6Rynd40PICE1Z6/sIaeAIJ/UH9UW7hORpBqoev/+H80nSl0BwU4Kp XB5THU+ZAHBw+ijnlctWyKaneQZPPNlRLYrO6S4bvq+stOdHv4i7fJtjMNgqkudN Op6saL71kDBUTTT9Wc1McaLPcSVZfe9C2V3f0MHrB1yI2qsxLgt+9rRFkCKQ+6nF Z8zk9w6oF4W8zJeicilx0a1K7zbXRHw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:16:58 2026 by rpki-client