$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e85e71-bb71-34f7-b59b-346b4d2707b0.roa File: 16e85e71-bb71-34f7-b59b-346b4d2707b0.roa (raw, json) Hash identifier: /2tzq7WapNIS5VD3D0W9YFqtcsJTT7uMggjdNEVkWq4= Subject key identifier: AB:B7:9F:5F:09:DD:26:FA:EF:49:61:91:32:B4:21:06:C8:8A:41:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B918E87ABABE86DFC3080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e85e71-bb71-34f7-b59b-346b4d2707b0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:91:8e:87:ab:ab:e8:6d:fc:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4eff76f3-d31b-4535-a824-c9c5e9a68da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:e4:07:1b:18:09:71:1a:47:20:c2:41:91: a1:45:83:e7:d7:7b:17:8a:7a:38:35:a6:6f:03:01: 9f:06:65:90:6d:62:20:f3:94:67:8b:a1:3d:01:00: e9:6a:4b:da:1d:f0:f2:bb:08:bf:47:2f:4e:8f:9e: 58:36:0a:e1:49:ef:02:e9:fe:d2:60:2b:f0:35:62: 78:ef:18:53:74:37:e8:9d:b9:9c:4f:da:6d:e3:d1: 65:de:24:7e:30:a2:f5:a7:c5:00:b0:1d:63:57:db: 93:5e:f9:87:97:83:f7:97:2b:7e:61:4e:2e:58:04: bb:f2:d5:fa:4a:6e:b8:8f:b7:53:ae:3f:4c:ae:3a: 75:1d:f6:2e:d4:49:a8:f9:5b:d2:78:a9:7b:b4:da: fe:1b:26:13:f6:0a:59:73:91:14:f8:67:9d:9d:5f: 3c:1e:67:81:bf:b6:71:1e:0f:66:ac:f8:a5:82:1a: 79:64:70:f6:86:0c:cd:d1:bc:c1:a2:9f:6b:70:74: 24:ba:e8:0c:f2:a6:fd:79:38:2a:b9:89:6e:c3:71: 83:82:34:55:73:3e:d0:95:ab:21:2a:74:0c:e6:b0: be:38:d8:a9:89:0d:0d:fe:b3:e4:e2:2c:b6:70:b9: 80:77:96:46:f8:df:b2:6a:56:4d:40:9a:50:92:58: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:9F:5F:09:DD:26:FA:EF:49:61:91:32:B4:21:06:C8:8A:41:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16e85e71-bb71-34f7-b59b-346b4d2707b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:24:f8:1c:1f:8c:e4:c8:ee:ab:1b:ac:0b:2f:a5:4a:dd:d6: c2:cb:c4:39:d8:0a:19:79:81:cb:38:c8:1c:24:ea:19:86:05: a1:3a:6a:e7:ba:f6:cc:70:bf:cf:8f:fb:cf:cb:99:e1:9e:7e: 8f:e7:1f:86:b3:31:db:9e:55:88:44:e5:17:35:ca:84:75:e3: 35:75:0e:b6:7e:d1:f4:57:92:df:61:4f:98:54:80:74:40:31: f0:37:91:32:ce:70:14:e3:79:52:3a:8c:e0:25:36:68:ec:5a: b7:6a:59:eb:1f:6a:b3:6e:38:56:bd:91:a3:63:4b:d0:a6:1a: ee:75:89:8e:37:b3:58:2a:61:b2:65:71:86:10:13:3c:e0:43: ed:a0:9c:ee:cf:81:0a:82:b8:0e:34:2a:a5:f0:9c:6a:d5:34: 43:65:1a:a4:18:52:be:8f:c6:3f:51:de:ae:f3:57:37:1c:39: 3a:46:6d:33:fb:27:53:64:91:3d:6b:34:90:ac:35:58:33:c3: 30:34:86:c8:25:a7:8b:cc:cb:4e:79:42:2c:f4:1e:96:42:2c: e3:de:6e:3f:fe:8c:ff:c5:2f:e3:0c:4e:27:4d:1c:d8:ff:db: a3:0d:49:7f:cd:90:33:04:3f:9f:7d:d9:5f:c0:a5:23:8e:d3: 5e:2a:8a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5GOh6ur6G38MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGVmZjc2ZjMtZDMxYi00NTM1LWE4MjQtYzljNWU5YTY4ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwobkBxsYCXEaRyDCQZGhRYPn13sXino4NaZv AwGfBmWQbWIg85Rni6E9AQDpakvaHfDyuwi/Ry9Oj55YNgrhSe8C6f7SYCvwNWJ4 7xhTdDfonbmcT9pt49Fl3iR+MKL1p8UAsB1jV9uTXvmHl4P3lyt+YU4uWAS78tX6 Sm64j7dTrj9Mrjp1HfYu1Emo+VvSeKl7tNr+GyYT9gpZc5EU+GednV88HmeBv7Zx Hg9mrPilghp5ZHD2hgzN0bzBop9rcHQkuugM8qb9eTgquYluw3GDgjRVcz7Qlash KnQM5rC+ONipiQ0N/rPk4iy2cLmAd5ZG+N+yalZNQJpQklhguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu3n18J3Sb670lhkTK0IQbIikGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTZlODVlNzEtYmI3MS0z NGY3LWI1OWItMzQ2YjRkMjcwN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCbqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0k+BwfjOTI7qsbrAsvpUrd1sLLxDnYChl5gcs4yBwk6hmGBaE6aue6 9sxwv8+P+8/LmeGefo/nH4azMdueVYhE5Rc1yoR14zV1DrZ+0fRXkt9hT5hUgHRA MfA3kTLOcBTjeVI6jOAlNmjsWrdqWesfarNuOFa9kaNjS9CmGu51iY43s1gqYbJl cYYQEzzgQ+2gnO7PgQqCuA40KqXwnGrVNENlGqQYUr6Pxj9R3q7zVzccOTpGbTP7 J1NkkT1rNJCsNVgzwzA0hsglp4vMy055Qiz0HpZCLOPebj/+jP/FL+MMTidNHNj/ 26MNSX/NkDMEP5992V/ApSOO014qilA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:35 2026 by rpki-client