$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17c4357d-6d47-3b9c-91b4-f8a3b6963b82.roa File: 17c4357d-6d47-3b9c-91b4-f8a3b6963b82.roa (raw, json) Hash identifier: ZI24YWcEF9YA7PpET8rYqKI1efGSx6CkdmBoO2K2uqA= Subject key identifier: 54:3D:50:B0:A6:2B:3A:A6:CC:4D:68:76:50:31:BB:26:D5:E0:E6:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AB022CBC92E879CA31700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17c4357d-6d47-3b9c-91b4-f8a3b6963b82.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.82.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:b0:22:cb:c9:2e:87:9c:a3:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=70bc4b33-4461-4627-bbfe-7234c7c3fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:8a:41:a2:4d:2a:e5:47:e1:03:86:c4:5c: a4:f4:f1:f0:3f:a4:76:cc:46:54:86:d0:0c:77:57: 93:d3:da:e0:56:a0:41:a1:58:ac:af:86:a3:0c:3f: 51:e1:c0:cf:5e:95:5f:ac:5e:52:4f:75:af:b2:85: 38:0f:23:4f:73:b1:06:10:76:50:f8:58:b4:3c:8d: 53:13:6a:e1:a5:3b:be:ad:ca:3f:e0:e5:27:07:f7: 20:00:e4:9e:89:b3:7e:99:30:eb:fe:ab:39:45:6b: c9:af:f8:3a:77:83:51:31:5f:50:28:6f:9b:65:a3: 85:71:fd:44:91:63:a9:de:64:ca:59:09:ab:e0:42: cf:76:d8:67:48:5d:b0:28:bc:fb:68:05:37:df:43: 20:27:1d:90:1d:2d:91:bf:66:b1:d5:cd:47:60:60: 1e:08:4c:77:25:2a:4e:3d:9b:f6:fd:80:85:b1:40: 13:55:57:55:aa:0f:5d:ce:ab:f4:12:9d:d2:c8:ad: d3:1a:89:3b:9a:36:07:62:fe:2f:b1:0f:d9:cd:07: 21:75:70:54:05:5d:2c:b4:7a:9a:47:8c:73:13:3c: de:0f:b7:68:33:bb:77:d7:9a:ad:cd:4a:25:03:09: 3a:17:3e:72:ad:84:d9:a5:88:0c:9c:15:da:37:90: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3D:50:B0:A6:2B:3A:A6:CC:4D:68:76:50:31:BB:26:D5:E0:E6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17c4357d-6d47-3b9c-91b4-f8a3b6963b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:ba:76:61:c7:34:f2:05:47:8a:5a:88:a6:09:b9:40:6b:de: 39:43:66:0d:46:38:83:d9:49:d6:19:18:ee:d5:45:57:8c:d0: 54:e7:e7:4c:3c:f4:27:6c:6e:bc:65:30:74:13:86:7d:8d:87: f1:c7:2d:4d:ab:ef:b6:e9:c0:a5:d2:66:b4:37:8f:93:b4:d7: b5:0c:e9:53:1c:0d:79:58:c7:43:f2:0a:1e:80:0d:41:6e:79: 96:d3:42:dd:45:d4:35:e8:43:47:1b:b3:8e:43:39:b9:a7:04: ac:79:28:e6:22:84:ef:9c:7b:ec:a4:a3:74:bc:26:e0:40:82: 98:4d:12:37:65:3c:3d:19:78:0d:dc:b5:18:f6:88:58:53:24: 35:d8:c7:fc:91:60:da:7d:a6:c6:04:15:86:f6:bb:50:c8:a7: c6:24:bd:91:1d:4f:0d:5a:53:ce:6d:bb:b4:ae:d5:26:9a:92: 15:bf:7e:8f:d2:71:33:05:ed:53:3b:6c:ed:ec:c3:d2:a2:2a: 02:86:8f:02:1d:c4:37:b2:21:0a:95:76:4a:c7:25:fe:36:81: 98:e3:dc:62:ff:35:8e:1b:f1:c7:50:60:f6:71:3d:bb:16:51: a1:e1:a6:33:0e:c7:6e:80:80:d8:da:e5:ee:94:6f:1a:60:2e: 2c:8a:c8:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWrAiy8kuh5yjFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzBiYzRiMzMtNDQ2MS00NjI3LWJiZmUtNzIzNGM3YzNmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXmKQaJNKuVH4QOGxFyk9PHwP6R2zEZUhtAM d1eT09rgVqBBoVisr4ajDD9R4cDPXpVfrF5ST3WvsoU4DyNPc7EGEHZQ+Fi0PI1T E2rhpTu+rco/4OUnB/cgAOSeibN+mTDr/qs5RWvJr/g6d4NRMV9QKG+bZaOFcf1E kWOp3mTKWQmr4ELPdthnSF2wKLz7aAU330MgJx2QHS2Rv2ax1c1HYGAeCEx3JSpO PZv2/YCFsUATVVdVqg9dzqv0Ep3SyK3TGok7mjYHYv4vsQ/ZzQchdXBUBV0stHqa R4xzEzzeD7doM7t315qtzUolAwk6Fz5yrYTZpYgMnBXaN5CFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ9ULCmKzqmzE1odlAxuybV4OaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdjNDM1N2QtNmQ0Ny0z YjljLTkxYjQtZjhhM2I2OTYzYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS6dmHHNPIFR4paiKYJuUBr3jlDZg1GOIPZSdYZGO7VRVeM0FTn50w8 9CdsbrxlMHQThn2Nh/HHLU2r77bpwKXSZrQ3j5O017UM6VMcDXlYx0PyCh6ADUFu eZbTQt1F1DXoQ0cbs45DObmnBKx5KOYihO+ce+yko3S8JuBAgphNEjdlPD0ZeA3c tRj2iFhTJDXYx/yRYNp9psYEFYb2u1DIp8YkvZEdTw1aU85tu7Su1SaakhW/fo/S cTMF7VM7bO3sw9KiKgKGjwIdxDeyIQqVdkrHJf42gZjj3GL/NY4b8cdQYPZxPbsW UaHhpjMOx26AgNja5e6UbxpgLiyKyJA= -----END CERTIFICATE-----Generated at Sun Mar 1 19:05:09 2026 by rpki-client