$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c9fa92a-b6e1-3f44-b18d-313af64e03cd.roa File: 1c9fa92a-b6e1-3f44-b18d-313af64e03cd.roa (raw, json) Hash identifier: uCSWMBoOJJce9B+lSrdfYhwE+2vLkLLXtJ4y7fjpblU= Subject key identifier: A5:29:4D:C0:0A:1C:7D:17:92:84:09:9C:19:75:16:BF:FB:C2:0D:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B8E86C5851985C1116DA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c9fa92a-b6e1-3f44-b18d-313af64e03cd.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:8e:86:c5:85:19:85:c1:11:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c02736fd-359b-4b6b-b710-3942d0e757b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:3b:46:6e:32:82:9f:3b:41:c4:34:e3:0b: f2:0c:cd:03:f3:55:26:53:a6:d5:b5:c8:fd:bf:b8: 5a:a9:2f:a3:21:f6:e3:af:66:63:0a:f9:36:02:f5: ec:cf:c9:92:0b:b8:07:21:8c:3d:cc:3d:4d:52:94: 4a:1a:a2:5a:5d:6b:64:4b:73:f4:f2:cd:32:7d:43: 6f:3a:01:fc:ea:fd:a1:3b:cb:ac:e8:db:57:f7:81: 6b:5c:53:3d:70:52:1a:20:e9:75:07:0f:72:5a:25: 60:95:74:2b:0e:67:a1:58:b1:a0:18:5b:19:fb:5e: 61:ed:f3:11:53:04:c1:6c:8e:97:51:79:92:d7:f0: a3:b3:d6:43:7b:83:d3:5b:9e:27:eb:8f:44:b7:a9: e6:af:7b:f4:73:09:fa:e2:67:4a:a4:47:3b:9b:bc: 67:a6:af:9a:10:8f:15:a5:ab:c5:94:ae:59:da:12: 5e:6d:fb:20:bb:c5:79:8c:cb:b5:96:11:16:17:f1: 43:7a:81:44:44:f1:55:56:a7:6a:10:f9:2d:8a:5e: c4:a2:eb:d4:0f:de:ee:6a:cd:c2:74:67:65:8b:db: bd:fb:c6:a0:25:0c:79:5b:ce:43:0c:e4:92:a3:aa: bc:72:ef:48:6b:36:3d:23:75:f0:83:84:c5:08:6c: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:4D:C0:0A:1C:7D:17:92:84:09:9C:19:75:16:BF:FB:C2:0D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c9fa92a-b6e1-3f44-b18d-313af64e03cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:51:6b:c0:cc:cc:c0:42:bc:cc:09:35:27:4e:e7:58:4b:29: b8:96:58:88:24:7f:4b:46:09:da:93:1d:c2:41:0a:37:0b:7d: 38:e8:03:84:dc:df:66:64:df:0f:79:da:80:72:b3:ac:4e:9a: 0f:8e:47:5e:2a:36:18:9f:78:25:c4:e2:b6:c8:95:90:c4:f3: 98:0a:f6:20:4b:1c:3e:5f:a2:17:7d:4a:fa:f0:61:3d:a9:4a: ad:86:20:b4:65:f5:43:bf:1d:ac:54:46:0b:7c:82:f9:9a:23: d9:eb:de:b1:15:4f:c9:9e:31:d6:c6:25:d9:01:e0:20:22:fb: 16:92:06:89:21:b8:47:42:fc:c5:20:f7:50:41:d2:5c:cd:37: 47:d8:cb:89:d4:06:f4:47:d7:cb:8c:b8:73:4b:2e:95:28:8d: 79:fc:fa:45:4e:dc:d4:7e:45:c3:0e:ae:90:6b:45:01:a6:bd: 9f:01:58:86:30:a0:29:51:51:49:72:50:dc:9c:7b:43:0f:8a: 0f:9f:e6:bd:ad:20:4f:88:b6:cf:b5:f6:6c:79:a1:68:1f:f2: c0:f4:77:4c:19:23:0f:27:68:02:1b:5d:6e:5c:69:5f:87:01: 1a:b3:40:30:92:4f:bd:57:fa:21:c1:90:fd:98:3f:54:5e:44: eb:2f:6e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW46GxYUZhcERbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzAyNzM2ZmQtMzU5Yi00YjZiLWI3MTAtMzk0MmQwZTc1N2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLw7Rm4ygp87QcQ04wvyDM0D81UmU6bVtcj9 v7haqS+jIfbjr2ZjCvk2AvXsz8mSC7gHIYw9zD1NUpRKGqJaXWtkS3P08s0yfUNv OgH86v2hO8us6NtX94FrXFM9cFIaIOl1Bw9yWiVglXQrDmehWLGgGFsZ+15h7fMR UwTBbI6XUXmS1/Cjs9ZDe4PTW54n649Et6nmr3v0cwn64mdKpEc7m7xnpq+aEI8V pavFlK5Z2hJebfsgu8V5jMu1lhEWF/FDeoFERPFVVqdqEPktil7EouvUD97uas3C dGdli9u9+8agJQx5W85DDOSSo6q8cu9IazY9I3Xwg4TFCGyhSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUpTcAKHH0XkoQJnBl1Fr/7wg06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM5ZmE5MmEtYjZlMS0z ZjQ0LWIxOGQtMzEzYWY2NGUwM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9Ra8DMzMBCvMwJNSdO51hLKbiWWIgkf0tGCdqTHcJBCjcLfTjoA4Tc 32Zk3w952oBys6xOmg+OR14qNhifeCXE4rbIlZDE85gK9iBLHD5fohd9SvrwYT2p Sq2GILRl9UO/HaxURgt8gvmaI9nr3rEVT8meMdbGJdkB4CAi+xaSBokhuEdC/MUg 91BB0lzNN0fYy4nUBvRH18uMuHNLLpUojXn8+kVO3NR+RcMOrpBrRQGmvZ8BWIYw oClRUUlyUNyce0MPig+f5r2tIE+Its+19mx5oWgf8sD0d0wZIw8naAIbXW5caV+H ARqzQDCST71X+iHBkP2YP1ReROsvboc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:38:47 2026 by rpki-client