$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2107f770-d2e8-37f6-b731-991da713da7c.roa File: 2107f770-d2e8-37f6-b731-991da713da7c.roa (raw, json) Hash identifier: EtQ7/GBd4MI1mcllaEGMq8qmjuL6fKMlIg7x13X9L9Y= Subject key identifier: 85:38:9D:0C:65:06:D5:E9:DE:60:37:85:E9:A0:A4:35:98:D9:E3:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE7BD05250F7C52A10C9B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2107f770-d2e8-37f6-b731-991da713da7c.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 68.52.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:bd:05:25:0f:7c:52:a1:0c:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=d629383a-bdf1-40f1-9e20-07b18088c86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:93:72:34:6d:4b:86:3a:5e:53:e8:6d:07: cf:8c:74:5d:23:7d:2b:af:3b:a5:46:b9:92:24:c0: 62:22:94:ee:44:58:4f:71:2c:44:3b:e3:7d:44:d4: 3f:11:8a:e5:23:02:ce:d3:a7:43:75:c7:3e:e8:05: 39:3d:f8:91:be:d2:2f:7f:b3:c7:e7:3f:25:22:cd: 78:3a:f3:a8:f6:59:a3:e7:02:dd:98:a5:fb:0c:dd: 3c:4c:4f:f4:19:bb:61:60:a8:2c:a8:97:1a:ae:bf: 8f:ef:14:4d:c2:fa:fa:5f:79:c3:12:e7:3c:78:91: ba:28:25:e7:f1:73:31:d0:78:a5:87:0f:84:f6:f6: 65:94:1b:59:28:1d:56:63:b2:59:42:78:4f:a1:9d: ca:5d:76:3d:40:d8:6b:61:2b:f3:23:b3:9a:78:a5: e3:1d:04:17:51:df:70:df:c2:3c:4f:6c:53:11:fc: 38:81:41:4b:b4:1d:fe:1c:f3:9c:a0:52:03:20:7c: b5:5a:37:ce:dd:dd:db:0d:56:c9:e1:4c:04:f9:d5: ab:6b:77:6b:65:b7:2f:c3:15:31:5e:77:af:29:3a: 20:23:77:92:24:14:c9:3c:1f:c8:76:0e:b4:90:b4: b7:5e:34:a4:0e:76:63:55:b8:35:ed:84:c7:0b:9c: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:9D:0C:65:06:D5:E9:DE:60:37:85:E9:A0:A4:35:98:D9:E3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2107f770-d2e8-37f6-b731-991da713da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.52.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:68:92:3c:d3:21:7e:5d:bb:ac:19:54:9e:f3:c5:7e:2b:37: 1d:e8:c2:c7:9b:b6:1f:13:45:52:58:a1:09:1b:4a:e3:35:aa: ce:f9:74:ff:6a:bf:c9:59:e7:1e:36:73:22:3c:be:c0:49:8f: ad:fe:0a:11:82:b6:14:39:98:dd:cb:d2:b4:70:c6:03:f3:7f: b6:42:2d:5e:9c:1b:95:9d:b2:1d:52:e4:70:be:c4:1a:71:7b: e5:d1:a8:45:28:a0:4c:c5:63:66:68:82:28:c3:88:4d:41:a3: 10:8d:d7:08:5c:5c:63:68:f7:c4:86:35:f7:b5:d5:bf:64:b7: 17:6d:aa:3c:0e:87:d2:c2:91:ed:3c:a9:13:2d:b7:56:f6:c1: ae:01:32:64:52:51:ef:c8:e7:65:31:27:38:07:f2:7d:fb:e3: 88:ab:e2:f7:55:27:49:c6:d0:68:85:cc:f8:4c:10:dd:af:d1: 66:dd:a4:19:90:4b:1e:1e:d4:8f:12:26:b9:53:f4:e4:d9:93: ac:ae:39:5f:96:46:bf:ab:30:81:8f:61:68:3e:29:3f:97:80: 05:a9:13:06:58:97:b5:9f:ad:2e:cd:ef:c1:63:ca:ab:41:cf: 31:1a:ca:3e:60:0e:d7:51:24:e1:5f:24:a8:ba:14:09:7e:68: ed:d7:0e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz9570FJQ98UqEMmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZDYyOTM4M2EtYmRmMS00MGYxLTllMjAtMDdiMTgwODhjODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTWTcjRtS4Y6XlPobQfPjHRdI30rrzulRrmS JMBiIpTuRFhPcSxEO+N9RNQ/EYrlIwLO06dDdcc+6AU5PfiRvtIvf7PH5z8lIs14 OvOo9lmj5wLdmKX7DN08TE/0GbthYKgsqJcarr+P7xRNwvr6X3nDEuc8eJG6KCXn 8XMx0Hilhw+E9vZllBtZKB1WY7JZQnhPoZ3KXXY9QNhrYSvzI7OaeKXjHQQXUd9w 38I8T2xTEfw4gUFLtB3+HPOcoFIDIHy1WjfO3d3bDVbJ4UwE+dWra3drZbcvwxUx XnevKTogI3eSJBTJPB/Idg60kLS3XjSkDnZjVbg17YTHC5yg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU4nQxlBtXp3mA3hemgpDWY2eNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEwN2Y3NzAtZDJlOC0z N2Y2LWI3MzEtOTkxZGE3MTNkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANRokjzTIX5du6wZVJ7zxX4rNx3owsebth8TRVJYoQkbSuM1qs75dP9q v8lZ5x42cyI8vsBJj63+ChGCthQ5mN3L0rRwxgPzf7ZCLV6cG5Wdsh1S5HC+xBpx e+XRqEUooEzFY2ZogijDiE1BoxCN1whcXGNo98SGNfe11b9ktxdtqjwOh9LCke08 qRMtt1b2wa4BMmRSUe/I52UxJzgH8n3744ir4vdVJ0nG0GiFzPhMEN2v0WbdpBmQ Sx4e1I8SJrlT9OTZk6yuOV+WRr+rMIGPYWg+KT+XgAWpEwZYl7WfrS7N78FjyqtB zzEayj5gDtdRJOFfJKi6FAl+aO3XDvE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:33 2026 by rpki-client