$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa File: 24872bec-4da3-3b93-aca3-2d66c1612e2f.roa (raw, json) Hash identifier: 9W2FhpmHgaSniPFWiUDCJBPr+Gxs4RvgiTCU7wj9c1g= Subject key identifier: CE:8A:71:84:7D:EE:E5:ED:2B:A7:2E:C0:1E:CB:5F:CA:E0:CA:0B:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9EBB3A8C14F338CF53CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33668 IP address blocks: 68.85.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:eb:b3:a8:c1:4f:33:8c:f5:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=c2fb5c58-3cf7-4716-8db7-e69dc36dd82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:94:91:50:fd:6d:1c:29:8e:ed:c2:5d:bd: a6:4c:af:c3:26:78:fb:c8:98:e2:a8:e9:f0:c6:ed: 35:2e:07:69:39:54:e4:3a:ed:0f:80:4f:5b:3c:26: 10:2c:f5:1e:32:3f:32:e9:02:88:c3:a1:30:7e:ec: bf:92:e8:0d:b2:bf:65:29:57:55:6b:f1:b6:63:c4: 1f:90:10:a7:01:ed:32:83:d6:19:28:cb:c1:ff:ab: 0e:54:41:65:56:6e:aa:02:e2:6b:86:70:b2:bd:66: f3:e1:c0:03:3e:66:69:77:c6:16:f1:0c:36:fa:c8: 79:78:00:14:36:cf:e6:19:d5:d3:25:24:e4:be:7c: 6d:5e:69:01:bc:e2:ff:a5:f0:d0:0b:be:bc:42:74: b7:f1:04:3d:df:b4:0e:6f:3e:a4:ef:99:21:ce:61: 4d:bf:50:9f:ca:5b:20:9f:48:23:29:09:3e:aa:04: 04:3c:8f:1c:47:38:0d:da:06:d8:35:2e:57:0f:12: d9:57:58:1f:bc:70:db:25:d5:63:11:ba:cc:0e:62: 30:52:d3:72:fa:80:64:ed:22:43:66:76:43:26:66: b7:18:b0:6e:b0:15:46:45:7f:97:95:e5:60:28:46: 50:3f:f3:7a:33:ad:9d:59:7a:14:ac:b6:36:5b:87: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8A:71:84:7D:EE:E5:ED:2B:A7:2E:C0:1E:CB:5F:CA:E0:CA:0B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24872bec-4da3-3b93-aca3-2d66c1612e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:eb:fa:8a:75:24:aa:8a:3d:57:32:d3:30:ec:75:c9:dd:55: 8f:69:ba:75:29:d9:9e:a2:f7:17:c4:2d:2c:c1:ba:f1:ef:e9: 4d:e1:f9:fc:62:98:0e:8e:f3:81:fd:e9:23:74:7b:36:8c:8e: b2:5d:39:26:30:28:ae:79:9b:f8:12:60:e5:47:63:7a:93:97: da:3c:9b:8a:52:aa:52:3b:8b:1a:44:1b:37:73:85:46:25:5b: e5:49:3c:e6:a1:48:cb:ec:a6:ac:7e:88:a8:fd:95:91:77:db: 4d:44:9a:4e:d1:a1:a4:cf:15:18:3a:a0:cb:36:4d:04:29:5a: 17:9b:26:3a:ac:24:a7:c1:82:08:30:95:e7:32:59:de:27:fd: a0:de:38:26:8e:e2:d7:d9:e4:f4:1f:f0:cd:3d:8e:83:91:f5: 68:82:95:2c:74:aa:3e:f5:39:1c:10:d7:f3:b3:2c:a4:f5:53: 36:3f:7e:48:ae:5a:c0:17:3f:77:47:15:b8:48:ba:c2:6d:ed: f9:0e:1d:6a:cc:0e:91:d1:ef:9a:1f:2c:bd:0b:09:3e:d0:fb: c9:df:0c:b3:c5:25:8a:c1:4a:bc:db:fd:5a:5c:ca:c4:ff:cf: 74:cb:bf:bd:f3:91:ac:1d:72:97:f2:c0:62:fe:0c:15:95:65: 29:95:fd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96euzqMFPM4z1PMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YzJmYjVjNTgtM2NmNy00NzE2LThkYjctZTY5ZGMzNmRkODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6UkVD9bRwpju3CXb2mTK/DJnj7yJjiqOnw xu01LgdpOVTkOu0PgE9bPCYQLPUeMj8y6QKIw6Ewfuy/kugNsr9lKVdVa/G2Y8Qf kBCnAe0yg9YZKMvB/6sOVEFlVm6qAuJrhnCyvWbz4cADPmZpd8YW8Qw2+sh5eAAU Ns/mGdXTJSTkvnxtXmkBvOL/pfDQC768QnS38QQ937QObz6k75khzmFNv1Cfylsg n0gjKQk+qgQEPI8cRzgN2gbYNS5XDxLZV1gfvHDbJdVjEbrMDmIwUtNy+oBk7SJD ZnZDJma3GLBusBVGRX+XleVgKEZQP/N6M62dWXoUrLY2W4d0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6KcYR97uXtK6cuwB7LX8rgygvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ4NzJiZWMtNGRhMy0z YjkzLWFjYTMtMmQ2NmMxNjEyZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfr+op1JKqKPVcy0zDsdcndVY9punUp2Z6i9xfELSzBuvHv6U3h+fxi mA6O84H96SN0ezaMjrJdOSYwKK55m/gSYOVHY3qTl9o8m4pSqlI7ixpEGzdzhUYl W+VJPOahSMvspqx+iKj9lZF3201Emk7RoaTPFRg6oMs2TQQpWhebJjqsJKfBgggw lecyWd4n/aDeOCaO4tfZ5PQf8M09joOR9WiClSx0qj71ORwQ1/OzLKT1UzY/fkiu WsAXP3dHFbhIusJt7fkOHWrMDpHR75ofLL0LCT7Q+8nfDLPFJYrBSrzb/VpcysT/ z3TLv73zkawdcpfywGL+DBWVZSmV/dQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:41:35 2026 by rpki-client