$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a45a034-e2c1-3d30-8579-b539069c5df6.roa File: 2a45a034-e2c1-3d30-8579-b539069c5df6.roa (raw, json) Hash identifier: ZeNsXXco85AEJj+01HtIa2rzrqaooWg7Vm2h44uaNwo= Subject key identifier: D0:21:FD:88:90:AB:D2:57:FF:3D:4C:B3:F0:62:47:F9:78:D0:F9:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5809EBBA920B64959DFF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a45a034-e2c1-3d30-8579-b539069c5df6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:09:eb:ba:92:0b:64:95:9d:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fa7aefc3-7a17-4714-8b7d-7e72b0f3b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:0c:ac:c2:24:59:cc:12:0d:00:3a:42:a7: 1b:92:23:dc:f4:fe:37:01:c0:f5:48:72:45:f8:a7: 0f:fd:49:d0:db:f3:6b:a5:8f:3b:31:ac:30:0a:39: e5:00:4c:37:3b:e4:22:fb:78:4e:49:1e:8f:a7:d4: df:53:95:90:f5:f3:d6:7e:33:0b:c5:b6:fa:fb:a0: db:ef:09:7d:fa:5d:65:ec:46:36:0f:ca:64:ba:f5: e1:3d:f2:f4:b4:f6:b3:09:72:03:3c:ec:d4:e9:22: 21:aa:24:f4:38:fb:15:dc:ca:a4:c2:ed:30:28:c5: ca:36:ea:ee:e8:0c:f9:73:5e:2a:50:57:89:82:09: ab:42:99:20:2e:d7:a9:45:a1:1a:92:89:94:29:16: 79:83:93:0f:5c:69:a7:b5:df:07:d0:40:0d:29:99: fe:1c:33:23:7c:6d:71:7a:15:ed:44:17:2e:0f:8b: 26:d4:98:ea:0d:94:7d:6f:c7:a8:1a:57:a1:5f:53: f0:cd:12:3d:7d:6d:8b:aa:3b:19:ff:8d:b8:09:f3: 6f:b1:e5:e0:93:12:fd:81:4b:95:bf:24:45:0c:75: eb:bf:02:fe:d1:f7:d1:4c:9e:5e:6a:10:09:e7:39: 32:21:92:57:33:44:f8:26:58:a8:ba:39:a0:2c:4d: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:21:FD:88:90:AB:D2:57:FF:3D:4C:B3:F0:62:47:F9:78:D0:F9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a45a034-e2c1-3d30-8579-b539069c5df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e7:d9:bc:22:3f:f9:d6:fb:af:1f:75:d0:d3:f1:98:11:3f: 6e:c5:f8:0d:6e:0d:fb:38:ba:d1:bd:21:85:5c:fb:14:32:4e: 13:05:c7:36:7e:27:bc:d8:d2:e5:2a:67:f3:4b:a2:61:67:ba: 5e:5e:b9:f0:bc:23:4f:22:3f:2d:b3:69:7f:db:5e:a3:63:a7: 64:a0:01:4c:75:d3:6d:73:45:8d:45:7d:7b:2a:73:a6:83:93: 5a:56:d6:3a:9b:23:99:fc:bf:fc:fa:43:44:bf:8f:66:ec:12: da:d8:05:d8:93:4d:50:37:3f:3f:8d:4b:a8:3d:7f:94:bc:c7: 71:ea:63:c4:fd:a9:1c:7a:76:5a:a4:10:2d:81:55:28:f7:50: dd:6e:8a:f7:84:3e:47:52:79:81:db:d2:3b:88:f9:7c:cc:29: 89:2f:01:29:32:c2:76:20:4f:78:c2:f0:47:4f:a2:6b:d0:20: ed:ff:ef:29:74:7f:c9:1b:4c:fa:09:a6:04:3c:a6:24:87:85: 17:89:7f:9f:af:7c:eb:e0:90:be:65:5c:99:61:f6:0c:01:72: 9c:44:5d:bb:37:63:64:1d:76:fe:1c:f4:ec:f7:aa:5f:c4:71: b1:61:ab:b0:e4:cc:61:c5:64:22:79:26:d4:47:4c:3c:12:4a: c1:40:af:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAnrupILZJWd/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmE3YWVmYzMtN2ExNy00NzE0LThiN2QtN2U3MmIwZjNiNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaMMrMIkWcwSDQA6QqcbkiPc9P43AcD1SHJF +KcP/UnQ2/NrpY87MawwCjnlAEw3O+Qi+3hOSR6Pp9TfU5WQ9fPWfjMLxbb6+6Db 7wl9+l1l7EY2D8pkuvXhPfL0tPazCXIDPOzU6SIhqiT0OPsV3Mqkwu0wKMXKNuru 6Az5c14qUFeJggmrQpkgLtepRaEakomUKRZ5g5MPXGmntd8H0EANKZn+HDMjfG1x ehXtRBcuD4sm1JjqDZR9b8eoGlehX1PwzRI9fW2LqjsZ/424CfNvseXgkxL9gUuV vyRFDHXrvwL+0ffRTJ5eahAJ5zkyIZJXM0T4JlioujmgLE3ZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAh/YiQq9JX/z1Ms/BiR/l40PkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE0NWEwMzQtZTJjMS0z ZDMwLTg1NzktYjUzOTA2OWM1ZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/n2bwiP/nW+68fddDT8ZgRP27F+A1uDfs4utG9IYVc+xQyThMFxzZ+ J7zY0uUqZ/NLomFnul5eufC8I08iPy2zaX/bXqNjp2SgAUx1021zRY1FfXsqc6aD k1pW1jqbI5n8v/z6Q0S/j2bsEtrYBdiTTVA3Pz+NS6g9f5S8x3HqY8T9qRx6dlqk EC2BVSj3UN1uiveEPkdSeYHb0juI+XzMKYkvASkywnYgT3jC8EdPomvQIO3/7yl0 f8kbTPoJpgQ8piSHhReJf5+vfOvgkL5lXJlh9gwBcpxEXbs3Y2Qddv4c9Oz3ql/E cbFhq7DkzGHFZCJ5JtRHTDwSSsFArxM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:32:32 2026 by rpki-client