$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9a9eef-47ef-37a3-a488-022f6c084458.roa File: 2f9a9eef-47ef-37a3-a488-022f6c084458.roa (raw, json) Hash identifier: f2hwHNR/wvOhr/2tUcHGYPzCB/Fa+E+TsrsBfv08FYw= Subject key identifier: 02:88:D0:F3:AF:80:B9:AC:8E:83:A2:B0:25:D9:2C:E6:B3:19:D6:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA7E4F69C8025D289A080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9a9eef-47ef-37a3-a488-022f6c084458.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.81.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a7:e4:f6:9c:80:25:d2:89:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0be699fa-e870-4589-8412-c5f0459ea32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:56:29:e4:04:13:05:e2:86:44:d4:5e:5f: 03:6b:b7:da:1e:c0:3f:b7:5a:0a:b4:27:6d:0e:33: 74:88:36:ea:ba:f3:1b:04:fe:dc:ec:4f:86:02:3f: a1:67:d3:31:e1:66:4e:26:86:2e:bf:d9:6f:a4:20: 2b:a4:31:62:65:e5:b6:cd:9e:a0:d3:ba:22:c2:ac: a2:1c:48:c5:4e:a1:d3:56:d3:71:c6:b4:82:23:18: 86:da:24:19:68:15:66:09:a8:2c:bb:2b:ba:07:fd: 76:9d:93:e3:13:d8:04:33:7b:78:35:e0:af:e8:58: a9:06:b0:cf:c1:09:28:83:ba:4a:46:b5:2b:42:c7: 4d:ed:1e:6e:17:de:26:2e:e1:f5:b5:e6:f6:c6:f9: a6:50:71:8a:ca:fb:2f:53:8c:e8:e0:1f:0c:de:d4: df:a8:7e:48:74:0f:36:cb:55:66:34:15:c1:ef:79: 73:70:79:a2:7f:93:e9:c3:04:3f:98:57:8c:89:ad: 39:ca:9f:52:1b:88:9f:3d:6d:8b:ea:c1:c5:46:4b: 5d:d5:14:1a:5a:e8:3e:8d:94:fb:1d:2d:91:6d:7c: c0:0c:11:40:9b:3e:b4:f5:6a:f8:51:ae:41:90:58: 93:df:87:1d:2f:f7:42:44:63:8b:2d:29:ba:b4:ba: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:D0:F3:AF:80:B9:AC:8E:83:A2:B0:25:D9:2C:E6:B3:19:D6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f9a9eef-47ef-37a3-a488-022f6c084458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:22:51:8e:18:77:5d:72:a8:be:ec:21:9a:a4:ed:79:e0: 4d:7f:21:34:01:54:c7:8b:d1:16:3e:94:2e:aa:b4:99:97:a4: be:9f:f1:92:c3:0b:81:7c:ed:9b:7e:59:05:db:6d:f3:bf:1a: 09:0e:95:6b:85:32:f8:73:4a:42:18:e4:1c:08:4a:a7:21:ab: 85:1b:ea:e7:4a:cf:ff:8c:34:5b:99:bf:95:03:8a:bc:a4:2e: 2c:4f:07:14:2a:01:f5:c2:81:ac:c9:a2:3e:7c:0b:a4:80:c8: ba:52:c6:6e:68:1f:8a:0c:56:de:41:43:13:3d:fa:35:b8:87: 33:63:81:d4:50:a7:c3:40:88:52:ca:6e:86:68:05:19:46:a4: 8b:41:82:46:d8:43:f2:f4:e5:13:18:00:1b:38:92:fa:82:54: 5d:d0:44:d6:45:2e:c3:47:4d:f5:d3:11:8f:39:41:e0:82:64: 6f:42:e3:90:0e:92:c5:b3:c3:f9:dc:08:52:8c:cd:4d:96:3e: 33:f4:57:c1:e6:07:4c:2d:df:fe:80:d1:99:6c:a9:01:10:52: bc:c9:70:b0:f5:f9:92:1b:61:11:76:f6:41:f7:f8:58:eb:ba: 55:a1:02:b9:26:50:d2:52:34:85:67:3b:a6:06:e6:fd:9f:1c: ac:78:f8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqfk9pyAJdKJoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGJlNjk5ZmEtZTg3MC00NTg5LTg0MTItYzVmMDQ1OWVhMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9dWKeQEEwXihkTUXl8Da7faHsA/t1oKtCdt DjN0iDbquvMbBP7c7E+GAj+hZ9Mx4WZOJoYuv9lvpCArpDFiZeW2zZ6g07oiwqyi HEjFTqHTVtNxxrSCIxiG2iQZaBVmCagsuyu6B/12nZPjE9gEM3t4NeCv6FipBrDP wQkog7pKRrUrQsdN7R5uF94mLuH1teb2xvmmUHGKyvsvU4zo4B8M3tTfqH5IdA82 y1VmNBXB73lzcHmif5PpwwQ/mFeMia05yp9SG4ifPW2L6sHFRktd1RQaWug+jZT7 HS2RbXzADBFAmz609Wr4Ua5BkFiT34cdL/dCRGOLLSm6tLqWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKI0POvgLmsjoOisCXZLOazGdbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY5YTllZWYtNDdlZi0z N2EzLWE0ODgtMDIyZjZjMDg0NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8HIlGOGHddcqi+7CGapO154E1/ITQBVMeL0RY+lC6qtJmXpL6f8ZLD C4F87Zt+WQXbbfO/GgkOlWuFMvhzSkIY5BwISqchq4Ub6udKz/+MNFuZv5UDiryk LixPBxQqAfXCgazJoj58C6SAyLpSxm5oH4oMVt5BQxM9+jW4hzNjgdRQp8NAiFLK boZoBRlGpItBgkbYQ/L05RMYABs4kvqCVF3QRNZFLsNHTfXTEY85QeCCZG9C45AO ksWzw/ncCFKMzU2WPjP0V8HmB0wt3/6A0ZlsqQEQUrzJcLD1+ZIbYRF29kH3+Fjr ulWhArkmUNJSNIVnO6YG5v2fHKx4+J0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:45 2026 by rpki-client