$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a38a296-e620-3c15-8c8f-8e2764173c57.roa File: 3a38a296-e620-3c15-8c8f-8e2764173c57.roa (raw, json) Hash identifier: mvjacE9zKTnvRyl41DuWKLuO1wbN4Yx9gihQ00gI3kU= Subject key identifier: B1:21:A9:A5:09:DF:32:0F:EC:42:AF:E6:F4:BB:4A:7E:F3:7F:41:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BABE8F67974C3FA864D58 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a38a296-e620-3c15-8c8f-8e2764173c57.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.51.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:ab:e8:f6:79:74:c3:fa:86:4d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e993f999-a4f0-408d-871c-9c4fdaaa5c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:cb:a2:45:03:d1:d4:1a:13:5f:cd:e7:25: ad:d7:5e:9f:ac:d1:06:55:37:05:50:e7:db:73:2f: 6e:be:e7:5e:22:96:40:f7:bd:f1:d7:20:2c:65:6a: 4f:9b:8c:be:9b:45:a1:82:37:de:05:37:2f:1a:ca: 8c:e5:2b:12:9f:d4:67:9c:a1:ba:45:b5:ec:77:55: 39:4c:de:2b:db:9a:82:02:ce:b8:1b:1a:4a:99:f7: 06:34:c0:ac:6c:c7:73:df:b9:0e:55:e4:79:29:5a: 0e:93:97:45:18:81:16:50:e9:c1:51:d8:29:bf:5b: e2:9e:96:c1:74:c4:2e:6c:cb:2c:ed:bc:be:c5:98: 51:ae:2d:14:2c:d9:bd:a8:c1:66:7f:4a:54:30:ac: 45:75:5a:20:87:4c:de:23:be:b9:5e:f5:50:2e:74: 4a:32:f1:82:ae:c8:6c:72:8f:6e:44:22:9a:77:35: 2f:ca:8d:5c:7f:d8:16:96:cb:86:63:c9:ee:78:69: 29:b7:0b:cd:61:cc:0f:c0:d2:c7:db:2f:28:3a:9e: 99:c8:3a:67:00:b0:6d:56:a2:da:7b:02:c1:9b:c6: b3:f7:b7:cb:18:d4:93:bd:2b:20:6f:08:72:01:7b: e3:76:05:9e:e5:67:8b:e6:9a:b2:0e:3b:51:8c:29: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:A9:A5:09:DF:32:0F:EC:42:AF:E6:F4:BB:4A:7E:F3:7F:41:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a38a296-e620-3c15-8c8f-8e2764173c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.51.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:7b:e1:bf:63:5f:60:08:96:91:7f:67:8d:19:0a:9d:1e:76: 3f:ea:6d:61:71:18:49:47:81:7a:20:3d:db:b0:d5:20:6b:d5: 9b:b1:ed:e1:b7:c1:a7:1a:6d:34:79:4d:6b:8b:70:d0:fe:43: 9c:91:c4:08:fa:6e:22:08:d7:c9:17:0c:0c:74:3f:84:76:89: 50:96:0b:ed:5a:1a:32:c8:62:70:31:ab:71:ae:12:6b:9c:1f: c2:86:17:bd:42:55:9b:ba:82:c8:3a:8b:77:44:b9:31:d4:1c: 3e:57:a5:c9:30:5e:15:a4:50:9c:bd:da:df:ac:71:eb:02:f4: 09:cb:8e:11:ac:47:33:cb:fc:f1:e7:cd:60:af:ff:39:52:f6: 6f:51:96:c6:b2:86:7a:b5:56:a9:9e:c3:b1:7c:2f:cf:0a:7a: 5a:a7:05:e0:14:1a:3e:91:33:d3:9c:8d:04:c8:80:d4:c1:73: 3f:cb:90:84:d0:ed:45:42:05:ae:14:25:c5:d8:5d:02:86:8c: 6f:aa:7e:ec:17:c0:5d:fc:b4:f3:ea:de:3a:de:26:58:a0:4c: d1:f9:49:0d:69:1f:75:0e:36:64:3e:7d:82:b4:b9:c4:19:38: f5:80:cc:71:4b:ed:a7:33:97:5b:7a:fd:b0:cc:d8:88:ed:00: 94:23:c3:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW6vo9nl0w/qGTVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTk5M2Y5OTktYTRmMC00MDhkLTg3MWMtOWM0ZmRhYWE1YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDfLokUD0dQaE1/N5yWt116frNEGVTcFUOfb cy9uvudeIpZA973x1yAsZWpPm4y+m0WhgjfeBTcvGsqM5SsSn9RnnKG6RbXsd1U5 TN4r25qCAs64GxpKmfcGNMCsbMdz37kOVeR5KVoOk5dFGIEWUOnBUdgpv1vinpbB dMQubMss7by+xZhRri0ULNm9qMFmf0pUMKxFdVogh0zeI765XvVQLnRKMvGCrshs co9uRCKadzUvyo1cf9gWlsuGY8nueGkptwvNYcwPwNLH2y8oOp6ZyDpnALBtVqLa ewLBm8az97fLGNSTvSsgbwhyAXvjdgWe5WeL5pqyDjtRjCnH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEhqaUJ3zIP7EKv5vS7Sn7zf0HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2EzOGEyOTYtZTYyMC0z YzE1LThjOGYtOGUyNzY0MTczYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMl74b9jX2AIlpF/Z40ZCp0edj/qbWFxGElHgXogPduw1SBr1Zux7eG3 wacabTR5TWuLcND+Q5yRxAj6biII18kXDAx0P4R2iVCWC+1aGjLIYnAxq3GuEmuc H8KGF71CVZu6gsg6i3dEuTHUHD5XpckwXhWkUJy92t+scesC9AnLjhGsRzPL/PHn zWCv/zlS9m9Rlsayhnq1Vqmew7F8L88KelqnBeAUGj6RM9OcjQTIgNTBcz/LkITQ 7UVCBa4UJcXYXQKGjG+qfuwXwF38tPPq3jreJligTNH5SQ1pH3UONmQ+fYK0ucQZ OPWAzHFL7aczl1t6/bDM2IjtAJQjw+0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:52:07 2026 by rpki-client