$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c652a-8bfb-3415-837e-33f4fa5b0940.roa File: 418c652a-8bfb-3415-837e-33f4fa5b0940.roa (raw, json) Hash identifier: 0CKqu7V1gEmvt8EwY67Zwyfy7zoEbg2Sdcg++SnNftw= Subject key identifier: CB:2C:C3:27:57:46:48:2A:DD:60:B3:92:59:E8:EF:D2:5A:B0:98:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AB1DDAB6E186BCDBBF670 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c652a-8bfb-3415-837e-33f4fa5b0940.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.82.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:b1:dd:ab:6e:18:6b:cd:bb:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=651b90cd-4c4d-498b-a94b-a423d3cb3353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:91:01:6f:f6:74:e3:f4:52:b9:9a:32:62: e7:41:2e:93:e9:5e:d5:44:a1:56:47:6d:83:66:90: cf:64:b0:2a:a1:35:5b:3a:77:91:aa:1e:7e:e1:b7: 6d:2d:e0:38:d5:99:62:50:8e:55:88:36:0a:e1:1f: 86:90:0e:ed:f8:cd:0e:d0:97:0f:4f:73:f9:f1:08: 54:e5:db:b4:42:71:c2:42:dd:dc:f7:09:dd:43:27: c5:12:06:75:7b:f8:d1:40:01:63:50:3b:70:d7:66: 85:19:09:25:ac:98:28:c1:14:f7:29:d1:46:a0:23: a6:f7:24:65:df:f0:79:5e:fc:86:47:b4:a9:c9:59: 7d:25:55:9d:43:a1:d0:e6:02:56:12:77:37:9c:bf: 8c:3c:cd:6d:f1:c7:48:fc:4b:63:6a:00:28:89:f6: 7e:42:b5:2c:cd:70:f6:8e:2a:dd:1e:6c:97:b3:71: 9a:85:43:98:fc:64:69:c6:71:b5:1b:5a:de:d6:c0: 08:91:77:de:da:bf:6d:3c:bb:12:a2:8a:6c:7f:f9: ac:80:dc:93:e7:66:95:40:f8:3a:9c:ec:ed:73:53: d9:19:e6:89:ad:7b:00:d3:bb:08:13:33:a4:e8:e6: f4:25:66:45:5b:74:10:ec:fb:51:1a:29:71:dd:6e: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:C3:27:57:46:48:2A:DD:60:B3:92:59:E8:EF:D2:5A:B0:98:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/418c652a-8bfb-3415-837e-33f4fa5b0940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.82.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:05:89:b8:96:3a:4a:6a:c9:ea:37:ed:26:5c:15:54:fe: c8:fc:31:25:55:c4:cc:77:bd:c2:31:49:a2:f1:96:c0:2a:25: b3:27:04:2a:17:87:d6:df:b4:02:4c:7d:23:ca:c0:f8:3e:39: 5f:e8:4e:cc:9c:1e:f8:84:98:41:dc:6f:b8:77:a4:10:46:13: 9f:5b:8c:ea:fa:f6:2d:5a:89:6c:8f:97:0d:e5:c5:23:d2:b5: 79:c2:9c:94:a9:cf:1c:38:18:bc:31:1a:7e:6c:51:cd:a8:74: 40:99:47:fe:ed:3c:66:52:46:a3:c8:67:3a:b5:f4:c3:77:01: 06:2a:31:b7:7f:94:bc:08:53:52:c2:8b:45:63:53:6b:0e:6b: a9:d6:d2:db:cc:48:b2:04:6a:f4:2f:5d:7f:fc:a6:5c:c5:fc: 82:d0:69:ef:33:2f:51:8d:35:2a:17:1e:5f:28:4e:16:48:b9: 88:e6:d8:97:c1:4f:5d:76:e8:92:e3:21:ea:ea:50:8e:49:d8: 8e:f1:00:fb:8a:6c:3d:06:75:17:23:06:c7:fb:c9:1a:17:a1: f9:65:34:38:1d:d7:11:3e:f7:8b:f5:3f:5f:89:6f:0a:75:4f: 32:bf:5e:ff:a0:4d:6b:aa:10:4f:9a:84:47:69:07:40:33:26: 29:c9:f4:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWrHdq24Ya8279nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjUxYjkwY2QtNGM0ZC00OThiLWE5NGItYTQyM2QzY2IzMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3KRAW/2dOP0UrmaMmLnQS6T6V7VRKFWR22D ZpDPZLAqoTVbOneRqh5+4bdtLeA41ZliUI5ViDYK4R+GkA7t+M0O0JcPT3P58QhU 5du0QnHCQt3c9wndQyfFEgZ1e/jRQAFjUDtw12aFGQklrJgowRT3KdFGoCOm9yRl 3/B5XvyGR7SpyVl9JVWdQ6HQ5gJWEnc3nL+MPM1t8cdI/EtjagAoifZ+QrUszXD2 jirdHmyXs3GahUOY/GRpxnG1G1re1sAIkXfe2r9tPLsSoopsf/msgNyT52aVQPg6 nOztc1PZGeaJrXsA07sIEzOk6Ob0JWZFW3QQ7PtRGilx3W4EgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsswydXRkgq3WCzklno79JasJgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE4YzY1MmEtOGJmYi0z NDE1LTgzN2UtMzNmNGZhNWIwOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATnBYm4ljpKasnqN+0mXBVU/sj8MSVVxMx3vcIxSaLxlsAqJbMnBCoX h9bftAJMfSPKwPg+OV/oTsycHviEmEHcb7h3pBBGE59bjOr69i1aiWyPlw3lxSPS tXnCnJSpzxw4GLwxGn5sUc2odECZR/7tPGZSRqPIZzq19MN3AQYqMbd/lLwIU1LC i0VjU2sOa6nW0tvMSLIEavQvXX/8plzF/ILQae8zL1GNNSoXHl8oThZIuYjm2JfB T1126JLjIerqUI5J2I7xAPuKbD0GdRcjBsf7yRoXofllNDgd1xE+94v1P1+Jbwp1 TzK/Xv+gTWuqEE+ahEdpB0AzJinJ9FI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:53 2026 by rpki-client