$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/494be8d3-85b4-3c24-967a-b4dff12d88e3.roa File: 494be8d3-85b4-3c24-967a-b4dff12d88e3.roa (raw, json) Hash identifier: oxhTersm1ZcAOI8bbz88GMIphLOksS3j3s30Fvf0xAU= Subject key identifier: 2B:55:59:88:66:E7:E3:87:AE:4A:66:7D:AE:B0:FA:CE:D9:9E:54:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8E7C9A239A0BD53C5BEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/494be8d3-85b4-3c24-967a-b4dff12d88e3.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33491 IP address blocks: 68.86.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:e7:c9:a2:39:a0:bd:53:c5:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=c0ebe6a7-2c43-4058-976b-d33fe6ece1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:c4:26:2c:3f:ba:f7:b6:05:de:53:f0:e5: 26:36:82:ce:19:80:36:16:35:8e:ce:b9:57:e4:37: e9:65:6e:f7:9d:81:e9:7b:08:28:78:2a:4a:af:c5: c6:19:79:cb:e2:e7:44:82:cb:d5:7d:04:af:5b:ad: ed:37:e5:a4:73:12:7b:e4:09:a5:b4:08:24:c3:ae: f9:54:c9:e7:d5:2c:0a:a2:49:18:48:8d:28:64:2d: 10:8e:1f:59:34:ab:11:8e:2b:1f:e1:4d:d6:39:54: 5f:0b:5a:76:88:18:4f:fc:b4:fe:2c:35:6d:f7:54: ea:d8:4c:50:f6:03:bc:8f:18:ba:38:52:1f:c4:7e: d0:cb:44:6d:b6:03:23:a1:32:bd:ca:88:70:ee:61: 8b:8e:e5:63:9c:e6:64:c3:7b:ae:83:2a:61:ae:31: 1b:5b:d5:73:ef:35:2e:93:09:ab:4a:aa:9c:83:ea: 43:d8:f1:06:e7:69:6d:44:55:6a:b8:51:cb:5f:2c: 80:e7:19:99:09:bb:e5:a5:79:00:cb:2f:94:da:4a: 95:10:21:ff:e9:fd:55:5b:59:18:f1:c5:23:52:96: cb:41:15:48:e7:a9:3f:53:5b:50:18:fb:7f:de:d7: 5c:59:9b:be:7d:28:40:9f:16:43:41:04:21:cd:29: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:59:88:66:E7:E3:87:AE:4A:66:7D:AE:B0:FA:CE:D9:9E:54:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/494be8d3-85b4-3c24-967a-b4dff12d88e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.86.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:aa:64:51:67:8f:44:ed:9c:41:1c:ea:84:c2:2a:d6:bf:ed: 5f:17:bf:e2:df:e2:48:05:06:b0:cd:2c:e9:be:85:38:a9:8e: b0:c0:55:4a:95:68:8c:c7:5c:50:c0:ec:19:48:cc:fc:13:73: 9b:4c:0a:5d:f0:e8:72:fe:f2:95:a5:9e:cf:a0:91:ea:97:ac: 6a:e1:9f:80:86:0f:3a:44:04:c0:a4:c3:93:ac:be:38:02:eb: bd:31:fd:75:4f:9f:5c:5c:03:90:2c:94:6e:5d:cd:36:36:f3: 60:29:51:1e:9b:c2:37:e9:f3:de:47:73:b9:66:8b:0b:02:c9: a9:3a:b4:6b:cd:6b:8a:1f:f6:20:0d:21:80:41:43:dc:d5:46: 84:f0:9f:02:c0:10:30:58:cc:85:51:9a:66:0f:16:30:ec:02: 28:00:6b:1b:60:6f:bb:06:8f:68:2a:e0:d7:ab:56:da:4a:d5: 00:5d:44:91:35:ec:8c:d6:45:c2:8e:f0:d2:88:58:23:40:6d: 21:e9:98:b1:d7:52:43:3c:eb:89:de:6d:62:c1:6e:1b:bc:30: e4:f5:aa:ff:62:3f:7c:38:77:1c:b7:a8:3b:c5:73:f4:c5:a4: 36:df:45:03:60:18:7a:ac:70:e4:04:29:ef:05:3d:8c:43:e7: 45:b3:13:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96OfJojmgvVPFvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YzBlYmU2YTctMmM0My00MDU4LTk3NmItZDMzZmU2ZWNlMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8PEJiw/uve2Bd5T8OUmNoLOGYA2FjWOzrlX 5DfpZW73nYHpewgoeCpKr8XGGXnL4udEgsvVfQSvW63tN+WkcxJ75AmltAgkw675 VMnn1SwKokkYSI0oZC0Qjh9ZNKsRjisf4U3WOVRfC1p2iBhP/LT+LDVt91Tq2ExQ 9gO8jxi6OFIfxH7Qy0RttgMjoTK9yohw7mGLjuVjnOZkw3uugyphrjEbW9Vz7zUu kwmrSqqcg+pD2PEG52ltRFVquFHLXyyA5xmZCbvlpXkAyy+U2kqVECH/6f1VW1kY 8cUjUpbLQRVI56k/U1tQGPt/3tdcWZu+fShAnxZDQQQhzSmfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtVWYhm5+OHrkpmfa6w+s7ZnlTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk0YmU4ZDMtODViNC0z YzI0LTk2N2EtYjRkZmYxMmQ4OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICqZFFnj0TtnEEc6oTCKta/7V8Xv+Lf4kgFBrDNLOm+hTipjrDAVUqV aIzHXFDA7BlIzPwTc5tMCl3w6HL+8pWlns+gkeqXrGrhn4CGDzpEBMCkw5OsvjgC 670x/XVPn1xcA5AslG5dzTY282ApUR6bwjfp895Hc7lmiwsCyak6tGvNa4of9iAN IYBBQ9zVRoTwnwLAEDBYzIVRmmYPFjDsAigAaxtgb7sGj2gq4NerVtpK1QBdRJE1 7IzWRcKO8NKIWCNAbSHpmLHXUkM864nebWLBbhu8MOT1qv9iP3w4dxy3qDvFc/TF pDbfRQNgGHqscOQEKe8FPYxD50WzE/Y= -----END CERTIFICATE-----Generated at Sun Mar 1 18:39:09 2026 by rpki-client