$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa File: 4d8f8fbb-91db-3d2d-abea-faf45e219154.roa (raw, json) Hash identifier: 8hcpA1u3vI5sam9VBvoLL8aUze1drK9gcbrZs2a3Jag= Subject key identifier: A4:60:09:C9:ED:2B:D6:98:A8:8C:1D:F1:52:58:C3:E5:7B:23:C3:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE597FFB3267B459AA457D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 68.84.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:7f:fb:32:67:b4:59:aa:45:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d049ee8d-d945-4237-9b36-788f2a28a3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:fb:1d:b8:c4:ae:36:4f:34:19:df:d5:6f: 66:c8:ff:9f:f2:9f:8e:f6:60:ca:9d:54:1e:4a:fa: bc:ef:f1:c9:8a:a3:4f:92:74:d1:99:ea:99:62:dd: 94:58:14:f7:6f:d5:f4:8d:1e:ce:9b:91:ae:e3:79: 23:9b:4e:1b:91:ff:1c:9b:6c:96:26:bd:19:e6:84: fc:76:17:eb:0d:3c:b4:55:9c:fe:4e:90:e9:24:3b: 4d:f7:4d:a4:79:57:17:06:65:d4:90:20:9f:51:a0: 28:05:56:8f:7b:ef:81:11:d2:03:a9:44:a5:d5:1d: bc:5e:34:fa:c3:0f:90:41:d3:a9:be:ff:a2:ad:4b: 8f:f0:45:6c:a2:1a:69:22:9c:99:b8:21:02:87:a3: 24:eb:b5:23:12:59:d8:89:ef:ca:69:33:e2:58:fa: ff:9f:84:88:97:57:d0:85:4c:ad:be:a2:6d:bb:6c: 3c:a1:4f:26:ca:5c:60:1a:5e:47:73:8c:28:27:b3: 6f:08:0b:9c:c2:84:f0:8e:ea:04:ae:f3:4c:14:10: 37:7d:31:9d:73:49:ae:79:b3:9f:06:8f:bc:42:f0: d1:09:4c:78:7a:e4:61:f6:ac:c3:f7:49:3b:3a:3d: 6b:e5:92:e8:b6:aa:22:0f:42:00:33:75:30:bf:f7: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:09:C9:ED:2B:D6:98:A8:8C:1D:F1:52:58:C3:E5:7B:23:C3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d8f8fbb-91db-3d2d-abea-faf45e219154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:89:b1:68:b3:ea:f8:19:69:db:68:2b:a2:91:a2:b8:4e:13: c8:43:bd:41:99:e9:37:73:8a:8e:4c:e5:62:46:53:66:a0:94: 65:ad:e4:77:3d:17:0c:81:99:5a:9e:f8:84:a1:bc:1e:4a:bd: 3f:40:d0:b6:e0:44:94:e6:5a:ac:00:22:96:a8:56:8e:5a:d9: 16:ef:48:67:11:b7:0e:0b:bf:20:ba:13:e1:bc:64:41:5b:3e: 51:7f:32:3e:49:f7:17:a4:fe:14:a2:c3:b8:18:3e:f6:80:a7: 62:bb:60:db:64:79:0b:c4:c7:b7:18:b4:a9:92:7c:c0:5d:47: 8f:cd:fb:2f:39:4a:1b:a3:49:fe:fd:c6:a3:34:78:79:77:b0: 90:e0:8c:61:f4:ba:da:1a:4a:f5:89:1c:cb:23:e1:54:0f:28: b1:ca:02:51:c5:8a:9c:c4:d9:fa:7b:2b:2f:fd:aa:6f:72:71: db:ec:82:13:94:34:c0:53:95:dc:33:45:5e:a0:84:5f:b1:f2: 52:7c:0e:a9:75:4e:dc:12:08:61:b9:22:48:1b:6f:ef:a3:23: 3c:e7:84:cf:66:3d:a0:7a:c3:82:c2:9e:a1:38:48:5e:c3:77: a1:59:16:00:93:8f:7b:09:48:0f:8b:fc:88:f9:ca:3b:e8:ff: 63:d4:a3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWX/7Mme0WapFfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDA0OWVlOGQtZDk0NS00MjM3LTliMzYtNzg4ZjJhMjhhM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRn7HbjErjZPNBnf1W9myP+f8p+O9mDKnVQe Svq87/HJiqNPknTRmeqZYt2UWBT3b9X0jR7Om5Gu43kjm04bkf8cm2yWJr0Z5oT8 dhfrDTy0VZz+TpDpJDtN902keVcXBmXUkCCfUaAoBVaPe++BEdIDqUSl1R28XjT6 ww+QQdOpvv+irUuP8EVsohppIpyZuCECh6Mk67UjElnYie/KaTPiWPr/n4SIl1fQ hUytvqJtu2w8oU8mylxgGl5Hc4woJ7NvCAucwoTwjuoErvNMFBA3fTGdc0muebOf Bo+8QvDRCUx4euRh9qzD90k7Oj1r5ZLotqoiD0IAM3Uwv/cPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRgCcntK9aYqIwd8VJYw+V7I8NTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ4ZjhmYmItOTFkYi0z ZDJkLWFiZWEtZmFmNDVlMjE5MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqJsWiz6vgZadtoK6KRorhOE8hDvUGZ6Tdzio5M5WJGU2aglGWt5Hc9 FwyBmVqe+IShvB5KvT9A0LbgRJTmWqwAIpaoVo5a2RbvSGcRtw4LvyC6E+G8ZEFb PlF/Mj5J9xek/hSiw7gYPvaAp2K7YNtkeQvEx7cYtKmSfMBdR4/N+y85ShujSf79 xqM0eHl3sJDgjGH0utoaSvWJHMsj4VQPKLHKAlHFipzE2fp7Ky/9qm9ycdvsghOU NMBTldwzRV6ghF+x8lJ8Dql1TtwSCGG5Ikgbb++jIzznhM9mPaB6w4LCnqE4SF7D d6FZFgCTj3sJSA+L/Ij5yjvo/2PUo5c= -----END CERTIFICATE-----Generated at Sun Mar 1 19:03:42 2026 by rpki-client