$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa File: 4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa (raw, json) Hash identifier: K6PVmzn7JMZBSBKkN8MXi+KvvTM8VztWUbGbLsIYQvw= Subject key identifier: AC:86:A9:92:55:53:9F:89:2C:6D:1A:7A:01:4C:1B:02:D2:81:08:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA638B351329E9CC29E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a6:38:b3:51:32:9e:9c:c2:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e4cb2fd6-16a6-4948-8e3e-71815a0b9c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:65:ba:0e:58:97:bb:18:00:d3:14:92:bf: e3:3d:2d:99:e1:ef:0b:43:af:ab:7f:a2:72:d8:6c: 37:c6:eb:fa:36:ae:96:51:24:c4:b0:b2:32:25:f0: 06:f4:e1:8a:47:59:20:51:38:c7:5d:ab:eb:6c:68: 66:c9:20:84:de:c6:05:0b:9a:b1:7d:5a:ad:da:da: 4b:90:b9:2a:f6:e8:7f:49:3d:42:ea:3f:66:c1:cb: 8f:33:d8:77:7f:d6:73:11:16:06:13:38:82:56:8e: bc:bc:c9:33:a4:cc:5c:73:ff:8e:f2:73:a7:09:0b: 6a:33:b3:ef:e0:55:f6:b0:bb:48:23:a1:9e:13:1f: ce:bf:c2:03:91:6d:d4:e4:15:86:e5:b3:b2:d1:87: 72:7c:52:ab:6a:e2:bc:46:90:5d:4c:f1:f1:2f:e9: 1f:3d:e2:3f:3f:a6:d6:41:64:ad:5a:a6:03:d3:0d: df:24:66:7c:bd:3d:bf:a6:f4:d3:d5:82:0c:bd:d5: e9:6e:ed:dc:d0:33:bb:ec:8b:0b:e5:ed:84:af:05: 32:6a:75:5e:15:3d:8a:21:23:ac:05:b9:c3:42:65: 9a:de:c7:af:de:65:70:a2:69:d6:55:96:b0:d0:eb: 8e:36:4b:91:d7:23:62:32:7a:b2:bb:ad:c3:e5:59: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:A9:92:55:53:9F:89:2C:6D:1A:7A:01:4C:1B:02:D2:81:08:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9a2902-17bf-3086-843a-e800c6b9ab4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c1:0f:c2:90:44:c9:d5:11:79:2a:0e:48:2e:56:b3:bb:f0: 4f:14:d4:32:2d:95:48:40:60:12:46:52:d1:cc:01:28:52:65: 17:93:f8:23:79:ef:96:f1:4b:a3:91:3b:d5:87:52:a7:e4:b7: 2a:98:4e:07:55:b8:b5:1f:11:5f:b2:5f:bd:f9:f7:34:71:dd: ab:f5:e9:15:d8:f9:23:1f:61:ae:7f:dd:31:89:a5:80:73:5a: fa:1a:b0:c4:f5:04:09:5e:19:c7:ee:85:4f:e9:8f:e7:2a:51: 96:d8:5d:6b:8e:93:44:17:56:31:f7:73:68:d3:c4:75:cc:e5: ed:b1:8c:40:00:8f:08:d7:61:23:4f:a1:ed:60:04:a9:0a:d8: 4f:c0:19:b9:46:ca:c5:b2:f5:e4:17:be:eb:1c:46:5e:0f:fa: cd:7d:79:0a:03:9e:71:aa:bc:9e:d8:5b:98:54:71:a5:3e:37: c6:e7:e1:67:9a:ae:6d:e9:1f:44:69:9a:ef:42:81:ba:87:af: ce:b7:06:17:1a:12:3d:ae:8b:84:22:c5:37:f6:bf:09:aa:24: 52:4f:60:e3:72:3b:57:6f:58:98:7e:bc:1b:94:c4:ae:27:50: 05:35:3a:7f:2d:0e:30:34:37:dc:6a:ed:d4:f1:18:ec:6c:68: 96:f3:11:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqY4s1EynpzCnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTRjYjJmZDYtMTZhNi00OTQ4LThlM2UtNzE4MTVhMGI5YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8plug5Yl7sYANMUkr/jPS2Z4e8LQ6+rf6Jy 2Gw3xuv6Nq6WUSTEsLIyJfAG9OGKR1kgUTjHXavrbGhmySCE3sYFC5qxfVqt2tpL kLkq9uh/ST1C6j9mwcuPM9h3f9ZzERYGEziCVo68vMkzpMxcc/+O8nOnCQtqM7Pv 4FX2sLtII6GeEx/Ov8IDkW3U5BWG5bOy0YdyfFKrauK8RpBdTPHxL+kfPeI/P6bW QWStWqYD0w3fJGZ8vT2/pvTT1YIMvdXpbu3c0DO77IsL5e2ErwUyanVeFT2KISOs BbnDQmWa3sev3mVwomnWVZaw0OuONkuR1yNiMnqyu63D5VlGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyGqZJVU5+JLG0aegFMGwLSgQhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY5YTI5MDItMTdiZi0z MDg2LTg0M2EtZTgwMGM2YjlhYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfBD8KQRMnVEXkqDkguVrO78E8U1DItlUhAYBJGUtHMAShSZReT+CN5 75bxS6ORO9WHUqfktyqYTgdVuLUfEV+yX7359zRx3av16RXY+SMfYa5/3TGJpYBz WvoasMT1BAleGcfuhU/pj+cqUZbYXWuOk0QXVjH3c2jTxHXM5e2xjEAAjwjXYSNP oe1gBKkK2E/AGblGysWy9eQXvuscRl4P+s19eQoDnnGqvJ7YW5hUcaU+N8bn4Wea rm3pH0Rpmu9CgbqHr863BhcaEj2ui4QixTf2vwmqJFJPYONyO1dvWJh+vBuUxK4n UAU1On8tDjA0N9xq7dTxGOxsaJbzEZo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:59:59 2026 by rpki-client