$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fccca2f-cd20-39c0-beab-e281b2dfa309.roa File: 4fccca2f-cd20-39c0-beab-e281b2dfa309.roa (raw, json) Hash identifier: Uz463edYwyBnEiHQH/1D9tl40ysczHucW1pkTDZsu5k= Subject key identifier: 1C:FD:69:15:42:6F:A1:7F:DA:33:25:75:68:23:75:A4:C2:27:08:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B8D1DC1CE4521666CE240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fccca2f-cd20-39c0-beab-e281b2dfa309.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:8d:1d:c1:ce:45:21:66:6c:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e27a5a95-663d-4adf-b0a8-241cf9d4286b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:70:37:c0:d4:20:99:dc:e8:02:3f:b1:4f: 99:bc:7c:dd:b2:0e:0d:e0:72:a2:88:b6:64:48:cf: 52:f5:5b:b5:8a:e7:b9:ff:0e:81:f6:aa:cd:c2:71: f5:25:9e:41:57:6b:2d:66:5c:eb:2d:80:0b:f6:3f: 66:92:84:e4:0b:2c:05:5e:47:2c:df:66:c5:66:de: 71:7b:e8:0e:18:b4:b9:7f:3b:ca:fd:ff:15:d0:29: bf:96:eb:da:99:88:c1:79:5f:35:96:ae:ca:72:79: 01:d7:66:ef:0b:ab:1c:7b:a2:29:95:29:3f:45:24: ab:23:1a:c4:ed:70:72:af:93:8c:70:e3:76:0a:da: 0d:e0:1e:cc:10:c3:57:3e:82:d4:67:eb:2c:14:49: 0c:95:fd:36:21:04:e4:0d:cd:d3:cf:ff:8c:28:08: 18:29:71:fb:64:1a:ff:c3:40:f5:df:1a:30:46:7a: 8b:fb:a1:9d:e2:c4:3e:6a:6f:d4:84:bb:c5:8b:6e: e8:2a:82:79:b2:53:86:d5:62:ca:bf:c1:8b:1d:f1: 0d:20:64:59:60:35:a3:8b:07:2b:2a:e6:5d:04:19: 06:d7:de:7f:a9:17:29:ac:aa:b1:f0:a3:b3:01:8b: 90:08:6c:4b:d0:b1:b4:67:ce:2a:b4:62:2c:9b:84: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FD:69:15:42:6F:A1:7F:DA:33:25:75:68:23:75:A4:C2:27:08:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fccca2f-cd20-39c0-beab-e281b2dfa309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:4d:f0:42:8e:41:b6:ef:21:b6:b4:0f:86:df:55:96:b1: 85:5c:0c:a9:29:a3:84:6c:8a:d0:22:69:d4:71:56:12:03:74: 9a:41:e1:a3:26:4e:ed:4e:62:77:49:b3:cf:0c:71:f3:ea:2d: 52:fe:08:d4:d6:d2:f1:7d:6d:85:77:c7:a4:01:c3:7c:74:5b: 05:91:87:b7:66:0e:a5:f7:7b:ae:48:0f:c4:79:96:bc:a1:33: 50:90:1c:f5:5a:b7:23:3e:ed:31:f6:8f:c7:88:8a:9d:5d:54: a4:e8:18:8d:58:0f:56:a1:70:86:c1:3a:2e:5f:72:0a:27:05: 63:6c:fe:9a:e3:75:2a:8d:a6:c6:27:f2:0b:e8:75:55:38:50: d2:33:5c:5b:c7:f6:91:63:9b:2d:8b:32:d3:7e:e2:c3:19:f5: f9:45:c6:e5:95:19:ff:74:4a:bd:b0:63:30:e6:9d:69:70:71: 71:12:52:be:e3:c9:c4:26:b7:12:5b:9d:c5:fd:80:09:51:25: 6d:38:d7:21:fa:e3:b1:38:1a:cf:c6:fe:f9:76:06:78:6b:af: c0:21:1c:d4:0a:bf:01:5b:1a:69:fb:32:d0:8c:db:f0:03:ae: 4f:a5:0e:cc:2f:d2:93:28:ad:b6:5a:59:69:4e:c6:33:e3:ac: e4:76:e2:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW40dwc5FIWZs4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTI3YTVhOTUtNjYzZC00YWRmLWIwYTgtMjQxY2Y5ZDQyODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmztwN8DUIJnc6AI/sU+ZvHzdsg4N4HKiiLZk SM9S9Vu1iue5/w6B9qrNwnH1JZ5BV2stZlzrLYAL9j9mkoTkCywFXkcs32bFZt5x e+gOGLS5fzvK/f8V0Cm/luvamYjBeV81lq7KcnkB12bvC6sce6IplSk/RSSrIxrE 7XByr5OMcON2CtoN4B7MEMNXPoLUZ+ssFEkMlf02IQTkDc3Tz/+MKAgYKXH7ZBr/ w0D13xowRnqL+6Gd4sQ+am/UhLvFi27oKoJ5slOG1WLKv8GLHfENIGRZYDWjiwcr KuZdBBkG195/qRcprKqx8KOzAYuQCGxL0LG0Z84qtGIsm4TibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz9aRVCb6F/2jMldWgjdaTCJwiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZjY2NhMmYtY2QyMC0z OWMwLWJlYWItZTI4MWIyZGZhMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL5TfBCjkG27yG2tA+G31WWsYVcDKkpo4RsitAiadRxVhIDdJpB4aMm Tu1OYndJs88McfPqLVL+CNTW0vF9bYV3x6QBw3x0WwWRh7dmDqX3e65ID8R5lryh M1CQHPVatyM+7TH2j8eIip1dVKToGI1YD1ahcIbBOi5fcgonBWNs/prjdSqNpsYn 8gvodVU4UNIzXFvH9pFjmy2LMtN+4sMZ9flFxuWVGf90Sr2wYzDmnWlwcXESUr7j ycQmtxJbncX9gAlRJW041yH647E4Gs/G/vl2Bnhrr8AhHNQKvwFbGmn7MtCM2/AD rk+lDswv0pMorbZaWWlOxjPjrOR24ns= -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:26 2026 by rpki-client