$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa File: 580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa (raw, json) Hash identifier: krtXxECx5mx8etihEsW9vjlwcX/57UAhWMOq8w+KV0s= Subject key identifier: 03:F9:AB:C5:8A:06:24:2B:A6:7A:2B:95:72:77:68:83:3C:FF:BE:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5817626DC571D4491B6C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.45.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:17:62:6d:c5:71:d4:49:1b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c8734b68-cf6f-408f-8f2d-2d1d00458ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:00:dd:e6:d2:20:97:8a:a5:cc:06:62:df:74: 8e:ec:0a:80:23:07:35:3e:18:b9:0e:21:39:19:5b: 92:3f:b4:64:02:b2:5a:73:d6:14:18:cb:ac:82:26: 31:7a:14:0b:31:dc:1a:de:49:2f:5c:7a:47:79:4e: e6:1d:fb:7c:a2:3b:59:7f:a7:92:d8:bc:a6:95:ec: e3:e1:f5:a1:f7:e0:f3:7a:1f:f7:6f:36:f6:e5:e5: 09:cf:cf:e1:ef:1e:bd:de:d6:af:77:79:65:6a:50: 30:0d:fd:72:8a:0e:70:94:b9:f7:c5:f5:67:bb:da: 41:4d:3b:14:58:63:16:37:09:eb:da:22:db:fd:3e: 5c:ce:f6:52:9c:05:b5:46:11:4f:f6:b3:6c:14:27: 98:97:5a:e2:ee:71:40:55:90:5c:80:67:9b:38:c4: 19:68:ba:9d:19:0c:ad:dc:74:4d:7d:1a:90:54:87: d1:c6:f8:d9:0b:de:de:86:d2:d0:41:42:b4:96:1e: 28:36:be:7f:f5:7a:c7:d1:a2:22:2f:78:00:9d:48: f8:3b:aa:33:dc:3f:4b:6b:84:8e:3b:b3:aa:ee:35: 6e:fe:37:8f:24:a4:92:c4:2c:a1:44:de:15:27:6b: e1:0e:e7:a7:39:72:4f:3c:c1:fb:f3:00:f3:4d:46: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F9:AB:C5:8A:06:24:2B:A6:7A:2B:95:72:77:68:83:3C:FF:BE:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/580d3935-3c25-3982-9e6f-e3465f1ac9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3e:e9:f7:d9:cc:3d:44:dd:cd:00:c8:73:95:c9:42:89:8d: ab:f5:19:2f:5d:26:32:da:07:8d:1a:bb:15:af:a3:15:68:ac: 51:b3:9d:f5:38:d7:0a:69:93:45:da:2d:66:a2:37:bb:12:c4: e2:ae:e1:01:19:13:3d:b2:f2:08:8f:f4:49:d9:b9:1c:b0:b0: 8f:d9:39:ae:0e:90:4a:f1:bd:3b:fc:97:a9:57:91:f6:b3:21: 5d:79:71:4f:fe:57:be:68:2c:8b:06:63:dc:eb:49:0f:14:99: ca:74:cd:dd:59:8e:ea:1b:41:05:03:bf:28:c0:0c:ee:c5:b6: fd:0a:d0:54:53:ab:94:c2:0a:c4:74:49:5d:30:11:da:e6:ab: 65:e3:0b:ba:22:91:5d:78:fe:a9:b0:22:d2:4f:65:58:97:64: 2c:b0:da:a9:ca:3e:6a:b7:18:ca:e0:12:73:c1:fb:4c:53:d3: db:39:66:b5:8f:86:0f:50:29:7f:56:65:79:ea:26:6e:c7:16: b0:41:66:1a:6e:b5:26:62:1e:5a:ee:1a:7a:3a:ea:00:64:cc: 0e:78:6a:17:2e:e1:bd:45:2a:c9:03:2b:41:df:76:36:7c:b8: 43:09:bf:13:09:68:c7:82:18:53:72:fd:61:be:44:c9:9f:0b: 2d:d2:8b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBdibcVx1EkbbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yzg3MzRiNjgtY2Y2Zi00MDhmLThmMmQtMmQxZDAwNDU4YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgDd5tIgl4qlzAZi33SO7AqAIwc1Phi5DiE5 GVuSP7RkArJac9YUGMusgiYxehQLMdwa3kkvXHpHeU7mHft8ojtZf6eS2Lymlezj 4fWh9+Dzeh/3bzb25eUJz8/h7x693tavd3llalAwDf1yig5wlLn3xfVnu9pBTTsU WGMWNwnr2iLb/T5czvZSnAW1RhFP9rNsFCeYl1ri7nFAVZBcgGebOMQZaLqdGQyt 3HRNfRqQVIfRxvjZC97ehtLQQUK0lh4oNr5/9XrH0aIiL3gAnUj4O6oz3D9La4SO O7Oq7jVu/jePJKSSxCyhRN4VJ2vhDuenOXJPPMH78wDzTUbiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP5q8WKBiQrpnorlXJ3aIM8/74bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgwZDM5MzUtM2MyNS0z OTgyLTllNmYtZTM0NjVmMWFjOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRC2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ+6ffZzD1E3c0AyHOVyUKJjav1GS9dJjLaB40auxWvoxVorFGznfU4 1wppk0XaLWaiN7sSxOKu4QEZEz2y8giP9EnZuRywsI/ZOa4OkErxvTv8l6lXkfaz IV15cU/+V75oLIsGY9zrSQ8Umcp0zd1ZjuobQQUDvyjADO7Ftv0K0FRTq5TCCsR0 SV0wEdrmq2XjC7oikV14/qmwItJPZViXZCyw2qnKPmq3GMrgEnPB+0xT09s5ZrWP hg9QKX9WZXnqJm7HFrBBZhputSZiHlruGno66gBkzA54ahcu4b1FKskDK0HfdjZ8 uEMJvxMJaMeCGFNy/WG+RMmfCy3Si5g= -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:58 2026 by rpki-client