$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64068a45-cc86-3e68-a637-66e25deeb7a0.roa File: 64068a45-cc86-3e68-a637-66e25deeb7a0.roa (raw, json) Hash identifier: 8BfPBGYmoBym6gpb4Sw8g3KLue3owrgfGLS7XtQ7c+s= Subject key identifier: 43:49:88:63:87:F5:F2:E7:64:6B:34:C8:3B:A2:C9:E1:F9:2D:91:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA25FAB53325715D6BBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64068a45-cc86-3e68-a637-66e25deeb7a0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a2:5f:ab:53:32:57:15:d6:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a652ac64-574c-42e2-aef5-70f00e2c9954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:66:53:2a:1a:d6:76:e0:d9:b1:c6:f3:83: f9:7e:5e:16:29:f5:a2:c4:ae:14:15:65:45:f9:64: 2e:75:68:a1:ec:fe:66:17:18:0c:6b:f8:13:8a:99: 60:81:b6:f6:53:25:50:5d:0e:89:f1:13:17:13:b3: 62:ca:9f:b3:4e:6a:77:64:9e:6f:1c:8b:a0:54:f7: f3:78:89:3c:20:1e:f0:86:6b:15:aa:68:81:d5:8e: 3f:3e:0c:e9:0a:dd:94:65:15:e8:79:99:24:4f:dc: ae:ee:9a:44:88:25:04:ed:12:c6:26:b1:eb:e5:00: d2:b5:3e:f7:76:62:5f:54:a1:34:aa:8f:50:28:ec: 6f:43:76:2c:b9:ae:55:ad:03:36:40:90:56:ef:b5: 70:94:64:d8:52:1c:28:96:d9:24:cb:7b:de:59:73: 39:29:54:47:90:c9:10:d4:e8:e9:61:ed:d0:ef:8e: 59:2e:54:99:f4:e3:03:c6:74:8b:28:af:c3:f9:ca: c7:35:39:27:19:12:79:26:92:58:bd:a7:71:33:79: 48:45:19:82:0e:d6:ac:5c:2d:86:c2:d1:e5:a0:55: d2:dc:fd:7a:b8:a0:61:a9:54:45:c1:56:31:52:a6: 16:03:53:aa:b9:a8:f8:ba:78:74:35:ef:b8:a9:c7: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:88:63:87:F5:F2:E7:64:6B:34:C8:3B:A2:C9:E1:F9:2D:91:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64068a45-cc86-3e68-a637-66e25deeb7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:dd:f2:0a:6b:99:79:47:fb:cb:2e:9c:49:d5:f9:81:de:17: c8:12:38:3c:d4:ae:da:e7:d1:e1:de:64:db:77:0e:bf:6d:6c: 2e:f6:64:1a:70:a9:ab:24:65:80:a2:58:9d:09:d1:35:c2:e1: 2b:b8:73:99:0b:2f:d3:21:31:73:69:45:29:70:a8:de:6c:5d: b2:e4:53:c7:99:e1:a9:54:f8:30:82:64:b1:77:be:b4:ad:af: 62:db:dd:c1:11:44:da:f8:81:29:8d:ba:c7:23:c2:4a:56:3e: 11:ca:02:d1:4c:e8:77:0e:e7:e4:0c:64:d6:6b:76:a3:16:4c: ff:2c:3c:40:84:41:13:6e:45:c4:6d:2c:43:ef:64:db:c8:e2: 9a:ef:5d:ae:41:14:3c:61:91:9f:20:ae:f2:0b:3a:5f:7b:4d: 6f:fb:e5:85:14:44:a8:3c:1d:e3:e1:5b:10:da:4f:8e:d4:16: ff:b9:ac:cc:f7:86:88:6a:82:c9:ad:f1:8d:bd:3b:2b:db:18: 65:53:3d:52:5c:4e:0d:a6:6a:4b:fe:64:68:6f:24:46:8a:32: eb:28:b0:3a:02:60:9d:40:35:b9:2a:87:27:67:8a:93:fd:63: c3:9c:89:14:d2:7a:1d:77:c0:48:3e:9f:05:99:0c:55:ca:d9: df:45:6f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqJfq1MyVxXWu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTY1MmFjNjQtNTc0Yy00MmUyLWFlZjUtNzBmMDBlMmM5OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UFmUyoa1nbg2bHG84P5fl4WKfWixK4UFWVF +WQudWih7P5mFxgMa/gTiplggbb2UyVQXQ6J8RMXE7Niyp+zTmp3ZJ5vHIugVPfz eIk8IB7whmsVqmiB1Y4/PgzpCt2UZRXoeZkkT9yu7ppEiCUE7RLGJrHr5QDStT73 dmJfVKE0qo9QKOxvQ3Ysua5VrQM2QJBW77VwlGTYUhwoltkky3veWXM5KVRHkMkQ 1OjpYe3Q745ZLlSZ9OMDxnSLKK/D+crHNTknGRJ5JpJYvadxM3lIRRmCDtasXC2G wtHloFXS3P16uKBhqVRFwVYxUqYWA1Oquaj4unh0Ne+4qceMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJiGOH9fLnZGs0yDuiyeH5LZEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQwNjhhNDUtY2M4Ni0z ZTY4LWE2MzctNjZlMjVkZWViN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLd8gprmXlH+8sunEnV+YHeF8gSODzUrtrn0eHeZNt3Dr9tbC72ZBpw qaskZYCiWJ0J0TXC4Su4c5kLL9MhMXNpRSlwqN5sXbLkU8eZ4alU+DCCZLF3vrSt r2Lb3cERRNr4gSmNuscjwkpWPhHKAtFM6HcO5+QMZNZrdqMWTP8sPECEQRNuRcRt LEPvZNvI4prvXa5BFDxhkZ8grvILOl97TW/75YUURKg8HePhWxDaT47UFv+5rMz3 hohqgsmt8Y29OyvbGGVTPVJcTg2makv+ZGhvJEaKMusosDoCYJ1ANbkqhydnipP9 Y8OciRTSeh13wEg+nwWZDFXK2d9Fb04= -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:24 2026 by rpki-client