$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67fc526d-96ab-39fa-a91c-b8e7258eb73c.roa File: 67fc526d-96ab-39fa-a91c-b8e7258eb73c.roa (raw, json) Hash identifier: cwkcg6rZhc8MNJKCucnM4aFQ5W3Dfy+fZ9DnVhYZ3ek= Subject key identifier: C3:1B:F9:87:FD:36:7D:00:1F:9F:6E:FF:F6:26:77:91:BF:A5:69:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA33B40FB4BA606A26200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67fc526d-96ab-39fa-a91c-b8e7258eb73c.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a3:3b:40:fb:4b:a6:06:a2:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7ca4a9ff-ed4e-4142-a8cd-1f2727881faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:36:1d:5d:ad:85:c3:32:1c:b7:d4:46:e9: d9:09:93:a9:b1:ce:b2:5a:5a:e0:32:02:ab:d3:0a: d1:82:ea:9e:f2:07:0d:c6:ab:40:e9:5a:38:91:c9: 20:dd:fc:0a:17:4a:1c:5e:eb:1a:47:ca:2f:ee:32: f8:84:83:0f:e4:d8:f5:99:7d:bd:e4:cf:83:86:81: e7:2b:05:6b:fb:21:30:16:e4:aa:5e:57:2d:85:80: ab:c6:0c:42:fa:03:4e:77:3f:5b:4d:c0:03:b8:85: e3:d8:8e:06:f0:3b:de:94:67:2d:e3:6c:28:05:ac: b7:15:7d:ee:0f:2b:c1:e0:4f:d9:5c:0c:b3:a6:68: 83:6f:e5:26:71:de:e2:20:2c:19:9c:18:79:cd:ad: 07:94:20:e1:60:10:c6:67:73:e0:59:73:6c:24:5d: 56:00:75:59:b8:83:cd:b4:c8:89:bd:d5:11:3b:ef: c1:86:4e:02:2d:1a:3a:55:9c:f1:39:90:cc:1b:cf: 51:14:3f:3b:0d:1a:68:d8:ca:cc:a0:6a:a5:2e:da: 3b:3c:af:02:28:21:84:eb:22:4e:a4:fd:7b:84:90: 38:d8:24:86:32:39:26:25:cb:cc:89:72:87:ae:8a: c8:03:58:f2:b1:79:e7:d8:3d:ca:7a:84:d7:d2:30: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:F9:87:FD:36:7D:00:1F:9F:6E:FF:F6:26:77:91:BF:A5:69:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67fc526d-96ab-39fa-a91c-b8e7258eb73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f0:e3:fe:08:b6:26:10:b0:96:6a:9f:95:b5:58:1a:21:43: 4e:cf:eb:e9:af:88:d0:c1:a2:25:97:61:0e:24:5d:f5:53:31: 66:f9:27:15:fa:12:0d:5d:51:37:f8:c7:a1:13:1c:c9:5f:6f: a4:04:21:68:a1:9d:5f:a8:87:7d:23:f9:5e:73:95:33:9e:83: 3b:a3:b5:d6:87:ed:ba:12:65:95:e5:37:9b:22:40:73:37:32: 20:62:07:26:d7:3e:98:1b:92:9b:43:c6:be:2b:72:13:fb:f1: 59:26:8d:d1:8c:24:28:e2:24:49:62:d3:5e:a2:d5:bc:d1:01: 25:08:0c:a8:7d:9f:0f:f7:05:ea:10:7b:45:27:69:bb:89:5f: d7:fd:79:b1:3d:f2:e2:ec:e1:4f:e5:af:2e:7d:14:06:61:b3: b0:06:54:ff:be:cc:b1:50:58:9b:0b:d8:81:e3:f8:28:0d:2f: 84:e9:2f:fe:18:1e:ff:d0:35:7f:04:67:18:60:7f:07:d2:07: 6c:ea:d0:59:89:1f:d0:29:77:97:21:8f:a7:03:14:43:5b:da: c6:f9:e7:dc:af:85:2d:97:a5:2a:a4:a7:c9:a3:7d:25:a5:82: 47:c5:d4:32:3d:2e:1e:60:a6:72:8b:49:e2:66:c3:ba:3d:40: 99:fd:fb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqM7QPtLpgaiYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2NhNGE5ZmYtZWQ0ZS00MTQyLWE4Y2QtMWYyNzI3ODgxZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNI2HV2thcMyHLfURunZCZOpsc6yWlrgMgKr 0wrRguqe8gcNxqtA6Vo4kckg3fwKF0ocXusaR8ov7jL4hIMP5Nj1mX295M+DhoHn KwVr+yEwFuSqXlcthYCrxgxC+gNOdz9bTcADuIXj2I4G8DvelGct42woBay3FX3u DyvB4E/ZXAyzpmiDb+Umcd7iICwZnBh5za0HlCDhYBDGZ3PgWXNsJF1WAHVZuIPN tMiJvdURO+/Bhk4CLRo6VZzxOZDMG89RFD87DRpo2MrMoGqlLto7PK8CKCGE6yJO pP17hJA42CSGMjkmJcvMiXKHrorIA1jysXnn2D3KeoTX0jBBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMb+Yf9Nn0AH59u//Ymd5G/pWnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjdmYzUyNmQtOTZhYi0z OWZhLWE5MWMtYjhlNzI1OGViNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/w4/4ItiYQsJZqn5W1WBohQ07P6+mviNDBoiWXYQ4kXfVTMWb5JxX6 Eg1dUTf4x6ETHMlfb6QEIWihnV+oh30j+V5zlTOegzujtdaH7boSZZXlN5siQHM3 MiBiBybXPpgbkptDxr4rchP78VkmjdGMJCjiJEli016i1bzRASUIDKh9nw/3BeoQ e0UnabuJX9f9ebE98uLs4U/lry59FAZhs7AGVP++zLFQWJsL2IHj+CgNL4TpL/4Y Hv/QNX8EZxhgfwfSB2zq0FmJH9Apd5chj6cDFENb2sb559yvhS2XpSqkp8mjfSWl gkfF1DI9Lh5gpnKLSeJmw7o9QJn9+1o= -----END CERTIFICATE-----Generated at Mon Mar 2 04:12:01 2026 by rpki-client