$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa File: 68aa435a-aee0-3e3b-87f0-015273b56522.roa (raw, json) Hash identifier: s92Je5QiFEXHu2DjDYuj1wsNDPlj/n912WWawTy1rsM= Subject key identifier: FC:24:04:CA:C9:7C:94:6C:CF:65:49:18:31:1B:27:1F:CD:8C:D1:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C48CB8E2A129B1D02DA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.188.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c4:8c:b8:e2:a1:29:b1:d0:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5455f8e2-b87f-4fd7-ae8e-8a3e120dab0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:91:ca:78:89:c8:f6:ae:8b:72:5f:9a:fc: 80:f4:dd:25:f1:92:f5:b7:a7:d3:5c:1d:6d:17:20: 4b:34:bf:72:19:bb:ba:64:c0:bb:d5:b2:47:04:6c: 58:19:75:9d:19:19:67:8a:9f:82:92:e8:a4:48:a3: 55:d2:97:7a:cc:26:c2:2f:62:aa:a4:8a:a8:83:26: d6:1d:e0:e1:5a:e4:e2:c2:85:9d:d3:12:e5:75:89: 0a:78:7b:74:36:6f:e8:d6:3d:79:45:6c:61:d9:ea: a8:6d:47:f8:28:36:75:be:b4:d1:d2:8e:ad:94:cb: 06:1c:71:47:3c:ba:8f:09:c5:eb:16:c6:ef:43:6f: dc:1b:e1:91:da:b8:52:7a:cb:2a:45:83:9b:4b:2a: ac:14:68:d8:96:6d:b1:ae:b6:bb:7e:86:a8:84:41: 57:e7:e6:f9:cf:57:3d:ef:5c:ad:0c:e6:b4:8d:9b: 7e:e2:7a:87:19:38:5b:d8:e2:43:5a:d3:de:32:4d: b3:35:56:2d:b9:18:09:29:7f:b2:60:8b:e8:51:db: 22:e9:df:9c:6e:bc:73:cf:bb:b7:14:c5:32:a6:6f: ca:d6:cb:4c:c4:32:29:27:ac:4c:37:62:4b:d0:e0: c2:a3:26:d5:92:ba:a0:d7:6e:26:9c:17:80:a9:92: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:24:04:CA:C9:7C:94:6C:CF:65:49:18:31:1B:27:1F:CD:8C:D1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68aa435a-aee0-3e3b-87f0-015273b56522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b5:7f:0f:78:d5:54:e4:6a:c9:d7:54:8a:02:ab:b9:df:6d: 4f:7e:c2:3b:30:75:c8:44:7f:88:96:de:79:be:64:14:ca:26: 5e:c8:8f:b4:70:95:b2:45:40:48:1f:cc:0a:bc:bd:b8:ad:9d: bb:b7:d1:03:b4:89:48:22:42:dd:56:34:55:64:b4:2a:22:c3: 99:61:1e:8f:1b:64:11:9e:80:55:b0:eb:38:2f:73:6d:83:18: 09:22:7f:63:16:98:c4:ec:c8:62:21:e4:e8:ad:f8:00:a6:86: b5:f1:6c:1c:50:e2:eb:92:69:02:15:e9:1e:e9:69:ba:b8:a6: 22:fe:e2:0c:ed:52:74:fc:6f:fe:a4:c8:5d:a6:17:ae:48:f5: 9c:7a:01:af:3d:f6:65:2e:37:76:3b:ff:42:ef:93:5b:1a:ef: bd:98:d0:f3:ba:0b:44:8d:01:b8:c1:45:9d:3b:c8:61:6f:09: b4:ff:90:18:1c:69:ca:d8:17:65:21:18:b8:83:d3:0c:c8:fb: 94:ae:8d:96:e2:b4:f1:d6:c3:3e:e8:3f:d1:c2:8e:d5:08:5a: f5:7e:35:1a:4b:03:ca:2c:f6:fb:8d:8a:fa:37:0b:9f:3d:71: 2b:0f:c3:71:43:a5:e8:03:20:13:e8:4e:1d:9d:c6:8e:17:2b: 82:1b:94:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMSMuOKhKbHQLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTQ1NWY4ZTItYjg3Zi00ZmQ3LWFlOGUtOGEzZTEyMGRhYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD2RyniJyPaui3JfmvyA9N0l8ZL1t6fTXB1t FyBLNL9yGbu6ZMC71bJHBGxYGXWdGRlnip+CkuikSKNV0pd6zCbCL2KqpIqogybW HeDhWuTiwoWd0xLldYkKeHt0Nm/o1j15RWxh2eqobUf4KDZ1vrTR0o6tlMsGHHFH PLqPCcXrFsbvQ2/cG+GR2rhSessqRYObSyqsFGjYlm2xrra7foaohEFX5+b5z1c9 71ytDOa0jZt+4nqHGThb2OJDWtPeMk2zNVYtuRgJKX+yYIvoUdsi6d+cbrxzz7u3 FMUypm/K1stMxDIpJ6xMN2JL0ODCoybVkrqg124mnBeAqZIxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwkBMrJfJRsz2VJGDEbJx/NjNGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhhYTQzNWEtYWVlMC0z ZTNiLTg3ZjAtMDE1MjczYjU2NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm1fw941VTkasnXVIoCq7nfbU9+wjswdchEf4iW3nm+ZBTKJl7Ij7Rw lbJFQEgfzAq8vbitnbu30QO0iUgiQt1WNFVktCoiw5lhHo8bZBGegFWw6zgvc22D GAkif2MWmMTsyGIh5Oit+ACmhrXxbBxQ4uuSaQIV6R7pabq4piL+4gztUnT8b/6k yF2mF65I9Zx6Aa899mUuN3Y7/0Lvk1sa772Y0PO6C0SNAbjBRZ07yGFvCbT/kBgc acrYF2UhGLiD0wzI+5SujZbitPHWwz7oP9HCjtUIWvV+NRpLA8os9vuNivo3C589 cSsPw3FDpegDIBPoTh2dxo4XK4IblG4= -----END CERTIFICATE-----Generated at Sun Mar 1 18:48:07 2026 by rpki-client