$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bd4bdf-8c4b-3eef-8a98-9b25b2e600fc.roa File: 68bd4bdf-8c4b-3eef-8a98-9b25b2e600fc.roa (raw, json) Hash identifier: x3lwnLwbFokQTEj2ZrMbSlDe+SWHQvmto9Tps/DKbNQ= Subject key identifier: E3:99:C9:B3:8C:24:2F:64:E6:91:7B:FA:DB:6B:2E:4E:05:B9:FE:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D4544BB6AAC75C9984980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bd4bdf-8c4b-3eef-8a98-9b25b2e600fc.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.161.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:45:44:bb:6a:ac:75:c9:98:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=02841800-a954-4bd6-b9f4-de3a17ba97be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:a4:9f:25:13:75:c9:bb:d1:b3:18:9a:bc: 57:45:e1:06:f0:41:86:59:74:7a:e7:76:55:89:d7: e9:52:86:93:84:55:f3:6a:62:34:db:9d:26:ba:88: 00:01:f9:4b:bd:0b:8b:c3:34:e6:9e:7b:06:16:27: fa:68:ec:5a:bc:2f:c9:bb:90:4c:42:86:80:07:ef: 38:c1:4d:22:f6:19:55:c2:ab:79:17:90:4a:ff:a0: a3:f3:e9:7d:fa:07:cc:45:d5:4d:13:9b:68:d8:71: ef:0b:3c:85:26:39:73:a3:6f:7f:d1:e8:df:17:51: dd:84:a7:c5:93:1e:da:3b:6c:ab:a3:97:7d:aa:62: 09:93:45:30:0f:02:69:e2:be:b9:78:43:b0:20:42: e3:bb:37:8b:bd:29:6c:08:49:72:c8:f3:e3:8a:af: 44:eb:1e:ac:44:7b:5b:83:15:a6:0d:8e:3c:18:74: 01:40:76:36:40:f0:26:40:a0:03:eb:25:8c:b6:f4: b6:33:87:d9:98:fa:46:a8:61:71:ef:10:0f:7a:04: da:40:a9:27:fb:36:d9:6e:9e:ac:cb:39:7a:df:26: c6:86:29:dd:17:02:97:8f:4a:81:da:2c:97:5c:77: cf:1f:f1:bb:e8:7d:34:6b:a9:4b:cf:27:86:be:0b: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:C9:B3:8C:24:2F:64:E6:91:7B:FA:DB:6B:2E:4E:05:B9:FE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bd4bdf-8c4b-3eef-8a98-9b25b2e600fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ac:f9:ca:27:27:b9:2c:31:9f:2a:88:e8:0c:ea:26:62:e8: 68:b4:cc:80:56:8e:7c:f9:d3:ca:ba:0c:3c:e6:e5:76:6e:f8: 8a:ef:39:25:18:c5:ba:b4:bf:6e:77:b5:12:02:51:da:1f:89: f0:d3:db:e1:b9:58:f7:f0:23:4f:5c:3a:44:b8:91:2e:61:56: 9d:2a:cc:a5:37:d1:e2:df:8d:e2:2d:56:a3:3f:e4:eb:ae:e4: 74:c6:a1:fe:1f:08:7f:34:75:28:f1:3d:5e:f9:7e:2f:d6:95: a6:f1:79:5d:89:91:a0:fa:74:b3:db:d5:b3:6c:85:a9:9d:1d: ac:ad:de:f9:f8:21:d5:f9:39:4a:38:f3:38:96:08:9e:6f:fe: ba:9e:38:05:ba:eb:5e:54:91:77:ec:c0:6e:39:d2:bf:f5:d9: bd:bf:42:08:c1:56:67:64:4a:ab:f1:b3:fd:1e:0c:a4:6c:3e: 99:11:fa:48:2b:be:1a:03:02:35:55:77:c9:68:4e:57:0b:97: ff:98:bd:41:5b:cd:62:fa:01:56:6b:34:99:1d:d3:7c:dd:bd: e8:b9:a2:a7:5e:2a:fa:55:f6:f7:9c:88:ad:4d:93:7e:0e:56: 2f:b4:32:5f:96:6b:ba:b9:ca:04:b3:30:33:2e:c9:bf:00:38: 71:90:77:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXUVEu2qsdcmYSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDI4NDE4MDAtYTk1NC00YmQ2LWI5ZjQtZGUzYTE3YmE5N2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaOknyUTdcm70bMYmrxXReEG8EGGWXR653ZV idfpUoaThFXzamI0250muogAAflLvQuLwzTmnnsGFif6aOxavC/Ju5BMQoaAB+84 wU0i9hlVwqt5F5BK/6Cj8+l9+gfMRdVNE5to2HHvCzyFJjlzo29/0ejfF1HdhKfF kx7aO2yro5d9qmIJk0UwDwJp4r65eEOwIELjuzeLvSlsCElyyPPjiq9E6x6sRHtb gxWmDY48GHQBQHY2QPAmQKAD6yWMtvS2M4fZmPpGqGFx7xAPegTaQKkn+zbZbp6s yzl63ybGhindFwKXj0qB2iyXXHfPH/G76H00a6lLzyeGvgsjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOZybOMJC9k5pF7+ttrLk4Fuf4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhiZDRiZGYtOGM0Yi0z ZWVmLThhOTgtOWIyNWIyZTYwMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6EsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFis+conJ7ksMZ8qiOgM6iZi6Gi0zIBWjnz508q6DDzm5XZu+IrvOSUY xbq0v253tRICUdofifDT2+G5WPfwI09cOkS4kS5hVp0qzKU30eLfjeItVqM/5Ouu 5HTGof4fCH80dSjxPV75fi/WlabxeV2JkaD6dLPb1bNshamdHayt3vn4IdX5OUo4 8ziWCJ5v/rqeOAW6615UkXfswG450r/12b2/QgjBVmdkSqvxs/0eDKRsPpkR+kgr vhoDAjVVd8loTlcLl/+YvUFbzWL6AVZrNJkd03zdvei5oqdeKvpV9veciK1Nk34O Vi+0Ml+Wa7q5ygSzMDMuyb8AOHGQd7M= -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:00 2026 by rpki-client