$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85767a08-b480-39c6-8f4a-330bc773f207.roa File: 85767a08-b480-39c6-8f4a-330bc773f207.roa (raw, json) Hash identifier: dQe5cy+u75m/AF8SZz1VAhUfks4qzPtTqJoGgXDX+ZE= Subject key identifier: 62:F7:30:B3:98:A0:BD:8E:73:D5:6F:45:9B:48:FE:76:1B:B0:03:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B9023E53168AA97ED4080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85767a08-b480-39c6-8f4a-330bc773f207.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:90:23:e5:31:68:aa:97:ed:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2bedd5ae-c456-417d-8f85-34f1aaefbf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:e8:76:3a:db:0d:37:40:19:b6:d3:84:ed: c4:6d:58:cc:c4:bf:c6:45:7a:05:e0:55:b6:8b:72: 42:99:dc:ac:62:2c:1c:af:ac:86:c8:08:37:6b:88: c6:ff:08:31:30:9a:47:75:5f:85:39:a1:93:39:3f: a3:93:f5:c9:59:ee:94:1b:b7:a2:71:60:f9:6b:e9: e1:f3:61:ea:77:45:1b:d7:e7:78:26:71:1b:50:27: 60:90:50:65:f4:cb:c7:be:74:e9:56:b0:e3:af:dc: 56:4d:62:a3:ea:05:a5:ed:7b:dd:ff:fc:ca:45:7d: dc:5d:2b:b9:23:ef:eb:e4:68:04:bb:04:d9:e5:ce: fb:88:b1:12:00:34:d8:28:4c:a1:e6:2e:3a:4f:de: 50:9a:b3:52:1e:b5:6c:bb:ba:01:4c:a5:6e:aa:7d: 4f:54:27:91:1d:c8:d5:73:bb:0e:56:b6:61:54:7a: b5:b5:4b:8b:1e:13:67:93:5b:be:4f:2e:fd:aa:88: 9a:59:9b:34:1f:20:81:7f:ad:fe:1c:33:ae:0a:f8: f4:83:fa:3a:30:34:26:17:85:5d:e4:a9:93:2a:47: 25:8c:9d:9d:72:6c:b0:d1:ec:94:81:2a:09:2c:d5: 04:46:2d:f7:6b:34:81:ee:49:aa:b1:f7:1c:6b:e5: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F7:30:B3:98:A0:BD:8E:73:D5:6F:45:9B:48:FE:76:1B:B0:03:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85767a08-b480-39c6-8f4a-330bc773f207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:92:99:6a:30:38:30:85:9f:98:f7:4b:ed:97:d8:84:97:85: d6:c8:02:3c:1a:7c:81:47:c9:8b:bb:ca:a9:0f:28:79:08:f5: 98:f2:ca:c6:fe:7a:5c:43:6e:7f:32:85:0d:5d:dd:ea:88:d0: 0d:bf:5e:65:b6:f6:2c:b6:a5:c7:0b:41:3e:bd:77:5e:19:62: dc:85:25:86:bf:bc:98:4e:ad:ce:fb:7d:e3:95:d3:eb:b4:7f: 3f:bf:96:5f:be:05:f7:fc:71:86:d1:74:5f:e6:15:cc:f2:e6: 8a:49:71:ae:bf:9f:f4:fe:a8:24:6e:c0:5c:c7:0b:24:26:97: 2e:9a:9d:5c:bb:b5:53:34:ea:ed:56:97:ce:cd:22:5f:26:fc: 2b:c7:48:61:bf:3c:75:52:49:b1:e2:cb:87:b0:64:c5:1e:10: 33:90:0a:5d:31:2b:b1:94:66:c2:2e:3e:fc:90:c2:eb:3b:4f: 39:64:7a:1c:e2:f3:f6:49:78:d4:f1:9b:a9:49:81:5b:9b:a8: 4e:e5:1d:85:5a:aa:80:cd:bb:4f:a1:54:6a:f2:06:43:18:46: 38:1f:b8:e4:46:16:5b:f4:7a:54:9b:1c:7e:68:bb:54:cc:5b: 72:83:f1:69:15:de:29:f8:7c:e2:c8:1a:d0:fd:94:ec:09:4e: a6:21:bd:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5Aj5TFoqpftQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmJlZGQ1YWUtYzQ1Ni00MTdkLThmODUtMzRmMWFhZWZiZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvfodjrbDTdAGbbThO3EbVjMxL/GRXoF4FW2 i3JCmdysYiwcr6yGyAg3a4jG/wgxMJpHdV+FOaGTOT+jk/XJWe6UG7eicWD5a+nh 82Hqd0Ub1+d4JnEbUCdgkFBl9MvHvnTpVrDjr9xWTWKj6gWl7Xvd//zKRX3cXSu5 I+/r5GgEuwTZ5c77iLESADTYKEyh5i46T95QmrNSHrVsu7oBTKVuqn1PVCeRHcjV c7sOVrZhVHq1tUuLHhNnk1u+Ty79qoiaWZs0HyCBf63+HDOuCvj0g/o6MDQmF4Vd 5KmTKkcljJ2dcmyw0eyUgSoJLNUERi33azSB7kmqsfcca+XBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL3MLOYoL2Oc9VvRZtI/nYbsAMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU3NjdhMDgtYjQ4MC0z OWM2LThmNGEtMzMwYmM3NzNmMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGSmWowODCFn5j3S+2X2ISXhdbIAjwafIFHyYu7yqkPKHkI9Zjyysb+ elxDbn8yhQ1d3eqI0A2/XmW29iy2pccLQT69d14ZYtyFJYa/vJhOrc77feOV0+u0 fz+/ll++Bff8cYbRdF/mFczy5opJca6/n/T+qCRuwFzHCyQmly6anVy7tVM06u1W l87NIl8m/CvHSGG/PHVSSbHiy4ewZMUeEDOQCl0xK7GUZsIuPvyQwus7Tzlkehzi 8/ZJeNTxm6lJgVubqE7lHYVaqoDNu0+hVGryBkMYRjgfuORGFlv0elSbHH5ou1TM W3KD8WkV3in4fOLIGtD9lOwJTqYhvSs= -----END CERTIFICATE-----Generated at Sun Mar 1 19:00:16 2026 by rpki-client