$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa File: 88fd6fa5-3dff-336b-819d-30b2f3025208.roa (raw, json) Hash identifier: fCnpnJeOSkklpLAjcMz7fuMXYmC43qzuY5gTPCZm5ak= Subject key identifier: 2E:34:85:7C:DA:86:C3:1B:2C:B0:40:12:B7:68:BC:0F:D6:84:50:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57B13C878899F9D0D6FA20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.81.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:b1:3c:87:88:99:f9:d0:d6:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=472eb8bf-0938-417d-801c-2dac9c8cdccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:90:22:47:be:ca:84:a0:b0:eb:81:2e:08: 57:5e:3f:98:18:18:5d:9f:a6:87:7c:48:7e:a6:86: 7a:4b:8d:8f:d8:2a:cf:cf:dd:d1:f9:4e:82:21:7d: 69:1f:5f:d5:07:3a:6c:19:56:c4:f3:bc:2f:fb:86: 71:d9:a5:9b:48:ad:21:80:37:6e:c1:5a:65:81:67: e9:d5:10:94:74:ec:5e:98:19:0c:1d:bb:a0:f7:48: d3:c3:cc:1d:88:68:bc:5e:d7:8d:f1:94:ba:b2:36: 01:85:02:05:b3:8b:db:2a:25:ca:d2:52:91:44:c3: f9:2d:eb:b2:97:d3:27:ee:64:6e:80:27:c1:2c:09: 74:fa:63:ee:35:80:c7:71:f0:02:70:e6:9b:8c:99: 08:cc:9a:58:e4:59:65:01:d4:d7:3a:a9:48:39:d9: 35:ea:03:e4:cf:e4:be:d5:8f:f5:59:99:e1:9d:b0: 86:a6:7b:6d:66:0e:57:10:29:44:61:82:90:d7:7f: 34:f6:a2:07:3b:ba:10:97:36:56:63:fd:5f:54:2e: a3:9e:d1:47:39:8f:ac:7a:f0:ef:35:44:92:12:c9: 1d:67:7a:d5:b0:14:fd:08:80:1b:21:e4:63:89:74: d2:fa:91:68:58:a5:eb:1b:1c:17:7d:57:42:57:69: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:34:85:7C:DA:86:C3:1B:2C:B0:40:12:B7:68:BC:0F:D6:84:50:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88fd6fa5-3dff-336b-819d-30b2f3025208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:02:4f:21:b6:d0:8b:2a:f5:6b:b3:07:f6:2a:b4:99:23:f1: ff:32:23:7d:69:d0:37:53:16:64:6d:aa:76:88:5a:98:9a:e5: 4d:9a:8e:41:39:41:cc:16:33:25:67:3e:f5:52:e6:7f:c6:c4: 36:bd:7d:4e:92:5d:d1:8f:90:24:a6:dd:db:62:e4:ff:7f:67: c1:df:14:a7:20:df:1e:67:11:b0:dd:b0:77:4c:be:57:a7:03: 6e:54:e4:3d:b2:48:a7:d7:e3:cd:3e:18:56:58:3a:b8:76:98: 5d:48:85:e2:32:dc:12:e8:93:dc:7e:4a:bd:27:4f:82:41:a4: 47:bd:60:75:3d:86:9d:32:05:2c:76:2e:55:a5:eb:42:30:da: 71:d5:1a:4a:7b:7c:49:38:62:05:a5:0d:50:d5:bd:62:ae:87: fa:6d:34:16:42:a8:ed:6f:eb:26:0e:78:fa:ae:15:cb:77:03: da:7d:87:4b:1c:7b:3f:39:bd:a1:88:c8:79:89:7b:5e:e9:07: 9a:1f:b4:6c:c5:c3:bf:b2:11:66:cf:67:b5:fd:dc:c7:a5:6b: f0:8e:b3:db:12:cd:86:6f:0f:e3:ed:f3:fd:6b:05:3b:ac:bf: a1:64:52:a3:fd:e7:fe:ca:7a:7e:20:d9:8b:dc:29:d9:d5:d1: 11:c5:45:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV7E8h4iZ+dDW+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDcyZWI4YmYtMDkzOC00MTdkLTgwMWMtMmRhYzljOGNkY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA6QIke+yoSgsOuBLghXXj+YGBhdn6aHfEh+ poZ6S42P2CrPz93R+U6CIX1pH1/VBzpsGVbE87wv+4Zx2aWbSK0hgDduwVplgWfp 1RCUdOxemBkMHbug90jTw8wdiGi8XteN8ZS6sjYBhQIFs4vbKiXK0lKRRMP5Leuy l9Mn7mRugCfBLAl0+mPuNYDHcfACcOabjJkIzJpY5FllAdTXOqlIOdk16gPkz+S+ 1Y/1WZnhnbCGpnttZg5XEClEYYKQ13809qIHO7oQlzZWY/1fVC6jntFHOY+sevDv NUSSEskdZ3rVsBT9CIAbIeRjiXTS+pFoWKXrGxwXfVdCV2l07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC40hXzahsMbLLBAErdovA/WhFAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhmZDZmYTUtM2RmZi0z MzZiLTgxOWQtMzBiMmYzMDI1MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcCTyG20Isq9WuzB/YqtJkj8f8yI31p0DdTFmRtqnaIWpia5U2ajkE5 QcwWMyVnPvVS5n/GxDa9fU6SXdGPkCSm3dti5P9/Z8HfFKcg3x5nEbDdsHdMvlen A25U5D2ySKfX480+GFZYOrh2mF1IheIy3BLok9x+Sr0nT4JBpEe9YHU9hp0yBSx2 LlWl60Iw2nHVGkp7fEk4YgWlDVDVvWKuh/ptNBZCqO1v6yYOePquFct3A9p9h0sc ez85vaGIyHmJe17pB5oftGzFw7+yEWbPZ7X93Mela/COs9sSzYZvD+Pt8/1rBTus v6FkUqP95/7Ken4g2YvcKdnV0RHFRQM= -----END CERTIFICATE-----Generated at Sun Mar 1 18:42:14 2026 by rpki-client