$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa File: 89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa (raw, json) Hash identifier: Q9DrcWLOPU2YzUWwRACsjJM00kVJC1AcNDvqjSTqxEs= Subject key identifier: 64:74:AA:40:53:2B:E1:14:B4:21:EE:AD:E1:B5:7D:2D:C0:CF:0E:40 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5ABA280AFCE3586F3D2900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 69.136.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:ba:28:0a:fc:e3:58:6f:3d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c706e23c-5321-4881-8aad-5f6180dff05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:eb:44:d7:f5:cd:fd:f5:69:13:d7:f0:f5: bc:d9:4a:64:82:d5:b7:cf:7d:5e:ab:db:6d:18:b4: 61:03:64:b3:fe:d2:28:9b:2f:d6:f6:4f:66:e0:f9: 04:ac:fd:99:1b:ee:9b:14:b1:c4:d7:d7:8d:3a:c6: 58:a7:a0:9c:df:dc:5c:31:30:23:f9:87:0f:0a:63: 60:2f:06:16:1b:15:69:0d:b1:b7:50:01:7b:8a:da: 24:fb:20:52:a8:45:b2:46:08:04:84:23:e4:4e:d2: 6a:a8:63:28:80:71:aa:98:61:4c:a3:21:1d:8c:33: 02:54:62:88:d0:60:dd:10:ed:6d:e6:3d:f1:88:89: 38:88:b4:4b:88:fe:5f:13:d0:8a:f7:df:e0:7a:a2: 83:dd:c0:23:8f:db:5c:cb:a1:ce:d9:c9:bc:b2:af: e9:75:16:ff:de:3a:d6:15:fd:f1:88:f3:c1:8b:4e: 37:19:0e:e6:79:fa:a4:22:56:81:0c:ac:1c:bd:57: 6b:09:75:d4:87:40:b1:4d:33:fe:e1:b3:08:c3:0a: ab:8a:b3:76:2b:8f:90:00:cb:7e:22:91:65:87:00: 68:c9:87:84:3d:e6:a7:7f:de:a2:d3:7a:b6:b1:0e: 5a:06:0f:20:03:96:c0:65:d3:f4:15:80:d0:69:e6: 95:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:AA:40:53:2B:E1:14:B4:21:EE:AD:E1:B5:7D:2D:C0:CF:0E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.136.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:86:9a:4d:4b:77:0e:5b:cf:32:36:e4:31:23:ba:23:db:c5: 14:6a:f9:cc:fd:a3:6f:67:18:57:52:a6:7c:1e:84:38:d5:eb: 0f:52:56:f9:fd:9f:8f:39:5f:21:28:f5:50:fc:aa:27:84:a6: 3b:ac:be:e7:0b:08:c4:a1:4f:7a:f9:17:5f:4d:aa:4c:de:bd: 6b:7b:58:47:d8:06:0c:f3:47:c6:e2:b1:d1:8a:d3:c7:92:2d: f9:62:1a:87:3d:94:ba:39:62:86:68:16:72:25:cc:ac:64:87: 24:57:d2:97:30:ff:6f:67:9c:f9:cd:13:ef:b7:1a:65:8f:3e: a5:57:fe:fe:fd:01:9b:d7:2c:5a:31:57:62:41:f0:59:af:fe: 69:c1:82:37:7f:f2:52:77:ae:85:0c:96:f8:9f:c5:43:d5:8c: f2:e6:d6:f9:b3:39:24:c5:ab:9d:ba:16:03:42:86:6d:e9:f5: 08:36:96:40:db:bc:69:86:3d:f3:8b:7d:d5:ab:75:d4:47:85: 8e:b7:0e:75:47:e8:8a:a7:f2:4f:a6:bb:da:22:3b:ac:45:cc: 7e:f9:ab:ef:18:ae:c6:2c:bf:6d:b2:e3:91:9c:6e:c6:b4:80: 27:a1:b4:74:d2:5d:38:56:a1:b6:c6:c7:0e:86:2b:40:64:0e: f2:16:dd:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWrooCvzjWG89KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzcwNmUyM2MtNTMyMS00ODgxLThhYWQtNWY2MTgwZGZmMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjrRNf1zf31aRPX8PW82UpkgtW3z31eq9tt GLRhA2Sz/tIomy/W9k9m4PkErP2ZG+6bFLHE19eNOsZYp6Cc39xcMTAj+YcPCmNg LwYWGxVpDbG3UAF7itok+yBSqEWyRggEhCPkTtJqqGMogHGqmGFMoyEdjDMCVGKI 0GDdEO1t5j3xiIk4iLRLiP5fE9CK99/geqKD3cAjj9tcy6HO2cm8sq/pdRb/3jrW Ff3xiPPBi043GQ7mefqkIlaBDKwcvVdrCXXUh0CxTTP+4bMIwwqrirN2K4+QAMt+ IpFlhwBoyYeEPeanf96i03q2sQ5aBg8gA5bAZdP0FYDQaeaVCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR0qkBTK+EUtCHureG1fS3Azw5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODljMDUzM2UtMTJkMC0z Mjk4LWFhOGMtM2ZkNTdlMGQyYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRYhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGGmk1Ldw5bzzI25DEjuiPbxRRq+cz9o29nGFdSpnwehDjV6w9SVvn9 n485XyEo9VD8qieEpjusvucLCMShT3r5F19NqkzevWt7WEfYBgzzR8bisdGK08eS LfliGoc9lLo5YoZoFnIlzKxkhyRX0pcw/29nnPnNE++3GmWPPqVX/v79AZvXLFox V2JB8Fmv/mnBgjd/8lJ3roUMlvifxUPVjPLm1vmzOSTFq526FgNChm3p9Qg2lkDb vGmGPfOLfdWrddRHhY63DnVH6Iqn8k+mu9oiO6xFzH75q+8YrsYsv22y45Gcbsa0 gCehtHTSXThWobbGxw6GK0BkDvIW3Tw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:10 2026 by rpki-client