$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aa82f42-a344-3525-a9a2-59e739804f13.roa File: 8aa82f42-a344-3525-a9a2-59e739804f13.roa (raw, json) Hash identifier: Q2cZEXyKnF9IZmMOondchV42fY9O7tp+KssYZG8Nbao= Subject key identifier: 3A:79:84:DB:58:6E:42:AB:10:19:3A:17:74:83:D2:C8:9C:9C:03:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA7CB7A652ECDDA9C5480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aa82f42-a344-3525-a9a2-59e739804f13.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.81.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a7:cb:7a:65:2e:cd:da:9c:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=cd22cb18-db90-4b2d-86b7-66023480e051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:19:69:f9:56:70:46:9d:57:73:47:63:39: 1a:de:c7:b1:04:90:d3:fa:94:58:3c:3c:76:1c:3d: aa:85:0f:72:ea:79:e6:c3:ae:5d:19:f5:61:43:ca: 97:e1:35:c5:eb:19:c5:1d:6e:16:e1:68:67:71:88: c3:ff:73:0f:8c:41:5a:36:0d:02:8a:6d:71:70:e2: 31:77:91:27:67:ed:43:0b:d1:36:be:42:f8:eb:71: af:b7:ee:8d:cf:00:ff:1a:d9:cd:45:c8:cb:2c:8e: 9b:ac:42:e1:a3:c8:ac:83:41:fe:c0:e1:33:23:ed: e2:c8:3d:a9:7f:65:35:bf:11:85:52:66:cc:6c:7e: 19:59:b9:f7:c0:44:60:ac:36:e8:06:9b:4c:fb:df: 51:83:15:e9:da:18:a5:d2:50:68:51:35:3c:b1:9d: ea:b7:51:4c:00:48:08:1b:86:19:e1:c9:e4:ea:e8: 87:c4:3e:a9:f6:bc:60:f5:ef:ac:b3:57:84:34:16: 02:e2:8f:61:db:0c:58:8e:31:33:7d:0c:8a:ab:51: a0:0e:61:d8:24:0c:5f:c0:c0:90:32:75:d3:4c:5b: f8:33:89:c5:42:24:77:ce:c8:d6:f6:ba:2c:c2:40: b9:ba:79:24:64:10:3d:fe:18:d1:36:3a:08:6b:d6: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:84:DB:58:6E:42:AB:10:19:3A:17:74:83:D2:C8:9C:9C:03:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aa82f42-a344-3525-a9a2-59e739804f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.81.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:24:fc:21:4c:a3:85:e5:cc:45:f2:ff:2a:96:4b:88:43:c2: 7c:02:34:1f:19:bf:da:e1:ab:79:7e:d8:57:24:bc:13:a9:bd: 44:ec:f3:68:92:46:fa:7a:b8:e3:18:e1:a3:aa:50:27:79:93: 07:99:03:12:0a:11:c5:24:2e:d9:ef:4e:e2:bc:fa:03:f2:50: a7:17:9c:9b:d3:69:b8:dd:fe:1b:4a:6d:95:55:c5:8d:63:74: 23:5c:f4:e3:74:43:11:17:b1:92:b9:b0:d2:f5:e4:a3:66:e1: a3:61:00:47:48:48:27:00:fe:6e:c2:ef:97:29:b4:a7:03:64: 25:b2:33:7b:c9:d1:79:3d:c4:ed:5b:99:6d:fb:78:07:4e:a2: 13:46:d4:7f:71:af:e4:ae:ef:ac:67:7a:95:23:29:07:4c:5c: 28:62:65:a1:3f:74:70:4b:e5:27:26:4b:1f:15:4b:90:5a:25: 64:e3:89:0d:c7:f6:97:93:92:f5:0a:a3:a5:0f:6c:87:f2:c6: 63:e6:fb:23:ad:05:fc:a3:ad:bb:43:f6:e5:36:10:3a:bd:44: 91:9b:97:b2:4e:1a:d1:f1:cf:52:d4:f3:77:a6:fe:e5:df:71: 00:0f:ba:42:0d:5a:ea:b7:ce:5a:15:6c:e2:df:e3:8c:2d:e5: 5c:cd:79:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqfLemUuzdqcVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2QyMmNiMTgtZGI5MC00YjJkLTg2YjctNjYwMjM0ODBlMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuwZaflWcEadV3NHYzka3sexBJDT+pRYPDx2 HD2qhQ9y6nnmw65dGfVhQ8qX4TXF6xnFHW4W4WhncYjD/3MPjEFaNg0Cim1xcOIx d5EnZ+1DC9E2vkL463Gvt+6NzwD/GtnNRcjLLI6brELho8isg0H+wOEzI+3iyD2p f2U1vxGFUmbMbH4ZWbn3wERgrDboBptM+99RgxXp2hil0lBoUTU8sZ3qt1FMAEgI G4YZ4cnk6uiHxD6p9rxg9e+ss1eENBYC4o9h2wxYjjEzfQyKq1GgDmHYJAxfwMCQ MnXTTFv4M4nFQiR3zsjW9roswkC5unkkZBA9/hjRNjoIa9ZMfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp5hNtYbkKrEBk6F3SD0sicnAMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFhODJmNDItYTM0NC0z NTI1LWE5YTItNTllNzM5ODA0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQk/CFMo4XlzEXy/yqWS4hDwnwCNB8Zv9rhq3l+2FckvBOpvUTs82iS Rvp6uOMY4aOqUCd5kweZAxIKEcUkLtnvTuK8+gPyUKcXnJvTabjd/htKbZVVxY1j dCNc9ON0QxEXsZK5sNL15KNm4aNhAEdISCcA/m7C75cptKcDZCWyM3vJ0Xk9xO1b mW37eAdOohNG1H9xr+Su76xnepUjKQdMXChiZaE/dHBL5ScmSx8VS5BaJWTjiQ3H 9peTkvUKo6UPbIfyxmPm+yOtBfyjrbtD9uU2EDq9RJGbl7JOGtHxz1LU83em/uXf cQAPukINWuq3zloVbOLf44wt5VzNeRg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:18 2026 by rpki-client