$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa File: 8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa (raw, json) Hash identifier: VAH3mZu8t5QPdbKxHVcr1cHe/WOUL6nwIY1yFaR+KeQ= Subject key identifier: A0:2A:D2:61:8E:8F:DA:EF:65:A1:BC:BD:7B:BC:BC:53:6D:42:0D:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9DD5B73F7901B9F27B6A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33662 IP address blocks: 68.85.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:dd:5b:73:f7:90:1b:9f:27:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=3896dd81-3d1f-4dd8-9d98-675c226a2021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:2c:8a:14:ab:28:2f:55:15:3a:fc:5c:4a: 58:8f:25:03:77:da:f8:48:bc:23:a5:16:37:7e:ea: 70:6f:7f:39:94:eb:c0:e8:55:39:44:13:48:cc:cd: d4:ce:92:ba:24:14:b6:92:72:93:ae:78:3c:f5:cd: 93:3c:fe:5e:25:b9:12:17:a4:a1:63:05:28:1f:02: c1:3b:83:ec:12:ee:a0:c4:83:4e:22:4b:55:26:bd: 60:e3:9c:48:61:1f:5c:7c:9e:57:f4:cc:57:fc:1f: 1b:c6:45:5a:de:3c:90:6d:9d:c7:6e:42:9e:f0:e6: 8d:34:26:d2:c6:ad:54:f6:b7:d6:49:68:cb:a8:a3: d1:4e:03:2c:5f:09:64:7b:91:ea:49:69:be:d0:dc: 72:b2:b8:1f:6e:5c:f3:fb:42:d4:b6:92:11:1f:66: 2a:f8:3f:07:75:e2:25:a2:d6:90:bd:da:f1:df:cc: b2:2d:25:7a:9f:b6:7c:f7:ee:aa:57:83:48:9b:c5: 13:3f:24:09:10:54:cc:bb:c7:f7:97:c5:87:c0:ad: 14:0f:d9:9e:c4:a4:ce:37:78:ee:7e:0a:c7:63:ae: bd:8a:fc:5d:f8:b3:26:3b:bd:44:a4:0d:ed:a5:10: bf:0e:46:ef:96:f0:d0:86:5d:e7:64:e6:af:28:8e: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2A:D2:61:8E:8F:DA:EF:65:A1:BC:BD:7B:BC:BC:53:6D:42:0D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ef2d7ae-cede-33cf-ab57-220ec6a9f94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e9:52:6d:e3:ab:53:85:ce:e8:fc:a6:4c:27:1a:b9:10:39: fc:27:70:5f:d3:4e:2a:13:c9:ed:93:ba:a8:80:2c:d4:ed:80: 27:65:74:c6:0f:68:81:7b:e9:64:50:7d:91:b5:5b:7b:15:b6: 6e:6b:4f:ec:04:9f:39:89:da:f3:2f:b4:c4:0a:0e:87:13:b3: 6f:f6:ac:2f:67:22:ec:d2:63:80:03:0a:2a:e1:79:ff:2c:1d: 62:d6:f9:b7:9c:9e:75:91:89:0f:96:06:f0:ab:de:75:04:1b: b1:2a:09:07:be:b8:25:e1:60:52:7d:c4:23:d3:12:0f:82:e1: ec:60:43:0d:9d:bc:48:c9:5e:1e:16:bc:08:f3:8f:93:ad:4d: e3:91:fa:16:b7:fe:e2:37:43:a8:58:52:38:ce:87:c6:e8:43: 1f:42:21:8b:dc:41:e4:d9:33:27:82:b1:92:e3:d2:41:36:6c: 1b:35:59:1b:05:60:47:42:6f:c0:a6:a4:58:fa:3a:7d:9a:7d: 75:91:8e:b5:db:d3:38:d6:f4:5d:c8:cb:b0:4a:37:e3:5e:84: 84:e8:82:09:82:ad:e6:dc:1f:87:c0:38:ac:64:65:2b:bb:68: 50:3d:2f:7e:06:e7:3d:d9:66:fd:ae:c4:a9:25:03:ba:29:f7: a7:03:0a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96d1bc/eQG58ntqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk Mzg5NmRkODEtM2QxZi00ZGQ4LTlkOTgtNjc1YzIyNmEyMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr8sihSrKC9VFTr8XEpYjyUDd9r4SLwjpRY3 fupwb385lOvA6FU5RBNIzM3UzpK6JBS2knKTrng89c2TPP5eJbkSF6ShYwUoHwLB O4PsEu6gxINOIktVJr1g45xIYR9cfJ5X9MxX/B8bxkVa3jyQbZ3HbkKe8OaNNCbS xq1U9rfWSWjLqKPRTgMsXwlke5HqSWm+0Nxysrgfblzz+0LUtpIRH2Yq+D8HdeIl otaQvdrx38yyLSV6n7Z89+6qV4NIm8UTPyQJEFTMu8f3l8WHwK0UD9mexKTON3ju fgrHY669ivxd+LMmO71EpA3tpRC/DkbvlvDQhl3nZOavKI4YaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAq0mGOj9rvZaG8vXu8vFNtQg3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGVmMmQ3YWUtY2VkZS0z M2NmLWFiNTctMjIwZWM2YTlmOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbpUm3jq1OFzuj8pkwnGrkQOfwncF/TTioTye2TuqiALNTtgCdldMYP aIF76WRQfZG1W3sVtm5rT+wEnzmJ2vMvtMQKDocTs2/2rC9nIuzSY4ADCirhef8s HWLW+becnnWRiQ+WBvCr3nUEG7EqCQe+uCXhYFJ9xCPTEg+C4exgQw2dvEjJXh4W vAjzj5OtTeOR+ha3/uI3Q6hYUjjOh8boQx9CIYvcQeTZMyeCsZLj0kE2bBs1WRsF YEdCb8CmpFj6On2afXWRjrXb0zjW9F3Iy7BKN+NehIToggmCrebcH4fAOKxkZSu7 aFA9L34G5z3ZZv2uxKklA7op96cDCiM= -----END CERTIFICATE-----Generated at Mon Mar 2 00:42:43 2026 by rpki-client