$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa File: 9608543c-2dcc-3e34-907d-f77a68cd382f.roa (raw, json) Hash identifier: fSSpFPeo9+95vtQ0Mc/DusbBX1vxD4tdCwXxEe6eflI= Subject key identifier: 3E:4B:50:78:D1:17:A3:04:A4:2B:3E:2D:2B:C7:48:40:F7:55:BC:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE93BEE92DEB5A07CE62380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 68.54.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:3b:ee:92:de:b5:a0:7c:e6:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=a39e0b66-a4a1-4daa-98f7-cf56f45c0de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:50:b9:f6:fa:46:ea:df:89:ea:d8:3a:95: 26:41:b0:a9:f9:ab:ae:58:17:35:1f:24:e0:e3:fb: 20:c5:90:43:e9:62:21:b1:9f:e8:76:f9:d5:28:64: 64:d3:3e:5e:c4:23:53:66:a4:ed:3e:c4:25:69:f4: 9b:bd:84:8b:15:2e:dd:00:27:d2:4e:ef:db:0c:82: b3:0a:e5:3b:34:30:33:5e:34:02:52:50:d2:0a:43: 89:c7:43:8d:e1:8f:00:31:34:a8:59:56:66:ac:b1: 23:30:79:99:20:13:9d:2e:94:25:97:4a:87:06:4a: 5f:ba:84:2a:0e:f5:5b:33:45:ef:fb:b3:67:a5:88: 14:eb:54:e6:dd:49:5f:43:8e:02:77:1f:41:5c:57: 37:a8:65:7b:bc:a0:8b:cf:d9:4b:1b:3f:e9:52:61: dc:e9:42:dc:e9:a4:14:02:13:00:90:aa:f3:7e:38: 4c:4c:79:da:2b:9b:89:12:f0:78:0c:2e:59:c6:68: d6:85:44:d1:49:a8:d0:ae:9e:76:c4:bd:fe:a5:f7: cb:b3:dc:68:9b:da:54:f5:c8:3f:d0:60:af:e4:f6: 0d:12:99:bc:06:0f:c9:ab:9a:f1:e3:ca:14:e5:77: 70:82:80:85:ee:fa:1c:8f:de:b4:7b:f3:16:73:1a: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4B:50:78:D1:17:A3:04:A4:2B:3E:2D:2B:C7:48:40:F7:55:BC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9608543c-2dcc-3e34-907d-f77a68cd382f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ad:bc:53:df:10:e7:43:a8:e5:a5:f0:45:31:33:b2:d2:72: 26:ef:22:f4:3d:a0:96:6e:6c:8e:69:5b:f2:96:7b:a5:99:3e: ea:a8:22:7c:1d:b7:8e:7e:f6:2d:13:4e:0c:b9:10:09:02:2e: a6:19:0c:ac:bf:8c:e9:d2:31:db:21:cb:8c:1a:3a:2d:b5:d0: e3:39:f0:6c:4d:5c:8a:e2:20:1f:4e:6a:e4:75:11:99:63:4b: 53:82:93:7e:34:af:13:4f:19:c4:70:02:56:a7:8a:66:1e:73: 13:fe:bf:04:55:cd:fc:80:dc:a5:24:58:30:50:19:7a:10:5e: 1e:ae:2d:17:0c:83:64:eb:02:dd:3a:13:66:07:68:28:36:68: 41:f7:34:db:8a:53:a8:ef:94:47:be:b1:87:65:5c:23:de:7d: 3a:b1:80:0a:59:c0:99:87:a5:18:59:ed:d1:31:73:54:b3:ff: 72:38:b7:4f:3b:4f:90:0b:e4:14:ae:fe:a8:0b:98:8f:3f:72: e6:89:3f:3f:b5:cf:5d:1e:8f:f2:bf:cf:ba:e5:15:f9:f2:92: 92:e5:a6:af:6c:42:29:51:07:44:e1:7d:6b:55:94:11:a9:de: a3:67:e6:f4:38:1e:18:54:1a:d0:1c:76:27:c2:5f:e6:54:27: 47:15:c8:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96Tvukt61oHzmI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YTM5ZTBiNjYtYTRhMS00ZGFhLTk4ZjctY2Y1NmY0NWMwZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSJQufb6RurfierYOpUmQbCp+auuWBc1HyTg 4/sgxZBD6WIhsZ/odvnVKGRk0z5exCNTZqTtPsQlafSbvYSLFS7dACfSTu/bDIKz CuU7NDAzXjQCUlDSCkOJx0ON4Y8AMTSoWVZmrLEjMHmZIBOdLpQll0qHBkpfuoQq DvVbM0Xv+7NnpYgU61Tm3UlfQ44Cdx9BXFc3qGV7vKCLz9lLGz/pUmHc6ULc6aQU AhMAkKrzfjhMTHnaK5uJEvB4DC5ZxmjWhUTRSajQrp52xL3+pffLs9xom9pU9cg/ 0GCv5PYNEpm8Bg/Jq5rx48oU5XdwgoCF7vocj960e/MWcxo26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5LUHjRF6MEpCs+LSvHSED3VbzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTYwODU0M2MtMmRjYy0z ZTM0LTkwN2QtZjc3YTY4Y2QzODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDbPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMatvFPfEOdDqOWl8EUxM7LScibvIvQ9oJZubI5pW/KWe6WZPuqoInwd t45+9i0TTgy5EAkCLqYZDKy/jOnSMdshy4waOi210OM58GxNXIriIB9OauR1EZlj S1OCk340rxNPGcRwAlanimYecxP+vwRVzfyA3KUkWDBQGXoQXh6uLRcMg2TrAt06 E2YHaCg2aEH3NNuKU6jvlEe+sYdlXCPefTqxgApZwJmHpRhZ7dExc1Sz/3I4t087 T5AL5BSu/qgLmI8/cuaJPz+1z10ej/K/z7rlFfnykpLlpq9sQilRB0ThfWtVlBGp 3qNn5vQ4HhhUGtAcdifCX+ZUJ0cVyJk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:21 2026 by rpki-client