$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cde474-861e-3df6-ba06-45ec7bd17c4b.roa File: a0cde474-861e-3df6-ba06-45ec7bd17c4b.roa (raw, json) Hash identifier: UoeNzGBtkE1c5oeUgWt9gLOGLm2lofExUl8RDicd30k= Subject key identifier: 86:0E:D3:B2:A6:78:41:31:74:7F:9C:5F:6D:BA:22:B3:65:E6:A8:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B92534C21C215FCD05B08 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cde474-861e-3df6-ba06-45ec7bd17c4b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:92:53:4c:21:c2:15:fc:d0:5b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5a4d4d51-d8f9-4d7e-a4cb-c2f9e9b60017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:4e:15:e6:f6:54:8d:db:62:46:07:8d:e4: e0:fa:c3:da:5e:4f:61:76:c2:35:63:d5:c9:3d:03: 7c:97:64:76:df:98:d7:f2:63:05:42:7d:b2:6a:c6: 18:53:1c:25:26:6f:c2:2c:1b:c2:48:ee:26:af:cf: cb:2a:fd:a9:8f:fa:8c:7f:0f:a5:f7:4e:e9:8f:07: 65:cc:76:3f:e4:46:23:09:0a:45:d8:e7:71:be:27: e5:c8:9c:e7:3b:38:77:ee:bf:b1:05:bd:d7:14:7a: e3:52:c7:02:77:74:d6:4b:83:a9:bc:b5:47:2e:28: e9:77:3e:6e:75:3c:83:c9:f0:bb:a9:8f:86:49:69: 23:c0:09:48:7c:ec:cd:1e:da:72:03:43:e2:ec:e7: 8a:50:67:0a:b0:b6:bf:89:3b:8c:b1:fd:36:42:e7: 0c:e7:fb:3f:18:7d:17:8d:51:9c:06:01:c5:52:9a: 47:56:43:63:45:8b:39:b1:91:93:34:3d:6d:00:8d: 87:16:3d:d0:77:9a:0e:5b:b6:27:fc:93:d1:9f:3a: a0:4b:f7:72:5c:c8:14:cd:c8:ce:9a:aa:95:b6:76: 35:de:88:dd:d8:b1:c0:b6:d7:19:d3:21:89:49:df: ec:8c:3f:bf:41:f1:c2:c5:d9:72:00:d5:24:5e:31: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0E:D3:B2:A6:78:41:31:74:7F:9C:5F:6D:BA:22:B3:65:E6:A8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0cde474-861e-3df6-ba06-45ec7bd17c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:2a:66:b2:7f:c4:73:32:74:8c:88:56:ba:9a:61:2d:7c:4d: a9:38:01:68:04:ad:60:fd:7a:d0:21:d7:01:1d:d1:ec:c9:56: 50:81:59:c9:31:db:d4:6d:c7:1d:8b:32:c4:eb:33:ff:65:30: b8:1c:8d:e2:53:84:ed:14:b0:ec:87:79:9f:59:5f:dc:e6:c5: bb:c0:c9:3e:f8:e7:8b:9a:5b:62:34:c6:86:e8:a2:f9:58:2e: c8:94:18:e0:57:36:fd:cf:a2:0c:86:78:8a:5c:e6:55:92:3e: 63:86:3c:0a:b0:7e:98:06:a1:17:83:a2:59:70:87:ff:40:db: 6f:52:8f:7f:53:55:c4:ca:e2:f2:be:19:63:dc:be:dd:b9:e8: 42:67:c4:05:c1:8c:77:79:07:16:78:62:43:0c:b8:88:61:44: a7:3f:8b:26:db:7d:4b:c9:27:48:93:6b:5f:fc:da:96:c1:d1: 0f:7c:fd:54:4f:7e:a5:8e:4f:8f:45:c5:55:4b:03:2a:28:23: 74:0a:65:fa:9a:fa:92:d1:6f:cd:f0:70:a1:ba:20:1c:c1:8d: 75:a8:7e:1d:e5:58:d9:eb:f6:b0:bb:fe:6c:1d:35:1f:f6:44: da:4c:77:24:c9:1b:8c:06:9b:fd:dd:06:a3:2e:6b:f0:cc:13: c2:63:8a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5JTTCHCFfzQWwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWE0ZDRkNTEtZDhmOS00ZDdlLWE0Y2ItYzJmOWU5YjYwMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/hOFeb2VI3bYkYHjeTg+sPaXk9hdsI1Y9XJ PQN8l2R235jX8mMFQn2yasYYUxwlJm/CLBvCSO4mr8/LKv2pj/qMfw+l907pjwdl zHY/5EYjCQpF2OdxviflyJznOzh37r+xBb3XFHrjUscCd3TWS4OpvLVHLijpdz5u dTyDyfC7qY+GSWkjwAlIfOzNHtpyA0Pi7OeKUGcKsLa/iTuMsf02QucM5/s/GH0X jVGcBgHFUppHVkNjRYs5sZGTND1tAI2HFj3Qd5oOW7Yn/JPRnzqgS/dyXMgUzcjO mqqVtnY13ojd2LHAttcZ0yGJSd/sjD+/QfHCxdlyANUkXjEZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYO07KmeEExdH+cX226IrNl5qjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBjZGU0NzQtODYxZS0z ZGY2LWJhMDYtNDVlYzdiZDE3YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMEqZrJ/xHMydIyIVrqaYS18Tak4AWgErWD9etAh1wEd0ezJVlCBWckx 29Rtxx2LMsTrM/9lMLgcjeJThO0UsOyHeZ9ZX9zmxbvAyT7454uaW2I0xoboovlY LsiUGOBXNv3PogyGeIpc5lWSPmOGPAqwfpgGoReDollwh/9A229Sj39TVcTK4vK+ GWPcvt256EJnxAXBjHd5BxZ4YkMMuIhhRKc/iybbfUvJJ0iTa1/82pbB0Q98/VRP fqWOT49FxVVLAyooI3QKZfqa+pLRb83wcKG6IBzBjXWofh3lWNnr9rC7/mwdNR/2 RNpMdyTJG4wGm/3dBqMua/DME8JjiqQ= -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:29 2026 by rpki-client