$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa File: a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa (raw, json) Hash identifier: iH/3++U8XA7nWMCDZq/SijAm0PQRUh6tCsPd5vFHQCs= Subject key identifier: 7E:57:ED:79:3D:84:F9:6D:B8:EC:98:7C:CE:4B:E8:CE:9E:5B:69:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE7FA6D8A2A0CFDF16C9800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7016 IP address blocks: 68.85.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:fa:6d:8a:2a:0c:fd:f1:6c:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=c066fd9a-1c23-4c90-91b5-b6735036054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:81:21:53:67:bc:e2:4f:89:ea:eb:18:25: 8b:57:c6:1a:39:89:10:b1:d1:48:3b:2f:80:c7:6b: 5e:4b:ab:fb:81:85:8d:7d:66:cb:89:19:8a:c4:cd: f9:59:3f:3b:5a:00:72:0a:72:f1:0a:0a:2a:89:44: 4e:d8:db:5e:27:66:4a:0e:4a:96:79:06:3c:dd:68: f5:d9:ca:a1:d1:87:21:e3:97:08:d3:d6:63:14:d4: e2:96:17:3a:60:6d:30:52:08:26:85:2c:00:f2:5b: be:be:b0:4c:ae:58:d4:ab:15:e9:81:9f:9c:f7:60: 27:2c:30:25:89:08:38:28:42:e4:08:f1:98:ae:c0: 26:4f:68:98:65:b4:90:3f:8e:ec:02:2e:24:09:69: 88:54:f9:5a:a3:18:b3:41:89:60:14:7d:aa:8d:a5: f1:be:6c:65:90:a7:de:64:e9:61:5c:81:39:8d:e6: 69:69:e4:d3:29:e3:5b:f6:2b:cb:9f:a9:74:d8:c8: a9:f2:b1:62:a6:b9:07:71:d7:0e:fa:f4:e9:c0:7c: 14:fb:75:af:f2:de:a4:82:36:a7:ab:6f:90:79:2c: 0c:01:38:2e:3a:69:8a:1b:fb:6e:0f:48:a1:30:43: 52:f2:98:f7:b6:15:48:d7:96:12:04:f5:3f:c5:6b: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:57:ED:79:3D:84:F9:6D:B8:EC:98:7C:CE:4B:E8:CE:9E:5B:69:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a862a14f-de9d-39e2-a217-6cd0cf1b3164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ce:63:9f:89:70:96:c9:c4:19:09:72:d9:fb:06:0e:ff:00: c0:76:53:2b:29:cf:94:86:6e:af:25:90:f0:f8:13:f8:b2:43: a1:93:b4:71:eb:6c:5a:33:a1:ec:44:14:ee:48:43:65:55:c6: f7:5d:f9:31:ab:75:bf:3a:24:0d:ac:18:71:93:7c:aa:50:5b: a9:40:02:98:9c:7f:2c:e3:06:8d:95:a6:5c:d1:48:d7:de:0e: 7f:1b:a0:ea:3c:e8:e3:2f:8d:d4:fb:c4:49:81:6e:e4:ac:4d: 0d:89:cb:82:69:0f:16:2d:aa:a0:8e:af:2e:1f:26:4f:d6:98: 1c:83:3a:cb:2d:5e:fc:2e:a9:c2:24:f8:b8:98:b7:94:1e:22: 47:c2:04:f6:68:e2:72:62:db:1a:7b:a0:77:95:9e:97:28:89: 6f:2e:a9:94:2a:86:70:f4:66:e9:a7:a9:72:07:b7:69:e3:f3: fe:1d:a4:93:c6:60:40:40:a5:0e:c9:15:c8:80:c2:e8:ef:1a: 8a:d1:5c:98:9c:70:db:01:84:d9:88:67:01:49:e3:4b:84:f0: c3:8a:cc:70:05:49:de:0d:e9:b1:0b:99:83:7b:2d:a1:d2:be: ba:3b:af:f3:47:2e:45:32:de:98:79:d9:12:78:ff:e2:d0:70: 91:53:10:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz95/ptiioM/fFsmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YzA2NmZkOWEtMWMyMy00YzkwLTkxYjUtYjY3MzUwMzYwNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2KBIVNnvOJPierrGCWLV8YaOYkQsdFIOy+A x2teS6v7gYWNfWbLiRmKxM35WT87WgByCnLxCgoqiURO2NteJ2ZKDkqWeQY83Wj1 2cqh0Ych45cI09ZjFNTilhc6YG0wUggmhSwA8lu+vrBMrljUqxXpgZ+c92AnLDAl iQg4KELkCPGYrsAmT2iYZbSQP47sAi4kCWmIVPlaoxizQYlgFH2qjaXxvmxlkKfe ZOlhXIE5jeZpaeTTKeNb9ivLn6l02Mip8rFiprkHcdcO+vTpwHwU+3Wv8t6kgjan q2+QeSwMATguOmmKG/tuD0ihMENS8pj3thVI15YSBPU/xWuyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5X7Xk9hPltuOyYfM5L6M6eW2lTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg2MmExNGYtZGU5ZC0z OWUyLWEyMTctNmNkMGNmMWIzMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXOY5+JcJbJxBkJctn7Bg7/AMB2Uyspz5SGbq8lkPD4E/iyQ6GTtHHr bFozoexEFO5IQ2VVxvdd+TGrdb86JA2sGHGTfKpQW6lAApicfyzjBo2VplzRSNfe Dn8boOo86OMvjdT7xEmBbuSsTQ2Jy4JpDxYtqqCOry4fJk/WmByDOsstXvwuqcIk +LiYt5QeIkfCBPZo4nJi2xp7oHeVnpcoiW8uqZQqhnD0ZumnqXIHt2nj8/4dpJPG YEBApQ7JFciAwujvGorRXJiccNsBhNmIZwFJ40uE8MOKzHAFSd4N6bELmYN7LaHS vro7r/NHLkUy3ph52RJ4/+LQcJFTEOg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:04 2026 by rpki-client