$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8c5190-af79-37ff-bb40-9ab4a140bf08.roa File: aa8c5190-af79-37ff-bb40-9ab4a140bf08.roa (raw, json) Hash identifier: CL02BPwsQ5WnbYdsWM4BBpCLMhu6dZFYqMmGx1KH4s4= Subject key identifier: DF:F3:F8:83:60:40:EE:23:3D:58:01:90:F7:3F:3F:53:37:48:E1:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57AFC1989AD38C0903FBA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8c5190-af79-37ff-bb40-9ab4a140bf08.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:af:c1:98:9a:d3:8c:09:03:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a0f63a31-15dd-4768-b8b0-6dfe5223d532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:59:f3:b0:8b:44:3d:84:85:51:38:0b:d4: 0f:35:cb:c9:5f:3d:60:79:84:e2:24:e3:d6:bf:49: 77:af:f2:b0:c2:31:72:c4:b6:69:55:87:dc:8d:46: 94:b7:3a:57:9f:b2:ff:a3:d3:a4:bb:bb:79:cb:1e: 14:35:a8:68:4c:c2:33:37:f9:ea:02:b9:35:9a:78: 7e:be:64:2a:77:0c:ea:73:08:b8:79:92:3f:f0:41: aa:d8:8b:da:9d:1f:3e:e0:39:6d:51:a0:f7:6d:63: 5d:d6:4a:e3:55:67:ba:2f:bd:98:c7:e3:c5:69:17: 1f:38:08:10:4e:69:46:3a:04:fe:41:13:87:f6:88: 05:b4:c9:4f:6b:b3:b7:c0:0a:cf:1a:58:25:e9:4d: 16:97:a0:d1:09:43:6e:02:ff:5a:52:18:02:b2:e4: af:b6:3e:a7:fb:2e:bf:86:34:3d:ac:63:69:e6:b4: 71:9c:b2:00:2d:82:3e:c2:46:3e:d0:2a:f3:77:11: 56:6a:05:98:1c:cf:bf:cf:dc:64:1e:34:84:47:90: 93:17:b9:a2:d0:ca:1d:e8:5e:5b:0b:f3:37:96:24: 7a:e8:77:c5:0e:cd:6e:16:46:4e:3e:50:b8:56:ba: 07:ee:73:ad:eb:b1:ef:c5:a1:3e:a3:bf:4e:f4:43: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F3:F8:83:60:40:EE:23:3D:58:01:90:F7:3F:3F:53:37:48:E1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa8c5190-af79-37ff-bb40-9ab4a140bf08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ce:32:93:47:aa:08:0f:a7:20:65:90:ae:60:9c:b5:92:2f: 71:52:29:1f:52:0e:71:23:83:1e:61:bb:df:e2:e3:7f:49:a4: 85:59:49:e2:e8:5f:e2:a3:16:1f:a0:31:71:c1:d2:36:ff:5e: 4a:05:2d:25:c7:5d:5c:e8:d9:f6:7a:71:f3:20:c5:77:cc:f9: dc:c2:9c:5a:33:92:6e:82:62:ce:60:45:1e:ef:25:8a:af:cf: 7d:48:29:b4:cf:d6:b3:bc:30:4b:e1:55:33:85:68:51:57:7c: c2:a6:97:eb:7f:01:2e:87:ba:cf:4d:55:a8:40:19:d5:f6:fe: 76:2e:f4:b6:86:d2:e8:0c:8e:3f:8e:11:5d:11:7b:dd:44:0b: e8:92:5e:bf:17:9e:37:7c:23:16:93:cf:50:80:03:ff:b8:20: 89:71:44:92:da:02:3a:1b:08:e9:7d:9c:f3:79:83:29:32:0c: 93:b6:56:99:42:7c:27:59:4e:30:74:bd:4f:8e:6f:93:96:12: 53:54:02:ee:79:e8:cd:9a:8f:b9:ac:d0:8e:f6:6c:87:86:e2: 74:8b:cc:97:e6:8e:38:de:d3:d9:4d:ae:e8:aa:a7:50:e4:55: eb:97:3e:20:22:f5:d6:f0:56:96:7b:61:2f:56:18:1f:88:fa: d5:54:21:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6/BmJrTjAkD+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTBmNjNhMzEtMTVkZC00NzY4LWI4YjAtNmRmZTUyMjNkNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbdZ87CLRD2EhVE4C9QPNcvJXz1geYTiJOPW v0l3r/KwwjFyxLZpVYfcjUaUtzpXn7L/o9Oku7t5yx4UNahoTMIzN/nqArk1mnh+ vmQqdwzqcwi4eZI/8EGq2IvanR8+4DltUaD3bWNd1krjVWe6L72Yx+PFaRcfOAgQ TmlGOgT+QROH9ogFtMlPa7O3wArPGlgl6U0Wl6DRCUNuAv9aUhgCsuSvtj6n+y6/ hjQ9rGNp5rRxnLIALYI+wkY+0CrzdxFWagWYHM+/z9xkHjSER5CTF7mi0Mod6F5b C/M3liR66HfFDs1uFkZOPlC4VroH7nOt67HvxaE+o79O9EO1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/z+INgQO4jPVgBkPc/P1M3SOEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE4YzUxOTAtYWY3OS0z N2ZmLWJiNDAtOWFiNGExNDBiZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3OMpNHqggPpyBlkK5gnLWSL3FSKR9SDnEjgx5hu9/i439JpIVZSeLo X+KjFh+gMXHB0jb/XkoFLSXHXVzo2fZ6cfMgxXfM+dzCnFozkm6CYs5gRR7vJYqv z31IKbTP1rO8MEvhVTOFaFFXfMKml+t/AS6Hus9NVahAGdX2/nYu9LaG0ugMjj+O EV0Re91EC+iSXr8Xnjd8IxaTz1CAA/+4IIlxRJLaAjobCOl9nPN5gykyDJO2VplC fCdZTjB0vU+Ob5OWElNUAu556M2aj7ms0I72bIeG4nSLzJfmjjje09lNruiqp1Dk VeuXPiAi9dbwVpZ7YS9WGB+I+tVUIRE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:46:15 2026 by rpki-client