$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab66a829-4a16-3b3a-b404-e5ea573f598a.roa File: ab66a829-4a16-3b3a-b404-e5ea573f598a.roa (raw, json) Hash identifier: 4YKODNCe0HyWsE26nOemx0/chTkPlAjroqeLhUcggTo= Subject key identifier: 3E:B4:0E:12:FB:46:82:AD:A5:13:21:3F:F1:65:83:4D:E4:6D:DE:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A9FC81EFB15C1D7815388 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab66a829-4a16-3b3a-b404-e5ea573f598a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:9f:c8:1e:fb:15:c1:d7:81:53:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d519e9d2-df90-4d1a-8f6c-9c0d580f02a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:50:21:a2:14:10:c9:0b:76:64:3b:a1:04:0c: 01:b9:74:e1:c2:b8:d1:d5:69:21:ef:da:f0:19:9b: 22:eb:08:72:bd:de:22:1a:53:c4:b4:66:4b:cf:26: 2c:72:cf:36:8e:b2:91:1c:33:d7:38:a5:5e:2a:7e: d9:02:7f:c7:e2:96:29:7d:54:0d:0e:10:70:54:b5: 8a:99:ce:92:63:7b:83:a9:5e:68:93:bd:aa:1e:b6: 21:5a:7f:71:cb:70:7a:54:68:46:f3:94:f7:84:88: 99:b5:26:3a:23:5a:29:fa:f8:88:83:0d:eb:bc:1f: ca:6f:69:69:b5:5b:66:33:ef:8c:95:5e:51:a8:5a: 0e:c7:cc:6c:52:4b:7b:e3:f7:a7:38:08:e0:4a:b9: ab:1c:8e:0f:77:93:f1:14:d1:67:ec:5c:26:57:3d: 94:60:55:73:ab:1a:58:2f:ca:31:b6:73:96:c8:84: 81:5a:d8:02:49:a0:58:68:23:5e:7f:37:48:1a:65: 0c:eb:4c:94:77:a4:9a:cb:36:1c:ae:ff:8f:7e:1e: 0f:1c:5f:0d:1c:72:68:c9:95:ca:b0:64:78:f2:08: 40:ba:f3:10:9a:fb:8b:5d:70:50:fc:61:dc:26:48: bd:91:b4:69:e3:62:57:1e:ba:3c:37:85:ee:40:ab: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B4:0E:12:FB:46:82:AD:A5:13:21:3F:F1:65:83:4D:E4:6D:DE:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab66a829-4a16-3b3a-b404-e5ea573f598a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e9:a8:43:71:f4:b7:ae:b2:3e:d7:aa:62:63:f4:01:74:33: 29:6a:0d:96:ed:d6:20:6f:f3:8a:27:1b:ee:94:5b:9a:ac:d7: a0:67:a8:6d:3d:12:f3:99:49:e7:34:43:01:6c:3e:e1:d6:48: 6c:33:14:6a:71:02:17:bd:67:58:31:b4:83:4d:c2:d0:44:9c: dd:55:18:8b:70:62:7a:10:71:d0:38:ef:35:1b:4d:9e:ef:d9: e9:ed:f7:8d:6c:c7:94:98:73:bc:fd:7c:fe:75:b2:09:71:01: 17:d0:03:7b:fe:e6:c7:bf:1a:33:a4:0a:ad:ba:dd:7c:f0:99: 2d:08:eb:45:c8:df:7a:fc:3a:d3:2d:a7:db:51:15:56:7d:5a: 16:9d:ee:ad:bc:4d:75:4e:dc:fa:56:99:82:89:ed:0b:ce:77: a7:7d:81:4f:bd:86:c0:f2:9d:83:ae:1d:e8:87:df:09:ac:72: 7d:0c:a1:bc:48:2d:03:3e:df:a7:b7:f0:7e:ee:1d:97:76:3e: cc:b0:ef:f4:9e:7c:45:e3:d0:fe:63:c0:99:8a:62:f6:a6:4a: af:2a:e0:04:2e:ac:61:99:c9:b4:99:61:54:ad:af:b5:bf:b7: aa:ff:40:96:8d:0e:6f:cb:9a:e0:b1:10:95:73:d2:eb:e5:3b: ef:e8:6a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWp/IHvsVwdeBU4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDUxOWU5ZDItZGY5MC00ZDFhLThmNmMtOWMwZDU4MGYwMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFAhohQQyQt2ZDuhBAwBuXThwrjR1Wkh79rw GZsi6whyvd4iGlPEtGZLzyYscs82jrKRHDPXOKVeKn7ZAn/H4pYpfVQNDhBwVLWK mc6SY3uDqV5ok72qHrYhWn9xy3B6VGhG85T3hIiZtSY6I1op+viIgw3rvB/Kb2lp tVtmM++MlV5RqFoOx8xsUkt74/enOAjgSrmrHI4Pd5PxFNFn7FwmVz2UYFVzqxpY L8oxtnOWyISBWtgCSaBYaCNefzdIGmUM60yUd6SayzYcrv+Pfh4PHF8NHHJoyZXK sGR48ghAuvMQmvuLXXBQ/GHcJki9kbRp42JXHro8N4XuQKt2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD60DhL7RoKtpRMhP/Flg03kbd68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWI2NmE4MjktNGExNi0z YjNhLWI0MDQtZTVlYTU3M2Y1OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRFBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArpqENx9Leusj7XqmJj9AF0MylqDZbt1iBv84onG+6UW5qs16BnqG09 EvOZSec0QwFsPuHWSGwzFGpxAhe9Z1gxtINNwtBEnN1VGItwYnoQcdA47zUbTZ7v 2ent941sx5SYc7z9fP51sglxARfQA3v+5se/GjOkCq263XzwmS0I60XI33r8OtMt p9tRFVZ9Whad7q28TXVO3PpWmYKJ7QvOd6d9gU+9hsDynYOuHeiH3wmscn0MobxI LQM+36e38H7uHZd2Psyw7/SefEXj0P5jwJmKYvamSq8q4AQurGGZybSZYVStr7W/ t6r/QJaNDm/LmuCxEJVz0uvlO+/oapQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:20 2026 by rpki-client