$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa File: ae40cba9-1163-3f39-9ca4-39eda483be3f.roa (raw, json) Hash identifier: BnNH4qkaWmZs2/GXK3io6Aynu3lb9nvrKF1AMTVMchY= Subject key identifier: 52:FE:31:4D:5C:7F:1A:13:B4:B2:E2:21:47:2E:26:A6:8F:A8:51:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B9842D13FD59D7B75CE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.39.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:98:42:d1:3f:d5:9d:7b:75:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=db3ed857-17c7-4b44-b26d-2ee321b5a4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:08:50:49:7f:eb:e5:04:b9:39:e7:37:a0: 4a:56:63:42:01:80:14:eb:ec:e0:ab:c1:c9:6f:22: a3:55:8a:92:b2:13:0c:2c:82:f7:e5:97:eb:e9:92: 18:2a:60:b1:60:b9:e1:a7:13:a5:cd:97:66:89:dc: f5:35:51:1d:6c:b1:12:56:c4:f3:7a:40:40:7e:b5: 77:d3:dc:6f:5c:34:0a:16:5c:63:f8:c6:62:bd:af: bc:0a:e2:9a:4f:76:22:e5:ea:f9:1f:51:e7:7d:6a: 84:10:48:d1:44:87:f4:ad:52:52:fe:88:b3:c0:03: 06:1c:4f:fe:c7:12:dc:e4:66:e9:16:38:9d:86:e8: 0c:33:59:b6:ec:ae:53:8a:a0:8b:f0:53:8e:2b:35: da:ed:8e:cb:1d:17:f7:07:3b:c4:40:c7:86:56:f0: a5:b8:14:c2:12:8f:cb:5d:45:3b:5e:46:e8:61:cf: 91:09:c1:e5:ef:09:40:46:ab:5e:b2:29:40:2c:58: 19:a4:f4:64:7b:d1:e2:8e:2f:0d:a7:01:2a:df:cb: 56:05:be:5f:2a:9c:f6:2d:13:79:de:f5:d9:76:66: 98:da:23:28:62:db:b2:c4:1f:69:d8:59:8b:38:ea: b3:b8:47:1a:12:aa:25:75:56:a8:e1:bd:0d:dd:42: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:31:4D:5C:7F:1A:13:B4:B2:E2:21:47:2E:26:A6:8F:A8:51:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae40cba9-1163-3f39-9ca4-39eda483be3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4b:24:c1:13:a8:75:7c:97:a5:df:08:24:36:35:d7:47:1d: 6b:bf:3f:4a:d4:04:d6:0a:66:db:f6:8a:35:27:06:9c:a5:82: c6:90:cf:4b:3a:75:fe:82:a0:59:24:ac:92:a6:10:4e:ed:d2: 6d:fa:c4:4e:d4:a3:b9:0e:6d:7d:23:f4:7e:b1:2e:75:05:db: 4b:9e:f6:22:dc:db:ce:a7:de:ef:87:0c:d5:ba:eb:4a:48:6c: 15:08:48:6d:35:ec:fc:ab:11:61:1d:58:26:1d:49:87:9e:c0: 65:45:33:37:1e:41:27:cb:d7:2a:6b:36:5a:ea:7f:69:ca:be: 0d:ac:ac:77:56:87:6c:68:8f:1b:a7:36:a6:5b:cb:e0:39:6d: a8:9a:a1:50:e5:f7:77:4d:3f:de:2f:4c:5d:e1:b0:c3:55:a4: 3f:35:ae:6a:e8:2b:f3:f8:c6:e1:b6:e8:a0:ed:d8:71:91:a7: 1b:dc:91:99:01:86:d2:b2:45:6a:a1:18:06:e4:8d:2f:9e:dc: 7f:cf:80:22:5c:ea:bd:ed:05:12:a2:ed:1b:23:99:e3:0b:bb: 3c:a0:00:8f:95:96:4b:15:e6:64:a7:c7:ec:f7:02:01:83:67: bd:c0:2f:6d:68:dd:3b:86:e2:15:22:df:92:3e:7a:5b:48:87: 2f:f0:0d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5hC0T/VnXt1zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGIzZWQ4NTctMTdjNy00YjQ0LWIyNmQtMmVlMzIxYjVhNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFsIUEl/6+UEuTnnN6BKVmNCAYAU6+zgq8HJ byKjVYqSshMMLIL35Zfr6ZIYKmCxYLnhpxOlzZdmidz1NVEdbLESVsTzekBAfrV3 09xvXDQKFlxj+MZiva+8CuKaT3Yi5er5H1HnfWqEEEjRRIf0rVJS/oizwAMGHE/+ xxLc5GbpFjidhugMM1m27K5TiqCL8FOOKzXa7Y7LHRf3BzvEQMeGVvCluBTCEo/L XUU7XkboYc+RCcHl7wlARqtesilALFgZpPRke9Hiji8NpwEq38tWBb5fKpz2LRN5 3vXZdmaY2iMoYtuyxB9p2FmLOOqzuEcaEqoldVao4b0N3UIVVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL+MU1cfxoTtLLiIUcuJqaPqFFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU0MGNiYTktMTE2My0z ZjM5LTljYTQtMzllZGE0ODNiZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZLJMETqHV8l6XfCCQ2NddHHWu/P0rUBNYKZtv2ijUnBpylgsaQz0s6 df6CoFkkrJKmEE7t0m36xE7Uo7kObX0j9H6xLnUF20ue9iLc286n3u+HDNW660pI bBUISG017PyrEWEdWCYdSYeewGVFMzceQSfL1yprNlrqf2nKvg2srHdWh2xojxun NqZby+A5baiaoVDl93dNP94vTF3hsMNVpD81rmroK/P4xuG26KDt2HGRpxvckZkB htKyRWqhGAbkjS+e3H/PgCJc6r3tBRKi7RsjmeMLuzygAI+VlksV5mSnx+z3AgGD Z73AL21o3TuG4hUi35I+eltIhy/wDVY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:34 2026 by rpki-client