$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa File: b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa (raw, json) Hash identifier: boBnKzQQEcTw7XEW5lwOixTjQ6w68cQHYWMf3IPgEvs= Subject key identifier: 2A:AB:B7:8C:BC:65:F2:AD:39:FB:9E:53:4C:DB:99:6C:48:32:55:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5812158BB61AE0A31EBD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.44.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:12:15:8b:b6:1a:e0:a3:1e:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a2ce829c-1bae-4c74-8ce8-2a073c927382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:86:70:81:1c:77:ee:7e:cb:66:17:75:0e: a6:22:71:a8:7c:03:2f:69:4e:f5:39:f8:9c:14:06: 85:42:fb:ba:0d:e6:60:47:a0:47:c8:75:a8:db:95: ed:d7:1c:a0:06:f5:d4:b4:c0:5f:03:9c:9e:2c:51: 2f:49:28:cd:5f:7a:2d:5e:ab:82:3a:2b:a0:82:dc: 89:4b:cc:db:fe:51:1c:2e:d9:ef:7f:7a:da:ab:9b: 90:6d:4a:49:78:81:83:f1:20:15:19:ba:a3:05:91: 44:12:f0:42:fb:61:01:19:5c:78:32:23:99:aa:4f: 89:72:95:73:ea:61:ac:13:71:26:8d:b1:08:8f:fe: 59:be:5a:62:c2:6a:71:7d:e3:ef:dd:1a:2d:eb:a9: f0:77:1d:e9:d8:a8:c1:24:58:ab:42:b9:3e:27:9f: de:0f:ba:b8:19:fb:eb:f0:bb:f3:20:b0:cc:90:27: 83:e3:97:f6:94:e8:be:7a:38:d6:66:64:63:4a:7b: e1:10:29:6c:4c:ef:8c:78:cc:1b:2c:62:ef:40:0a: 99:b3:35:f3:c3:e8:dd:69:9f:5f:40:f1:ac:f4:3e: 25:73:05:cb:4e:7a:13:c7:16:10:e8:49:ab:dc:83: 4c:cc:b0:d7:67:49:bf:29:9c:29:aa:d9:36:4a:1b: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:B7:8C:BC:65:F2:AD:39:FB:9E:53:4C:DB:99:6C:48:32:55:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:73:32:02:bb:f9:9d:5d:00:c6:20:e2:13:37:e4:fb:37:16: de:3a:64:43:20:1e:99:05:d1:70:5f:00:cf:98:5d:6f:c1:78: c6:27:58:c4:af:8c:1e:2d:d6:3b:16:c2:bd:de:45:52:11:be: 08:ee:3c:cc:2f:0f:81:86:b2:3c:cb:b4:56:5d:f1:c5:53:e1: 87:a6:99:0e:ef:fb:80:ef:58:80:38:9e:9b:a4:4d:5f:82:3a: 25:95:b2:0a:04:2b:09:45:18:ac:d8:34:0c:c0:e4:59:9b:81: 3e:12:31:c7:9f:14:a0:1b:e6:10:27:06:6d:df:22:65:43:da: e6:3b:26:18:8c:9c:8e:88:6f:85:15:16:82:c8:e1:b1:d4:d5: e0:4a:bd:14:77:02:d5:a2:5f:e1:aa:a2:bb:99:5b:04:63:9d: a7:d2:70:5f:e0:98:03:f5:58:3f:84:d6:36:94:d2:ae:c1:1a: 3a:05:f7:f1:d2:c8:7a:b9:c2:2b:c0:74:3d:46:00:0f:b2:0a: 73:1e:c4:06:d1:23:df:64:0f:76:42:10:03:a6:99:48:15:fe: 00:ed:7d:bc:28:d7:a6:c2:33:4f:c3:62:bc:7d:94:3c:e2:df: 05:87:19:18:31:8a:08:6f:54:38:ce:69:94:34:a4:15:71:89: be:1b:02:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBIVi7Ya4KMevUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTJjZTgyOWMtMWJhZS00Yzc0LThjZTgtMmEwNzNjOTI3MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbeGcIEcd+5+y2YXdQ6mInGofAMvaU71Ofic FAaFQvu6DeZgR6BHyHWo25Xt1xygBvXUtMBfA5yeLFEvSSjNX3otXquCOiuggtyJ S8zb/lEcLtnvf3raq5uQbUpJeIGD8SAVGbqjBZFEEvBC+2EBGVx4MiOZqk+JcpVz 6mGsE3EmjbEIj/5ZvlpiwmpxfePv3Rot66nwdx3p2KjBJFirQrk+J5/eD7q4Gfvr 8LvzILDMkCeD45f2lOi+ejjWZmRjSnvhEClsTO+MeMwbLGLvQAqZszXzw+jdaZ9f QPGs9D4lcwXLTnoTxxYQ6Emr3INMzLDXZ0m/KZwpqtk2Shs0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqrt4y8ZfKtOfueU0zbmWxIMlWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJkODQ5YTgtYTZlNy0z Nzg4LTg2MTEtZGIwY2Q0YTBhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9zMgK7+Z1dAMYg4hM35Ps3Ft46ZEMgHpkF0XBfAM+YXW/BeMYnWMSv jB4t1jsWwr3eRVIRvgjuPMwvD4GGsjzLtFZd8cVT4YemmQ7v+4DvWIA4npukTV+C OiWVsgoEKwlFGKzYNAzA5FmbgT4SMcefFKAb5hAnBm3fImVD2uY7JhiMnI6Ib4UV FoLI4bHU1eBKvRR3AtWiX+GqoruZWwRjnafScF/gmAP1WD+E1jaU0q7BGjoF9/HS yHq5wivAdD1GAA+yCnMexAbRI99kD3ZCEAOmmUgV/gDtfbwo16bCM0/DYrx9lDzi 3wWHGRgxighvVDjOaZQ0pBVxib4bAsw= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:47 2026 by rpki-client