$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa File: b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa (raw, json) Hash identifier: GFzJTEOXP2Gl4llXEyrunNp4UmE0P8R/DhG3yjMqqSE= Subject key identifier: 3F:79:6B:2E:DC:F6:01:69:60:B4:4A:82:65:8E:E4:F9:2F:DB:F7:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BB4298F06D8B993F69C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.58.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:b4:29:8f:06:d8:b9:93:f6:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e4cc0414-56b0-491e-9e4d-0487155f0319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:69:2e:66:1b:7c:49:94:b8:a3:df:b3:32: f7:61:15:0b:2a:cb:20:c9:8d:e6:19:dd:94:5a:b5: e6:3b:3b:26:b9:12:80:7d:1f:cc:60:dc:f1:12:70: cb:76:d1:b9:77:43:5b:57:32:c8:73:47:ea:66:fb: d3:45:bc:48:ef:d4:62:5d:0e:95:f6:37:32:4a:8e: 8f:c0:75:78:93:09:7f:c2:06:3d:ee:30:52:a2:b8: 00:ec:c8:ae:51:ec:a4:ad:42:eb:9b:36:8f:4d:c1: cd:16:82:f9:b8:a2:fa:31:1d:08:52:dd:ae:e6:7c: eb:a3:65:4a:d3:62:9a:b6:1f:97:59:68:f4:5a:41: c3:ac:80:16:a0:c0:0c:09:7a:67:b8:13:e5:0d:71: fd:23:c8:9f:24:fd:fa:9c:65:1b:3b:32:c0:5d:c1: d0:32:f8:d7:84:7e:e4:63:bc:ab:cf:a2:ee:f9:24: 9a:f3:0c:17:09:66:21:ca:cb:f4:01:54:3a:a5:fc: 64:82:4e:07:f1:33:71:c2:92:13:41:ac:3d:aa:bc: c4:bd:53:55:c3:3e:9e:6e:4f:d2:26:f1:7f:62:f2: b3:00:3a:f2:b9:da:5b:36:7e:af:c7:b7:6b:24:f4: bc:e5:d1:2d:74:06:fc:d4:69:8f:c4:86:34:0a:0a: d6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:6B:2E:DC:F6:01:69:60:B4:4A:82:65:8E:E4:F9:2F:DB:F7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:33:1a:34:f9:09:76:94:29:f8:ff:55:bf:fb:49:b3:fa:08: d3:fb:94:59:9e:c4:c8:9d:05:92:16:33:da:68:ea:bc:3b:72: ca:68:1f:2a:5b:83:ab:49:f5:14:31:4e:e6:c2:76:9c:56:1c: 6b:c7:6a:f3:e8:0f:8f:cc:75:bd:f6:c2:bd:32:68:9c:fb:43: d0:c3:65:fc:3a:75:b8:13:c3:cf:7c:da:7f:57:a7:af:45:67: 7d:4f:a6:c0:9b:6e:69:7a:e8:cd:f9:84:28:28:7f:62:00:34: 18:9d:32:79:7c:4a:1d:ef:5b:10:e6:73:9a:20:5f:7a:22:85: b6:c1:d6:81:c1:fa:04:4a:04:31:5b:46:88:e9:c9:40:37:0c: df:52:44:df:dc:4e:b0:3e:47:10:a8:ea:67:bb:17:c0:f7:80: 84:b5:6d:44:27:50:19:89:98:4e:9a:ed:25:02:4b:a4:b2:10: 35:aa:c4:23:c0:a0:16:b5:79:11:2c:ab:b5:ff:ca:c9:34:78: 96:85:7b:70:38:ed:95:4f:55:17:88:7f:c0:94:6b:48:1c:90: 9c:96:5d:8e:64:f4:c2:e3:37:63:86:45:8f:bb:ac:a8:46:55: 03:ba:73:c0:f0:02:88:9d:08:1b:5e:a8:d3:3c:17:13:3d:ab: 8d:cc:8a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW7QpjwbYuZP2nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTRjYzA0MTQtNTZiMC00OTFlLTllNGQtMDQ4NzE1NWYwMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sBpLmYbfEmUuKPfszL3YRULKssgyY3mGd2U WrXmOzsmuRKAfR/MYNzxEnDLdtG5d0NbVzLIc0fqZvvTRbxI79RiXQ6V9jcySo6P wHV4kwl/wgY97jBSorgA7MiuUeykrULrmzaPTcHNFoL5uKL6MR0IUt2u5nzro2VK 02Kath+XWWj0WkHDrIAWoMAMCXpnuBPlDXH9I8ifJP36nGUbOzLAXcHQMvjXhH7k Y7yrz6Lu+SSa8wwXCWYhysv0AVQ6pfxkgk4H8TNxwpITQaw9qrzEvVNVwz6ebk/S JvF/YvKzADryudpbNn6vx7drJPS85dEtdAb81GmPxIY0CgrWWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD95ay7c9gFpYLRKgmWO5Pkv2/dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRjMGIxZTYtODI0NS0z NDcxLTlkNDYtMTY0MGEzYjZmN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwzGjT5CXaUKfj/Vb/7SbP6CNP7lFmexMidBZIWM9po6rw7cspoHypb g6tJ9RQxTubCdpxWHGvHavPoD4/Mdb32wr0yaJz7Q9DDZfw6dbgTw8982n9Xp69F Z31PpsCbbml66M35hCgof2IANBidMnl8Sh3vWxDmc5ogX3oihbbB1oHB+gRKBDFb RojpyUA3DN9SRN/cTrA+RxCo6me7F8D3gIS1bUQnUBmJmE6a7SUCS6SyEDWqxCPA oBa1eREsq7X/ysk0eJaFe3A47ZVPVReIf8CUa0gckJyWXY5k9MLjN2OGRY+7rKhG VQO6c8DwAoidCBteqNM8FxM9q43Miks= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:03 2026 by rpki-client