$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be18019b-c683-38e3-bd94-3063745924a5.roa File: be18019b-c683-38e3-bd94-3063745924a5.roa (raw, json) Hash identifier: XJMoU9ke7qvQPFLTFFs6SnQcdE5+35ivXLajf9Il9HQ= Subject key identifier: D8:2E:16:53:92:23:07:11:5B:C4:29:3F:4C:FE:44:AA:D7:72:CA:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58089490ED9DD93840C3B8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be18019b-c683-38e3-bd94-3063745924a5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:08:94:90:ed:9d:d9:38:40:c3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8130ca6a-d6fa-4911-85c4-463c04c34301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:d2:8e:02:2a:3b:71:0c:2b:8b:89:fa:70: 60:fb:5d:b5:81:f6:73:3a:e0:6e:ce:62:99:9c:e8: d9:21:a9:d2:a1:14:13:d8:f6:58:4b:66:16:9e:80: a5:69:be:f8:f4:64:86:6e:30:99:17:ae:40:92:61: a4:87:4d:43:1a:c3:8b:3e:89:1f:0a:53:c8:f9:50: f8:d5:7e:b9:af:31:6b:97:41:b3:89:9c:2c:0a:55: c4:6a:bc:09:a0:76:e8:22:63:2f:21:4d:97:bf:61: 60:f7:f6:32:f1:c4:eb:5b:c0:42:70:81:38:4c:09: ed:ed:20:ec:a5:a7:bd:47:7d:cf:89:4d:1c:e2:7d: d0:1f:40:e6:eb:8e:d5:4a:d7:c2:2c:33:ff:6a:78: 1e:e6:0d:3a:c6:06:76:87:a4:18:2f:05:43:5a:2f: 2a:9d:23:10:7b:18:53:76:38:01:d0:dc:d6:f8:58: cd:a2:16:20:c7:b2:af:69:85:fd:85:ba:54:a1:23: da:01:eb:88:5e:f7:27:dc:43:81:33:47:2b:7e:98: bd:c7:13:e7:aa:88:00:40:83:12:e6:3f:7a:6b:c1: a4:01:ff:e0:c8:9b:18:74:aa:b6:98:2e:9a:9d:c8: 3d:c3:0b:00:6e:dc:69:09:67:bb:f4:74:14:12:2d: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2E:16:53:92:23:07:11:5B:C4:29:3F:4C:FE:44:AA:D7:72:CA:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be18019b-c683-38e3-bd94-3063745924a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:1a:e9:cb:03:c9:fa:03:2f:44:36:30:13:66:70:6a:c2:6a: ec:5d:e3:55:1f:e6:6d:02:bc:eb:da:51:a4:79:3a:1b:94:89: b0:e8:8e:04:8b:76:a7:45:7d:de:26:4d:0d:2b:f1:a9:89:d1: 59:2f:10:a5:01:ea:2c:6c:4d:22:0e:22:13:a9:c1:0f:14:1c: 7d:1f:9b:af:8f:ea:90:47:8d:57:0b:40:bf:f9:08:a3:ac:19: 1f:5c:49:1f:79:27:5b:4e:f7:12:19:c4:4b:5c:6b:72:7b:ec: 54:cb:97:76:0d:06:e8:9b:7d:02:18:81:66:19:39:22:f4:b6: 31:04:e6:42:43:d9:88:5b:64:82:f3:b3:b6:d4:b7:51:4c:60: dc:5a:1f:26:02:dd:a1:27:8e:45:1f:fd:f2:9c:07:c6:53:fa: d8:ee:e1:77:a1:30:4a:8e:76:f8:ed:be:41:be:be:c4:b0:23: aa:b7:cd:50:72:07:f1:8f:5f:cc:69:ef:06:ad:8a:50:61:de: ce:16:07:ee:96:b1:50:c5:74:4f:af:40:7a:cb:af:86:a0:f7: 2a:e8:3f:3d:dd:c0:b9:c3:5d:23:48:68:c5:98:be:2f:03:9d: 1e:13:b0:a2:bf:2c:36:4b:08:1b:b5:29:a0:63:44:fa:b2:18: de:8f:d0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAiUkO2d2ThAw7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODEzMGNhNmEtZDZmYS00OTExLTg1YzQtNDYzYzA0YzM0MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bTSjgIqO3EMK4uJ+nBg+121gfZzOuBuzmKZ nOjZIanSoRQT2PZYS2YWnoClab749GSGbjCZF65AkmGkh01DGsOLPokfClPI+VD4 1X65rzFrl0GziZwsClXEarwJoHboImMvIU2Xv2Fg9/Yy8cTrW8BCcIE4TAnt7SDs pae9R33PiU0c4n3QH0Dm647VStfCLDP/ange5g06xgZ2h6QYLwVDWi8qnSMQexhT djgB0NzW+FjNohYgx7KvaYX9hbpUoSPaAeuIXvcn3EOBM0crfpi9xxPnqogAQIMS 5j96a8GkAf/gyJsYdKq2mC6ancg9wwsAbtxpCWe79HQUEi0wIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNguFlOSIwcRW8QpP0z+RKrXcsrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmUxODAxOWItYzY4My0z OGUzLWJkOTQtMzA2Mzc0NTkyNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMa6csDyfoDL0Q2MBNmcGrCauxd41Uf5m0CvOvaUaR5OhuUibDojgSL dqdFfd4mTQ0r8amJ0VkvEKUB6ixsTSIOIhOpwQ8UHH0fm6+P6pBHjVcLQL/5CKOs GR9cSR95J1tO9xIZxEtca3J77FTLl3YNBuibfQIYgWYZOSL0tjEE5kJD2YhbZILz s7bUt1FMYNxaHyYC3aEnjkUf/fKcB8ZT+tju4XehMEqOdvjtvkG+vsSwI6q3zVBy B/GPX8xp7watilBh3s4WB+6WsVDFdE+vQHrLr4ag9yroPz3dwLnDXSNIaMWYvi8D nR4TsKK/LDZLCBu1KaBjRPqyGN6P0Gc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:16 2026 by rpki-client