$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c256549e-d0a5-3eb3-bc46-40302144b5fa.roa File: c256549e-d0a5-3eb3-bc46-40302144b5fa.roa (raw, json) Hash identifier: 8IDSRlxPvyonz5M5ddJRjJe0WO8B0K+Ru0s+SYg0MSs= Subject key identifier: 09:E6:DA:AD:0F:B6:2A:C8:6D:90:B5:95:92:BC:39:4E:2C:DB:1B:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B8EB2234554E7B33F3D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c256549e-d0a5-3eb3-bc46-40302144b5fa.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:8e:b2:23:45:54:e7:b3:3f:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=91f8a849-8755-4b25-b140-f1b0a440191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:e4:a6:7b:5a:28:8c:77:fa:10:e7:cb:4b: 90:ef:f1:20:f2:46:f9:08:5f:ea:77:09:46:df:35: 75:a2:bd:20:39:f2:4d:90:08:fe:16:7b:11:47:25: 8f:f5:37:c6:e8:62:af:a9:5d:70:d9:03:dd:82:93: 4f:56:57:e3:4b:4a:e0:b3:6c:73:b1:29:d2:5e:09: 94:95:49:f4:a6:20:5a:ab:4c:8f:85:80:51:cd:1c: 70:ca:23:e3:c4:4d:7d:2a:92:dc:dc:e0:0e:e4:7c: a1:f5:ef:a1:02:c6:7c:c4:80:08:2f:7c:b1:aa:8c: d5:27:1f:a7:d5:89:08:b7:fc:27:6b:97:2b:13:e0: 83:76:32:ed:18:f4:25:d8:9e:7e:95:6e:76:1f:7b: 58:08:82:da:02:50:57:c1:6f:c7:71:13:3a:4b:2f: 8e:98:82:d0:fc:f9:d9:bf:a2:b8:2a:12:06:4a:45: cb:a7:94:8b:4e:e4:fb:a1:e5:97:75:46:90:06:13: ab:95:92:fe:04:a3:a8:cb:8a:45:9a:b3:1e:9d:1e: 44:28:e6:5e:63:c3:2a:11:ab:5f:ad:8d:e1:ae:c3: aa:a2:90:88:af:d7:ef:aa:e4:35:5e:c1:a0:e9:3d: d7:b9:e2:65:82:62:c8:53:23:16:9b:d5:cb:b6:92: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E6:DA:AD:0F:B6:2A:C8:6D:90:B5:95:92:BC:39:4E:2C:DB:1B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c256549e-d0a5-3eb3-bc46-40302144b5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3d:b3:db:1b:29:b5:ee:8e:3a:ab:21:b9:da:f8:6d:cc:8b: a2:2e:a1:4a:84:91:ae:a6:1d:bf:e0:7f:9f:e6:d5:74:96:58: f9:ac:a8:28:a4:39:29:b0:b7:28:b2:e5:01:f7:d5:97:79:44: ae:26:5d:3f:4b:26:f2:76:ad:7b:cf:bf:a2:7f:77:40:cf:c0: a4:46:10:50:df:ea:e5:90:82:a8:ee:3b:fa:a0:10:8e:d2:72: 36:fb:6e:31:3f:ad:59:4b:a9:25:3a:bc:53:7b:78:fe:c9:01: 3b:6c:b1:e5:d0:f9:bf:4a:84:22:4d:41:8f:5e:3b:91:2c:c9: 07:c1:60:9c:14:35:40:f5:15:32:81:08:52:2c:e6:00:e4:4d: 9a:89:e1:76:96:ce:d4:4d:f5:dd:f0:62:e0:73:7e:ab:cd:df: 63:cf:c5:23:44:de:85:11:8f:36:eb:71:50:58:f9:06:b5:a4: 84:2f:82:c6:c5:51:53:53:fe:f3:a8:1b:91:ad:5c:08:12:87: 3e:c2:ba:f6:0a:28:d8:73:69:15:c3:c7:a5:e3:fd:eb:4d:50: 7f:06:54:39:7c:f5:c9:29:54:a7:28:90:41:36:d1:5c:eb:f6: 76:64:21:98:81:fc:6e:69:b6:28:e3:e1:5d:f3:6e:10:0d:1e: 3e:eb:09:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW46yI0VU57M/PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTFmOGE4NDktODc1NS00YjI1LWIxNDAtZjFiMGE0NDAxOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHfkpntaKIx3+hDny0uQ7/Eg8kb5CF/qdwlG 3zV1or0gOfJNkAj+FnsRRyWP9TfG6GKvqV1w2QPdgpNPVlfjS0rgs2xzsSnSXgmU lUn0piBaq0yPhYBRzRxwyiPjxE19KpLc3OAO5Hyh9e+hAsZ8xIAIL3yxqozVJx+n 1YkIt/wna5crE+CDdjLtGPQl2J5+lW52H3tYCILaAlBXwW/HcRM6Sy+OmILQ/PnZ v6K4KhIGSkXLp5SLTuT7oeWXdUaQBhOrlZL+BKOoy4pFmrMenR5EKOZeY8MqEatf rY3hrsOqopCIr9fvquQ1XsGg6T3XueJlgmLIUyMWm9XLtpJh/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnm2q0PtirIbZC1lZK8OU4s2xvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI1NjU0OWUtZDBhNS0z ZWIzLWJjNDYtNDAzMDIxNDRiNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI9s9sbKbXujjqrIbna+G3Mi6IuoUqEka6mHb/gf5/m1XSWWPmsqCik OSmwtyiy5QH31Zd5RK4mXT9LJvJ2rXvPv6J/d0DPwKRGEFDf6uWQgqjuO/qgEI7S cjb7bjE/rVlLqSU6vFN7eP7JATtsseXQ+b9KhCJNQY9eO5EsyQfBYJwUNUD1FTKB CFIs5gDkTZqJ4XaWztRN9d3wYuBzfqvN32PPxSNE3oURjzbrcVBY+Qa1pIQvgsbF UVNT/vOoG5GtXAgShz7CuvYKKNhzaRXDx6Xj/etNUH8GVDl89ckpVKcokEE20Vzr 9nZkIZiB/G5ptijj4V3zbhANHj7rCbI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:00:35 2026 by rpki-client