$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cff0ef9e-17d0-38ff-a20a-307a2075fd1a.roa File: cff0ef9e-17d0-38ff-a20a-307a2075fd1a.roa (raw, json) Hash identifier: pjJYtRFHOJBxFTWV3PCaeqdTFWpRxCJJ2AQrcOTKfg0= Subject key identifier: 51:40:66:E7:0A:13:9A:1A:86:EE:3F:71:8E:BF:D8:70:36:76:27:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58184DABB194EE6FCA96D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cff0ef9e-17d0-38ff-a20a-307a2075fd1a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.45.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:18:4d:ab:b1:94:ee:6f:ca:96:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=dca510f6-804a-420f-8aef-81da220bbe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:b6:52:1b:05:2d:2d:da:8d:7f:fb:a6:b1: 73:8e:a0:6f:20:5f:d6:bf:84:70:35:3f:3f:ae:1b: 33:4a:59:32:fc:2a:f0:0e:40:90:00:b2:8e:89:1f: 12:01:41:50:53:21:a9:7f:9e:d2:1d:74:00:90:3a: b2:f7:86:09:bc:24:c7:f2:5c:b5:62:e3:ce:e2:33: f1:3f:e1:7f:fe:23:2e:8c:01:78:02:6d:f5:c1:cc: 58:30:48:44:11:24:d6:80:0a:ef:fa:80:eb:1e:e1: f4:75:51:3f:7e:86:91:6e:05:93:35:31:d6:ae:c4: b6:ae:7c:39:ac:00:fc:b2:d3:37:bf:b6:d0:82:54: d0:0e:97:a7:ac:c6:db:c3:0a:48:6d:0f:10:af:ed: 14:39:73:4b:8b:27:8f:3a:85:77:f4:90:06:8f:9c: 56:8a:88:de:ca:67:d7:6b:25:1b:1d:3b:60:36:e7: 13:4a:05:7d:69:9e:5a:fa:c9:c7:ac:2c:9a:f0:37: 3b:f7:1b:9e:d0:b2:a6:15:83:4c:85:28:85:51:eb: 92:fe:18:ee:1d:4a:8c:dd:45:70:e5:7a:fe:44:35: 03:f5:a1:d0:64:ed:33:c3:00:78:1a:8e:87:b3:52: 6b:e6:38:53:f6:a0:41:8d:0e:fc:1e:1d:a1:ef:8f: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:40:66:E7:0A:13:9A:1A:86:EE:3F:71:8E:BF:D8:70:36:76:27:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cff0ef9e-17d0-38ff-a20a-307a2075fd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:5e:bc:6b:c1:99:6d:15:56:8e:fc:56:b9:ce:a1:51:2b:15: dc:9f:3b:a5:2f:85:35:93:34:d1:52:49:68:8e:75:d5:47:53: c5:8a:f2:1b:f3:52:bd:d6:0d:5a:90:68:25:81:93:e6:19:74: 5e:8b:35:77:52:77:dd:3b:ab:6d:be:ff:ab:c7:43:f9:2a:ce: 26:5f:1d:b4:6c:26:26:10:f5:3e:f6:6b:b6:5e:2d:f5:b5:58: 71:e0:6e:a6:ac:65:b6:30:07:4e:af:0c:5d:c0:69:f1:59:5d: d9:20:5a:b1:9b:11:37:9f:e8:35:8a:e2:a5:a6:65:3e:ab:a7: 3f:c9:09:66:6a:2d:80:c6:4a:13:9a:39:ca:d1:3f:f1:24:33: e6:ff:50:6a:47:7e:f6:3c:13:68:6f:38:34:0c:21:d5:d9:56: d5:fd:4b:22:b7:7e:1f:9f:2f:0f:42:c6:0c:5e:f5:97:bf:a3: 67:58:bf:4d:98:1f:7f:e4:ee:eb:e5:97:d6:10:19:3a:49:14: 0e:3c:23:6a:a8:0a:ad:f5:00:e9:d2:d3:97:d8:b9:fc:c2:0b: 70:05:c9:eb:45:c8:eb:77:d8:51:0c:95:50:4a:7e:82:2b:17: be:20:cf:4c:3d:64:ca:64:83:6c:41:83:1f:08:e8:a4:a8:61: 2f:ec:48:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBhNq7GU7m/KltAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGNhNTEwZjYtODA0YS00MjBmLThhZWYtODFkYTIyMGJiZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhma2UhsFLS3ajX/7prFzjqBvIF/Wv4RwNT8/ rhszSlky/CrwDkCQALKOiR8SAUFQUyGpf57SHXQAkDqy94YJvCTH8ly1YuPO4jPx P+F//iMujAF4Am31wcxYMEhEESTWgArv+oDrHuH0dVE/foaRbgWTNTHWrsS2rnw5 rAD8stM3v7bQglTQDpenrMbbwwpIbQ8Qr+0UOXNLiyePOoV39JAGj5xWiojeymfX ayUbHTtgNucTSgV9aZ5a+snHrCya8Dc79xue0LKmFYNMhSiFUeuS/hjuHUqM3UVw 5Xr+RDUD9aHQZO0zwwB4Go6Hs1Jr5jhT9qBBjQ78Hh2h74+yQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFAZucKE5oahu4/cY6/2HA2dicUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZmMGVmOWUtMTdkMC0z OGZmLWEyMGEtMzA3YTIwNzVmZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVevGvBmW0VVo78VrnOoVErFdyfO6UvhTWTNNFSSWiOddVHU8WK8hvz Ur3WDVqQaCWBk+YZdF6LNXdSd907q22+/6vHQ/kqziZfHbRsJiYQ9T72a7ZeLfW1 WHHgbqasZbYwB06vDF3AafFZXdkgWrGbETef6DWK4qWmZT6rpz/JCWZqLYDGShOa OcrRP/EkM+b/UGpHfvY8E2hvODQMIdXZVtX9SyK3fh+fLw9Cxgxe9Ze/o2dYv02Y H3/k7uvll9YQGTpJFA48I2qoCq31AOnS05fYufzCC3AFyetFyOt32FEMlVBKfoIr F74gz0w9ZMpkg2xBgx8I6KSoYS/sSAk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:36:03 2026 by rpki-client