$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0849701-2222-3c56-9cf2-ad4afc0a5021.roa File: d0849701-2222-3c56-9cf2-ad4afc0a5021.roa (raw, json) Hash identifier: K/wQ8LkIOsvsHeJYT8hk+Am25t3cRGbQMWRcGFP3jqA= Subject key identifier: E4:7B:1C:ED:86:9F:CF:2F:7C:AA:94:3D:7D:12:F7:9B:DB:6A:9C:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CA061ED1701AE4E4CBF47B680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0849701-2222-3c56-9cf2-ad4afc0a5021.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 7725 IP address blocks: 68.35.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:ed:17:01:ae:4e:4c:bf:47:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=c87a8d6c-2362-46fe-857d-7a5dfc8e0504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:8a:75:66:d6:c3:c8:be:cc:d0:d4:9f:02: 81:e2:f8:63:73:9e:b5:cf:d3:e7:4e:4f:3f:48:e0: f6:39:63:4e:dc:8a:60:e1:ff:01:bb:32:0f:e7:82: 46:de:b8:ee:1f:6f:28:dc:5e:27:79:0d:3c:5a:3a: f8:f9:01:83:b7:a1:76:4a:ff:bb:eb:ab:fa:96:d2: 86:d5:c0:57:e0:ee:45:3b:62:78:5f:00:20:55:27: 00:dd:e2:36:b0:7f:87:dd:90:e0:5a:b4:d7:ea:c9: 49:40:13:95:b0:d9:3f:5a:7a:4c:a5:27:ff:92:5a: 89:85:0b:ae:d8:52:b5:86:c1:dc:f7:b2:2c:5e:62: 00:2e:f9:a6:73:5e:69:27:41:20:aa:ca:86:71:f8: dc:94:9b:ef:f4:74:84:3b:93:44:4d:8d:8c:f4:8e: 35:9e:d8:b2:76:5f:8f:27:a5:f7:f6:b0:93:00:db: 9a:0d:0e:7a:5f:26:c0:b0:29:c8:48:65:c8:1d:7b: 1f:f8:e2:eb:49:30:59:03:c2:26:ce:87:6d:c6:de: cd:9d:39:85:9b:9e:4d:fa:f7:20:9e:0f:93:ae:ca: df:66:c0:e9:16:90:9a:d9:5b:8e:9c:ee:8f:a8:ad: 5f:9f:e2:13:f1:96:8d:26:2d:ba:42:70:2b:de:d6: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7B:1C:ED:86:9F:CF:2F:7C:AA:94:3D:7D:12:F7:9B:DB:6A:9C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0849701-2222-3c56-9cf2-ad4afc0a5021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.35.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:42:39:66:23:5a:5d:61:27:26:84:ad:f4:b8:33:d5:18:21: e9:11:6a:35:00:ca:da:fc:24:3b:48:2f:f7:b8:9d:70:de:6b: 1a:51:40:8d:e7:de:bd:9f:63:a4:3a:70:bb:15:ce:50:6d:71: 5a:a5:91:99:0c:c4:c5:3e:aa:3a:14:f7:ed:1d:74:8a:e3:60: e8:fc:c3:c6:e6:64:73:32:da:d6:60:44:ce:f6:88:55:b4:81: 9c:b1:d4:72:7f:68:31:4b:53:6f:1f:27:6b:29:fd:a8:f0:41: cb:34:97:0a:25:7a:54:e1:18:59:52:d6:81:b3:4f:b6:b5:3c: 6b:1b:75:d6:15:4c:f3:84:5a:10:b6:cf:ee:67:fe:84:e6:95: 22:b9:8f:e4:6e:c6:78:fe:c3:5a:45:dd:e7:61:10:5e:f4:ab: ab:e9:80:dd:2b:89:07:fc:16:df:9b:5e:6c:b0:be:f9:cd:c4: ec:71:a1:f9:3c:4c:7d:f5:28:a7:2b:04:b3:bc:ae:2e:87:12: ee:c1:a0:1f:bc:97:7c:47:fe:60:10:dc:ae:82:bf:97:4c:98: a3:4f:64:9c:b6:2b:1b:52:4e:eb:b6:18:3b:a4:87:39:08:2a: e2:06:2b:88:2a:6e:4c:cc:52:ef:8a:01:5f:1e:ab:78:00:aa: b1:8b:06:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYe0XAa5OTL9HtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk Yzg3YThkNmMtMjM2Mi00NmZlLTg1N2QtN2E1ZGZjOGUwNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlemKdWbWw8i+zNDUnwKB4vhjc561z9PnTk8/ SOD2OWNO3Ipg4f8BuzIP54JG3rjuH28o3F4neQ08Wjr4+QGDt6F2Sv+766v6ltKG 1cBX4O5FO2J4XwAgVScA3eI2sH+H3ZDgWrTX6slJQBOVsNk/WnpMpSf/klqJhQuu 2FK1hsHc97IsXmIALvmmc15pJ0EgqsqGcfjclJvv9HSEO5NETY2M9I41ntiydl+P J6X39rCTANuaDQ56XybAsCnISGXIHXsf+OLrSTBZA8Imzodtxt7NnTmFm55N+vcg ng+TrsrfZsDpFpCa2VuOnO6PqK1fn+IT8ZaNJi26QnAr3taiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR7HO2Gn88vfKqUPX0S95vbapwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA4NDk3MDEtMjIyMi0z YzU2LTljZjItYWQ0YWZjMGE1MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJCOWYjWl1hJyaErfS4M9UYIekRajUAytr8JDtIL/e4nXDeaxpRQI3n 3r2fY6Q6cLsVzlBtcVqlkZkMxMU+qjoU9+0ddIrjYOj8w8bmZHMy2tZgRM72iFW0 gZyx1HJ/aDFLU28fJ2sp/ajwQcs0lwolelThGFlS1oGzT7a1PGsbddYVTPOEWhC2 z+5n/oTmlSK5j+Ruxnj+w1pF3edhEF70q6vpgN0riQf8Ft+bXmywvvnNxOxxofk8 TH31KKcrBLO8ri6HEu7BoB+8l3xH/mAQ3K6Cv5dMmKNPZJy2KxtSTuu2GDukhzkI KuIGK4gqbkzMUu+KAV8eq3gAqrGLBnY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:01:51 2026 by rpki-client