$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5f18f99-7007-3417-9e2c-ab7bcc2be24e.roa File: d5f18f99-7007-3417-9e2c-ab7bcc2be24e.roa (raw, json) Hash identifier: aRUGini34YOM9mMEqmTsKRCdxejNbYEdrJrQ8XEfRcs= Subject key identifier: A6:8E:CD:4C:26:C9:40:21:9E:BF:4B:50:FC:AF:C5:D8:E6:95:A7:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5809291FEC60788433FC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5f18f99-7007-3417-9e2c-ab7bcc2be24e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:09:29:1f:ec:60:78:84:33:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ab23e796-99b6-40ac-a2a5-9a768065eca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:2c:f0:bb:c9:41:9d:6c:d6:b9:c1:2d:28: 30:09:a2:44:bc:c0:8d:cd:f8:0d:d3:1e:44:c6:09: b2:be:02:4c:09:6c:7c:e5:1b:24:c6:0e:12:c8:fe: d0:97:ca:8f:4a:c6:e8:d4:05:b2:5c:97:5d:44:0b: e5:05:d2:22:f8:93:ac:ed:8f:f8:03:02:8f:8f:0c: 60:e7:9d:27:3c:d4:d1:2e:21:46:2a:fc:2c:87:e9: 8c:9c:21:55:ec:98:39:2e:f2:8c:9e:28:99:50:aa: 93:85:1d:5b:ed:f7:a0:fe:e6:02:f3:d2:b9:d5:c4: 5b:dd:00:8f:c9:2a:a1:ef:37:78:92:e5:af:fe:2e: fe:37:8b:d6:e1:3d:26:fd:f4:88:27:95:1b:aa:0c: 10:7a:02:46:98:23:91:da:d9:2e:e5:d6:78:b4:b7: f4:58:20:6d:3f:47:77:2e:e7:10:4a:dc:6a:55:18: e2:e8:2b:1d:4c:d2:61:ec:b3:b1:e7:cf:fc:e5:a1: f5:a8:c0:ef:3d:1d:6d:a1:09:39:4e:47:50:23:ff: a9:e6:59:e7:97:89:b5:a9:82:6c:c6:2e:e0:16:98: 69:9a:ab:88:ed:5b:c8:85:b5:c9:11:46:d1:73:ab: 87:cc:5e:4e:84:e1:42:65:09:ec:16:58:fd:09:ec: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:CD:4C:26:C9:40:21:9E:BF:4B:50:FC:AF:C5:D8:E6:95:A7:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5f18f99-7007-3417-9e2c-ab7bcc2be24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:48:43:4c:5b:fb:31:b5:5b:b2:49:4c:bb:ae:7a:50:4f:bf: 69:5f:ce:ca:ab:c8:4b:95:e2:fa:ba:4f:2f:33:83:b6:15:c4: 7a:81:71:21:c0:00:70:c3:bd:65:a2:c7:08:a5:fb:48:a8:94: 45:c9:3b:3b:f6:b2:92:e4:66:47:ad:f8:d8:4a:b7:cc:33:2e: 6c:e6:b8:0b:3d:e5:c0:26:47:bb:fc:e7:f5:54:10:ed:e5:0c: 87:35:fd:4d:59:9d:78:74:0b:cb:49:ff:24:5d:58:0f:6c:1d: d1:83:a6:54:d5:9d:bc:c4:0e:a7:56:d9:65:d9:7e:0c:0c:a0: 30:f3:89:71:cf:5a:e6:fc:7b:f9:fb:cc:5a:c2:7c:f7:34:cc: ee:5e:b0:19:0c:91:c9:28:8a:62:b4:2d:53:92:b2:ee:36:6e: 16:44:9c:ee:9b:70:84:7a:c2:e7:79:72:22:9a:e2:81:60:fe: c7:ba:44:f3:23:69:24:09:76:12:9c:5f:81:94:4f:70:a7:2a: 4c:34:d1:7c:54:90:b2:d5:60:4d:a4:58:f4:10:e3:56:03:f8: 95:37:61:ae:48:df:9c:79:45:40:14:f7:8e:b1:90:c1:c2:48: 0c:32:f4:de:14:05:05:10:75:a5:89:b0:fd:28:ed:04:aa:03: a9:8a:02:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAkpH+xgeIQz/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWIyM2U3OTYtOTliNi00MGFjLWEyYTUtOWE3NjgwNjVlY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVQs8LvJQZ1s1rnBLSgwCaJEvMCNzfgN0x5E xgmyvgJMCWx85Rskxg4SyP7Ql8qPSsbo1AWyXJddRAvlBdIi+JOs7Y/4AwKPjwxg 550nPNTRLiFGKvwsh+mMnCFV7Jg5LvKMniiZUKqThR1b7feg/uYC89K51cRb3QCP ySqh7zd4kuWv/i7+N4vW4T0m/fSIJ5UbqgwQegJGmCOR2tku5dZ4tLf0WCBtP0d3 LucQStxqVRji6CsdTNJh7LOx58/85aH1qMDvPR1toQk5TkdQI/+p5lnnl4m1qYJs xi7gFphpmquI7VvIhbXJEUbRc6uHzF5OhOFCZQnsFlj9CezgAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaOzUwmyUAhnr9LUPyvxdjmlacCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVmMThmOTktNzAwNy0z NDE3LTllMmMtYWI3YmNjMmJlMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFIQ0xb+zG1W7JJTLuuelBPv2lfzsqryEuV4vq6Ty8zg7YVxHqBcSHA AHDDvWWixwil+0iolEXJOzv2spLkZket+NhKt8wzLmzmuAs95cAmR7v85/VUEO3l DIc1/U1ZnXh0C8tJ/yRdWA9sHdGDplTVnbzEDqdW2WXZfgwMoDDziXHPWub8e/n7 zFrCfPc0zO5esBkMkckoimK0LVOSsu42bhZEnO6bcIR6wud5ciKa4oFg/se6RPMj aSQJdhKcX4GUT3CnKkw00XxUkLLVYE2kWPQQ41YD+JU3Ya5I35x5RUAU946xkMHC SAwy9N4UBQUQdaWJsP0o7QSqA6mKAoE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:30:37 2026 by rpki-client