$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d68fbf28-a017-3e58-b5b1-2f07119d3122.roa File: d68fbf28-a017-3e58-b5b1-2f07119d3122.roa (raw, json) Hash identifier: qlPgUVrfgzwMRaFtwK+y3bN30PFcnwASYULd48iLNeE= Subject key identifier: D4:9F:0B:30:0C:4D:A5:97:DD:8E:99:CF:D1:0A:36:30:A5:70:BE:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A9EE24D6DCBDF5B0EB800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d68fbf28-a017-3e58-b5b1-2f07119d3122.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:9e:e2:4d:6d:cb:df:5b:0e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e5a46fd6-8a01-4837-a0ee-8841ec579508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:1b:6d:69:cb:32:7d:51:4d:41:59:5a:58: 0d:76:1c:2b:2b:16:7e:f6:2d:dc:08:5d:26:8f:fe: d4:a5:31:f9:38:ee:96:6b:31:00:d8:db:d9:c3:cd: 13:cf:69:d8:e7:aa:37:53:ca:57:e4:25:61:8a:28: 65:51:cb:a8:97:03:79:5b:40:43:bc:89:9d:c5:7b: b2:d9:ac:ec:04:24:d8:e7:fd:a5:1c:59:05:c2:e0: 9f:02:94:d7:f2:cd:54:00:20:9e:8d:3a:9a:2b:98: 20:4f:63:b0:f4:89:0d:bf:e1:cd:55:76:c2:20:be: 1d:05:17:44:f6:ce:4f:08:ea:53:5e:aa:b2:14:29: 8d:40:54:17:2d:de:13:66:08:8d:48:5a:ee:20:c5: eb:d3:bb:fc:50:d2:3a:78:3e:45:e2:61:19:4f:05: 32:37:6d:eb:1f:93:ba:f2:e6:b4:90:1a:1f:44:da: 05:7e:65:70:b7:cc:4e:ba:58:4f:ec:67:7c:af:85: f0:41:a5:07:3f:23:aa:e3:3e:22:ca:c9:04:ff:27: 3a:02:5e:1d:09:91:4e:dd:93:0a:57:c4:ce:91:65: 1e:3d:92:4f:5d:81:48:bd:67:ad:72:2f:44:3d:54: 4c:36:c3:11:29:ee:a9:8f:2a:f3:13:07:5a:9e:06: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:0B:30:0C:4D:A5:97:DD:8E:99:CF:D1:0A:36:30:A5:70:BE:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d68fbf28-a017-3e58-b5b1-2f07119d3122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:55:9e:4e:bd:27:24:e5:54:d2:c0:7a:85:f8:00:74:54:8b: 35:12:df:06:43:bc:9d:79:99:c8:58:3a:c4:74:05:3c:a5:16: 94:fa:db:57:7a:2e:14:b2:c4:33:f7:c7:05:55:41:18:68:47: 1c:a2:c0:c7:15:1e:b0:88:35:7f:cd:64:df:4b:ab:cd:9c:13: 26:f4:76:38:5c:1e:a9:a3:0c:52:db:a8:aa:d5:26:84:db:99: 41:ef:e6:12:7b:bb:d6:00:bb:b0:54:bc:cd:7c:e3:12:1c:92: 35:3c:4a:5f:e0:f9:b8:e0:69:ce:dd:f1:8d:a0:e1:16:26:e3: cf:f0:1b:b0:8a:7b:e9:f9:0a:a9:c9:b4:77:24:55:2c:ae:97: ed:00:07:86:70:5c:89:87:1f:eb:c6:f9:3c:80:89:74:37:47: ad:8a:c4:6a:8c:90:e8:f2:4e:cd:c2:37:95:61:01:60:98:ea: af:d4:0c:04:f5:c2:12:7f:12:4b:20:71:7a:1a:ed:b8:5c:ac: 31:e9:5b:c4:93:ac:d0:aa:a4:3c:9f:2d:f7:3f:fd:79:20:3c: 23:85:f3:23:41:6c:04:9d:d8:bc:4a:41:dc:59:56:75:e8:0e: a0:71:93:09:77:d1:d4:63:62:69:2b:a5:e6:57:54:eb:3f:88: b2:42:8f:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWp7iTW3L31sOuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTVhNDZmZDYtOGEwMS00ODM3LWEwZWUtODg0MWVjNTc5NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszMbbWnLMn1RTUFZWlgNdhwrKxZ+9i3cCF0m j/7UpTH5OO6WazEA2NvZw80Tz2nY56o3U8pX5CVhiihlUcuolwN5W0BDvImdxXuy 2azsBCTY5/2lHFkFwuCfApTX8s1UACCejTqaK5ggT2Ow9IkNv+HNVXbCIL4dBRdE 9s5PCOpTXqqyFCmNQFQXLd4TZgiNSFruIMXr07v8UNI6eD5F4mEZTwUyN23rH5O6 8ua0kBofRNoFfmVwt8xOulhP7Gd8r4XwQaUHPyOq4z4iyskE/yc6Al4dCZFO3ZMK V8TOkWUePZJPXYFIvWetci9EPVRMNsMRKe6pjyrzEwdangbonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSfCzAMTaWX3Y6Zz9EKNjClcL4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY4ZmJmMjgtYTAxNy0z ZTU4LWI1YjEtMmYwNzExOWQzMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpVnk69JyTlVNLAeoX4AHRUizUS3wZDvJ15mchYOsR0BTylFpT621d6 LhSyxDP3xwVVQRhoRxyiwMcVHrCINX/NZN9Lq82cEyb0djhcHqmjDFLbqKrVJoTb mUHv5hJ7u9YAu7BUvM184xIckjU8Sl/g+bjgac7d8Y2g4RYm48/wG7CKe+n5CqnJ tHckVSyul+0AB4ZwXImHH+vG+TyAiXQ3R62KxGqMkOjyTs3CN5VhAWCY6q/UDAT1 whJ/EksgcXoa7bhcrDHpW8STrNCqpDyfLfc//XkgPCOF8yNBbASd2LxKQdxZVnXo DqBxkwl30dRjYmkrpeZXVOs/iLJCj3c= -----END CERTIFICATE-----Generated at Mon Mar 2 00:57:14 2026 by rpki-client