$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9102c35-6c01-3db5-863b-7a5e4d4ea022.roa File: d9102c35-6c01-3db5-863b-7a5e4d4ea022.roa (raw, json) Hash identifier: ZTfX4xRTZP1kv35yP6PyaqNLQBT1uzRmXQBWpc49TRM= Subject key identifier: 54:09:2A:0D:01:C7:D3:82:C4:F3:2B:AD:A2:BC:D1:4F:27:72:CF:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B960F113A9DFF6C934580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9102c35-6c01-3db5-863b-7a5e4d4ea022.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.39.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:96:0f:11:3a:9d:ff:6c:93:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e8663b4f-e85c-4f7b-8976-8cc689a3c800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:4f:76:28:32:43:1a:be:16:a5:c1:3d:b7: 14:93:63:7f:48:a7:5d:59:84:90:7f:3f:87:04:7c: ac:c4:bd:6c:cf:1d:04:8a:1f:40:d7:26:32:ad:f4: 45:1c:4d:23:04:53:06:81:6f:b4:ff:59:ac:5d:69: 5a:82:79:ec:fe:d7:df:16:89:8a:0e:90:6a:b2:41: c2:0e:9e:96:ed:6d:f7:84:9b:30:04:0a:9c:bd:f5: 54:73:ba:c3:de:e4:0a:73:f8:73:c6:43:19:b4:91: 91:4c:b4:ef:15:3c:ca:ff:78:c9:fb:e3:21:29:82: f4:1b:58:69:54:3b:a1:07:2d:ee:76:95:0c:9e:2d: b5:9d:ff:de:bb:5f:dc:26:d5:4b:4a:c3:cd:1b:5b: 36:82:98:cf:ee:6d:d5:c7:83:c2:df:78:68:19:7e: d9:84:f7:b0:c9:d0:0e:aa:3a:da:06:44:ea:de:6a: 40:d5:db:d2:28:2e:11:6e:04:dd:c8:40:04:41:5b: 83:cb:cf:88:48:22:b7:5b:c4:96:43:e4:8b:38:1f: a9:32:35:91:88:73:07:af:bb:4d:30:1b:eb:20:8f: ce:4b:ba:19:18:86:27:40:e6:4d:8b:2a:32:d6:96: 07:65:f7:c8:42:83:c2:4a:dc:eb:f7:68:58:d2:3a: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:09:2A:0D:01:C7:D3:82:C4:F3:2B:AD:A2:BC:D1:4F:27:72:CF:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9102c35-6c01-3db5-863b-7a5e4d4ea022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:64:14:13:82:35:d8:c6:95:82:69:27:be:a8:0a:88:ac:fd: e9:f5:74:08:20:ee:23:92:bb:98:91:68:56:72:84:7e:56:0f: e8:03:c8:24:ae:2b:46:e4:31:2f:99:2d:a2:b4:4e:12:45:a5: 8b:e3:97:40:16:45:89:4c:80:1e:51:f5:00:e1:ea:7c:b8:2a: 4e:31:73:8e:c1:3f:bb:17:00:31:71:24:9c:d0:c3:4a:ac:53: d9:91:4e:c8:f0:07:94:d1:56:95:31:52:43:62:3b:a8:68:ff: 48:ce:39:38:43:f2:34:c8:3a:87:16:21:9a:72:5c:00:04:ed: 58:e0:fd:01:72:96:bb:bf:e5:75:a2:1a:98:cc:70:c7:9d:b5: 10:c1:7a:9b:e4:bf:e9:03:79:97:cc:bc:82:54:1c:9f:7b:5c: 1c:bb:03:f1:3b:18:c5:ce:a5:4b:24:de:52:06:d9:47:e8:60: 65:0a:13:65:7c:bd:c8:66:6d:ca:e5:16:f8:e3:43:45:19:0f: 87:05:39:38:b6:98:b8:df:ea:34:40:56:8f:60:ff:03:87:17: 39:1a:dd:b2:0c:b7:ad:fc:ef:4a:e7:1b:bc:bd:5f:bb:0b:02: e1:f5:68:a9:86:ac:c1:cf:2c:c6:1e:e1:9c:40:55:36:5f:b3: bb:df:a9:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5YPETqd/2yTRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTg2NjNiNGYtZTg1Yy00ZjdiLTg5NzYtOGNjNjg5YTNjODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBPdigyQxq+FqXBPbcUk2N/SKddWYSQfz+H BHysxL1szx0Eih9A1yYyrfRFHE0jBFMGgW+0/1msXWlagnns/tffFomKDpBqskHC Dp6W7W33hJswBAqcvfVUc7rD3uQKc/hzxkMZtJGRTLTvFTzK/3jJ++MhKYL0G1hp VDuhBy3udpUMni21nf/eu1/cJtVLSsPNG1s2gpjP7m3Vx4PC33hoGX7ZhPewydAO qjraBkTq3mpA1dvSKC4RbgTdyEAEQVuDy8+ISCK3W8SWQ+SLOB+pMjWRiHMHr7tN MBvrII/OS7oZGIYnQOZNiyoy1pYHZffIQoPCStzr92hY0jpFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQJKg0Bx9OCxPMrraK80U8ncs/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkxMDJjMzUtNmMwMS0z ZGI1LTg2M2ItN2E1ZTRkNGVhMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJkFBOCNdjGlYJpJ76oCois/en1dAgg7iOSu5iRaFZyhH5WD+gDyCSu K0bkMS+ZLaK0ThJFpYvjl0AWRYlMgB5R9QDh6ny4Kk4xc47BP7sXADFxJJzQw0qs U9mRTsjwB5TRVpUxUkNiO6ho/0jOOThD8jTIOocWIZpyXAAE7Vjg/QFylru/5XWi GpjMcMedtRDBepvkv+kDeZfMvIJUHJ97XBy7A/E7GMXOpUsk3lIG2UfoYGUKE2V8 vchmbcrlFvjjQ0UZD4cFOTi2mLjf6jRAVo9g/wOHFzka3bIMt63870rnG7y9X7sL AuH1aKmGrMHPLMYe4ZxAVTZfs7vfqdw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:46 2026 by rpki-client