$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa File: df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa (raw, json) Hash identifier: 0IHQ6VTjiV6ZDJSEXFlgdBWdXfrUQTrqqZXPen/XmCg= Subject key identifier: D5:7D:57:9F:AC:06:23:05:78:57:19:15:BA:65:C1:0E:5E:68:37:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B91AC549A0417824ED570 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:91:ac:54:9a:04:17:82:4e:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f5c3e5f5-328b-4e4f-9374-501899c30173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:57:de:33:f0:56:57:fa:00:b4:b1:b9:67: 5e:6a:fa:b9:72:04:b9:30:8c:1f:38:c4:ea:7b:16: 9c:e7:a6:ab:0f:18:68:cd:93:7d:67:ce:91:0e:0c: 23:02:61:48:74:24:90:d2:a2:ff:5b:fe:ce:36:28: ae:5e:b8:de:f6:a3:88:e0:b3:3c:fe:ce:26:35:13: d4:67:53:41:79:f7:c8:fe:d9:74:67:3d:4e:bf:8f: 3d:43:41:15:a1:7b:83:38:9a:64:73:17:02:e5:c0: ec:d9:24:f2:cf:aa:8b:e2:67:dd:b8:4b:d6:41:ed: 7d:54:92:0b:c8:e4:fa:d3:8f:71:91:b0:fa:ec:be: 71:e2:85:d9:83:8e:c7:c1:fa:e4:d0:cb:89:9e:38: 90:37:28:e1:20:0f:b1:6d:d5:e1:75:a1:58:9b:16: 8f:bf:a7:7d:dd:3a:48:97:25:7b:c6:c7:db:1d:bb: 18:f6:31:fb:da:36:07:c5:9b:c0:d9:15:88:dc:93: c9:63:87:a2:65:79:5e:f7:91:07:8a:b1:8d:81:ba: 4c:85:f5:98:f2:db:9d:e9:97:d0:66:ea:fd:a1:c5: 4b:f4:f0:3d:f3:70:36:f2:1d:cc:57:f4:c6:8d:dd: eb:85:8d:f8:a4:d8:97:32:2c:b2:91:cc:e2:e2:70: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7D:57:9F:AC:06:23:05:78:57:19:15:BA:65:C1:0E:5E:68:37:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df252f34-aec1-34e4-aa8b-fa1d6c14c7c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cb:f7:8a:08:87:4d:9d:89:ad:13:56:40:97:57:39:21:61: d2:93:51:cd:7e:ac:4a:f1:f7:f3:0f:13:f2:74:52:39:c0:f2: 8f:67:4e:5e:eb:2c:06:b2:a9:c0:1a:d7:d3:df:33:b0:f4:8e: ea:9e:68:27:e0:84:a3:29:47:f6:09:50:30:a5:b1:93:09:a2: c7:dd:9f:92:03:f2:fd:ff:97:04:33:1b:76:63:3a:b4:a9:8c: e3:d0:cb:51:92:1d:dc:d6:d8:45:5f:1c:76:cc:cf:27:17:17: f1:0b:ab:f0:5e:12:4b:4c:e9:33:be:bd:f7:87:19:ce:5e:16: 8b:64:03:1d:b4:21:46:1c:75:05:a1:52:74:a5:e4:5f:45:13: 35:00:12:9b:1e:b4:f6:48:9b:6e:54:66:4c:1d:d7:71:35:c0: ca:24:2d:d4:af:c7:39:5f:b7:fa:9b:31:67:1b:dd:20:90:4c: 0e:4f:ab:94:c7:b1:d9:b9:68:60:66:9e:ea:bd:c4:70:93:34: e0:57:1d:2d:a8:ee:3e:67:60:2f:dd:21:4b:99:a2:0a:6f:7f: 3c:88:81:d3:e0:8a:5a:7f:e9:cb:ee:06:10:8d:8b:0a:05:79: af:9e:f9:e6:1b:4f:32:70:75:62:aa:bc:6e:80:79:f3:c8:18: bb:80:e6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5GsVJoEF4JO1XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjVjM2U1ZjUtMzI4Yi00ZTRmLTkzNzQtNTAxODk5YzMwMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR1X3jPwVlf6ALSxuWdeavq5cgS5MIwfOMTq exac56arDxhozZN9Z86RDgwjAmFIdCSQ0qL/W/7ONiiuXrje9qOI4LM8/s4mNRPU Z1NBeffI/tl0Zz1Ov489Q0EVoXuDOJpkcxcC5cDs2STyz6qL4mfduEvWQe19VJIL yOT6049xkbD67L5x4oXZg47Hwfrk0MuJnjiQNyjhIA+xbdXhdaFYmxaPv6d93TpI lyV7xsfbHbsY9jH72jYHxZvA2RWI3JPJY4eiZXle95EHirGNgbpMhfWY8tud6ZfQ Zur9ocVL9PA983A28h3MV/TGjd3rhY34pNiXMiyykczi4nAQIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV9V5+sBiMFeFcZFbplwQ5eaDfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYyNTJmMzQtYWVjMS0z NGU0LWFhOGItZmExZDZjMTRjN2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCb2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7L94oIh02dia0TVkCXVzkhYdKTUc1+rErx9/MPE/J0UjnA8o9nTl7r LAayqcAa19PfM7D0juqeaCfghKMpR/YJUDClsZMJosfdn5ID8v3/lwQzG3ZjOrSp jOPQy1GSHdzW2EVfHHbMzycXF/ELq/BeEktM6TO+vfeHGc5eFotkAx20IUYcdQWh UnSl5F9FEzUAEpsetPZIm25UZkwd13E1wMokLdSvxzlft/qbMWcb3SCQTA5Pq5TH sdm5aGBmnuq9xHCTNOBXHS2o7j5nYC/dIUuZogpvfzyIgdPgilp/6cvuBhCNiwoF ea+e+eYbTzJwdWKqvG6AefPIGLuA5ow= -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:45 2026 by rpki-client