$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa File: e120a7dc-4299-358a-9dda-66d35750d320.roa (raw, json) Hash identifier: 5KdhWfXOz869RapdUNhU43nWDH6iEsVOzMB1r6yt5BM= Subject key identifier: E8:B7:BA:0F:0E:EF:19:BF:1A:4C:00:51:36:59:C1:D3:2F:3D:C4:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BAEDE4B2A3DB4DFBC6900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.54.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:ae:de:4b:2a:3d:b4:df:bc:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=69f8ed5f-723a-4c88-bdbf-c6de893445ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:e4:0d:aa:fa:ca:32:52:da:ed:8e:03:33: 4d:76:ae:05:86:c0:c4:57:b7:cd:17:7d:af:7f:e8: 9c:3b:c9:e7:26:91:6a:fb:27:e3:b9:a5:a6:af:df: 24:ac:c3:f0:a6:56:57:c0:08:5b:6b:8c:76:c9:71: 09:04:bb:9d:8e:b0:8d:c6:75:39:0d:0e:3a:5e:29: 3f:91:5f:11:44:67:c7:37:50:df:22:0c:3f:04:b6: 84:fc:71:a4:bd:3f:02:38:70:09:c0:02:7a:f6:8e: 34:62:df:b2:f7:52:b0:2d:bd:48:b7:4f:94:17:8f: 4f:86:9a:46:84:95:23:c1:0b:c0:ec:f9:39:72:51: e6:2f:33:96:66:6d:bd:fc:a4:2b:48:23:ba:fb:59: f0:81:78:fe:a7:13:e0:2f:df:ef:15:5c:8b:99:d5: 63:ba:5a:69:22:00:47:97:93:07:4a:b8:b8:5c:03: 89:5a:05:ac:21:b6:df:70:3a:12:ca:e1:d6:e0:62: 28:68:9f:9e:2e:75:e8:b5:e1:5c:0a:bb:ea:8c:fa: 9d:01:dd:89:24:60:a8:67:4f:02:14:0a:7d:65:ad: ce:1c:e8:1a:00:b1:8a:33:ca:20:80:1c:5d:dc:2f: 31:e7:7b:ec:10:48:f3:a1:67:61:b7:a5:40:78:08: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B7:BA:0F:0E:EF:19:BF:1A:4C:00:51:36:59:C1:D3:2F:3D:C4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e120a7dc-4299-358a-9dda-66d35750d320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.54.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:12:5f:e8:88:85:8c:71:24:ff:b0:7b:be:ef:6b:40:d9:0a: cc:84:d2:a5:b8:5f:96:f6:c9:52:84:58:bc:81:b0:92:d8:ad: 8d:cc:32:da:00:44:91:a3:d8:78:1c:99:12:c9:a3:45:bc:81: 3f:5b:ba:12:3f:4c:74:e8:c1:02:61:5d:d3:8a:7e:7f:00:3a: 9c:7e:32:f1:97:47:48:dd:4d:d1:3d:bc:84:55:88:a9:46:ce: a3:19:90:6a:60:93:b9:50:04:ed:4a:d4:8e:88:06:e4:2c:de: d0:53:d2:71:3c:89:ce:46:18:a6:b8:bd:d5:4b:32:ff:96:0e: 25:3c:35:30:df:90:5f:40:1d:77:11:9c:b7:50:9c:f8:2a:5a: 92:03:0e:a2:6f:13:ba:63:d1:4a:63:f2:48:78:c8:52:d6:23: 1f:23:db:07:69:2d:e1:1a:ac:48:24:06:16:07:bf:cd:cf:02: 1f:ae:9b:bd:bd:61:c1:f8:9e:15:5e:22:34:8f:8c:c9:9e:c3: 20:d3:b0:d4:3a:8c:d3:bd:24:80:d1:48:f5:71:b2:b9:93:53: 64:60:a3:a8:43:ab:67:1f:fb:92:f9:98:09:41:e4:50:99:c2: 4d:b0:45:e3:23:20:7d:a0:aa:cc:44:70:2d:2e:a4:09:13:63: f1:36:22:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW67eSyo9tN+8aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjlmOGVkNWYtNzIzYS00Yzg4LWJkYmYtYzZkZTg5MzQ0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS3kDar6yjJS2u2OAzNNdq4FhsDEV7fNF32v f+icO8nnJpFq+yfjuaWmr98krMPwplZXwAhba4x2yXEJBLudjrCNxnU5DQ46Xik/ kV8RRGfHN1DfIgw/BLaE/HGkvT8COHAJwAJ69o40Yt+y91KwLb1It0+UF49PhppG hJUjwQvA7Pk5clHmLzOWZm29/KQrSCO6+1nwgXj+pxPgL9/vFVyLmdVjulppIgBH l5MHSri4XAOJWgWsIbbfcDoSyuHW4GIoaJ+eLnXoteFcCrvqjPqdAd2JJGCoZ08C FAp9Za3OHOgaALGKM8oggBxd3C8x53vsEEjzoWdht6VAeAhuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi3ug8O7xm/GkwAUTZZwdMvPcQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTEyMGE3ZGMtNDI5OS0z NThhLTlkZGEtNjZkMzU3NTBkMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANwSX+iIhYxxJP+we77va0DZCsyE0qW4X5b2yVKEWLyBsJLYrY3MMtoA RJGj2HgcmRLJo0W8gT9buhI/THTowQJhXdOKfn8AOpx+MvGXR0jdTdE9vIRViKlG zqMZkGpgk7lQBO1K1I6IBuQs3tBT0nE8ic5GGKa4vdVLMv+WDiU8NTDfkF9AHXcR nLdQnPgqWpIDDqJvE7pj0Upj8kh4yFLWIx8j2wdpLeEarEgkBhYHv83PAh+um729 YcH4nhVeIjSPjMmewyDTsNQ6jNO9JIDRSPVxsrmTU2Rgo6hDq2cf+5L5mAlB5FCZ wk2wReMjIH2gqsxEcC0upAkTY/E2Iu8= -----END CERTIFICATE-----Generated at Sun Mar 1 19:02:31 2026 by rpki-client