$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21a63bd-f149-3507-854d-023f4ba6752b.roa File: f21a63bd-f149-3507-854d-023f4ba6752b.roa (raw, json) Hash identifier: AXRSW5Ogx2xbTpSG6yAMV9COkU/cm8f6b3kdgrMJKoY= Subject key identifier: 51:82:3A:40:6C:B7:1C:2F:9E:0D:F0:43:1C:CA:0F:9C:BA:F4:B3:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5808C6FD1701AF30F65880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21a63bd-f149-3507-854d-023f4ba6752b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.38.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:08:c6:fd:17:01:af:30:f6:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b2a7ae53-ec7d-4125-a0a3-c657c3acb3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:ed:df:80:1b:d4:bf:12:3c:10:a5:3d:fd: 41:f4:32:12:ef:42:a3:55:ea:0d:2d:b3:f9:31:34: c9:d6:7f:e7:b8:e5:8b:45:49:88:93:1d:8b:89:d2: 4b:df:88:28:c4:ae:ca:2f:64:50:11:dd:23:67:b4: 9a:3d:b8:6b:65:11:14:fe:5c:07:9a:da:06:3b:f7: d6:99:85:95:ec:92:fa:d8:20:ce:71:70:ae:64:b3: ce:cc:7f:2f:24:bd:2b:b1:e7:0c:6b:87:59:ff:c4: 11:e9:39:48:ca:8f:8b:7f:d7:f7:5c:5f:6e:6c:99: 96:31:53:9e:9b:9b:ba:ac:9a:4a:fc:a5:80:9e:5d: c5:3b:8a:93:9f:a5:ae:7c:27:45:fc:9d:6e:d1:04: eb:d2:18:22:dd:cc:b2:7c:a2:d9:3e:c9:f8:a0:f0: 29:79:3d:2f:62:03:db:ac:4c:75:0f:2f:28:93:d9: bc:da:37:bf:25:e5:cb:9f:69:1f:d9:dc:5d:35:bf: 29:f1:18:f0:24:b2:2d:8a:0c:03:c6:1a:c9:c8:80: ec:48:be:b5:bd:58:01:c8:ea:33:4a:09:58:02:14: c5:b2:18:70:0b:32:4e:db:f4:77:c8:d7:c2:3a:ed: 23:13:17:5a:9a:df:f7:e4:06:28:5e:62:48:90:2e: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:82:3A:40:6C:B7:1C:2F:9E:0D:F0:43:1C:CA:0F:9C:BA:F4:B3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21a63bd-f149-3507-854d-023f4ba6752b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f2:a2:c6:4c:6f:3a:13:ed:5e:58:fc:4b:69:71:2f:47:85: a2:08:e6:7f:04:9b:d6:37:18:db:a6:c7:68:9f:20:0c:35:78: d4:e7:c5:ea:c6:76:8b:94:ba:1a:44:e0:44:73:42:12:bc:2b: 94:b1:bb:0b:13:7a:6b:f5:3f:83:48:3d:68:0b:44:88:d1:5a: bd:1c:80:56:3d:4a:91:2b:56:8a:ce:bd:95:60:e1:e7:c6:35: 63:2e:ca:8b:36:5a:1f:24:c1:d8:b9:5d:6a:c2:07:db:5a:4d: 62:7b:19:32:86:c3:d6:00:a4:f9:74:c8:e6:73:82:26:78:74: 78:4d:ca:4a:ac:7b:2d:00:c1:07:5e:aa:89:0b:73:f1:f9:55: b1:ab:3c:2f:cc:4f:52:c2:7f:78:a0:f8:07:0d:17:b0:bd:e5: d1:d5:e6:ca:26:00:61:e1:1c:53:3f:08:87:a7:02:b1:9b:d2: 00:ba:2b:5c:81:3e:01:46:4a:87:96:af:a1:89:a1:af:d6:f8: a6:6c:23:ac:66:cf:26:a4:37:59:4c:5b:e7:08:a1:39:e3:9f: 72:d2:17:9d:d4:50:15:e5:7c:89:a8:9c:19:da:5d:fb:18:48: 4d:d0:3b:f4:2c:0c:37:52:47:3d:34:d1:d3:c5:2d:fc:99:d3: a2:48:40:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWAjG/RcBrzD2WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjJhN2FlNTMtZWM3ZC00MTI1LWEwYTMtYzY1N2MzYWNiM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpTt34Ab1L8SPBClPf1B9DIS70KjVeoNLbP5 MTTJ1n/nuOWLRUmIkx2LidJL34goxK7KL2RQEd0jZ7SaPbhrZREU/lwHmtoGO/fW mYWV7JL62CDOcXCuZLPOzH8vJL0rsecMa4dZ/8QR6TlIyo+Lf9f3XF9ubJmWMVOe m5u6rJpK/KWAnl3FO4qTn6WufCdF/J1u0QTr0hgi3cyyfKLZPsn4oPApeT0vYgPb rEx1Dy8ok9m82je/JeXLn2kf2dxdNb8p8RjwJLItigwDxhrJyIDsSL61vVgByOoz SglYAhTFshhwCzJO2/R3yNfCOu0jExdamt/35AYoXmJIkC4ndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGCOkBstxwvng3wQxzKD5y69LPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIxYTYzYmQtZjE0OS0z NTA3LTg1NGQtMDIzZjRiYTY3NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITyosZMbzoT7V5Y/EtpcS9HhaII5n8Em9Y3GNumx2ifIAw1eNTnxerG douUuhpE4ERzQhK8K5SxuwsTemv1P4NIPWgLRIjRWr0cgFY9SpErVorOvZVg4efG NWMuyos2Wh8kwdi5XWrCB9taTWJ7GTKGw9YApPl0yOZzgiZ4dHhNykqsey0AwQde qokLc/H5VbGrPC/MT1LCf3ig+AcNF7C95dHV5somAGHhHFM/CIenArGb0gC6K1yB PgFGSoeWr6GJoa/W+KZsI6xmzyakN1lMW+cIoTnjn3LSF53UUBXlfImonBnaXfsY SE3QO/QsDDdSRz000dPFLfyZ06JIQDY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:22:36 2026 by rpki-client