$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3890b99-ad74-3d9a-a450-717e9e64e05a.roa File: f3890b99-ad74-3d9a-a450-717e9e64e05a.roa (raw, json) Hash identifier: YdEuiNLe4FE3IAMfrW4Mm6QfBfqVnpHOHGfrBIuSfdA= Subject key identifier: 6C:26:BC:07:80:26:EC:D7:26:95:72:00:15:56:05:78:5A:95:26:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5AA2CD34159C62FA91A000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3890b99-ad74-3d9a-a450-717e9e64e05a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 68.80.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:a2:cd:34:15:9c:62:fa:91:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=edc05465-c215-4b13-b6c7-d7d6566cabfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:3a:58:4d:17:30:2f:51:22:82:47:c1:ef: fd:e6:7c:07:8c:9e:35:70:9d:58:b0:85:1d:14:92: 5e:99:0a:61:d6:c6:d0:f0:55:5b:36:b8:0a:b2:88: 2a:d9:1c:90:ef:15:04:0d:6b:4c:73:9d:31:10:52: c0:88:6b:ee:4a:82:70:44:ed:68:f1:ba:29:f9:cd: 2d:c1:e9:3a:59:6b:0c:76:23:fc:40:74:6f:a4:99: d7:8a:d9:d7:5e:65:31:c5:5f:9f:34:36:ef:38:b1: 0b:d3:79:d2:68:4b:db:05:1f:f7:3f:91:1a:eb:72: 46:6c:2d:06:95:f4:9f:11:05:43:17:82:68:18:33: f4:9f:8d:b9:64:4f:0a:9e:50:72:65:f5:48:a1:84: 35:4d:29:24:2c:fa:29:d8:ff:04:39:59:ed:74:52: 88:d2:08:84:0a:5b:96:05:d6:fa:6c:01:d0:9f:18: 71:63:fe:7f:7f:72:ba:72:14:0a:b8:c8:04:13:0b: 83:51:3b:05:d5:f6:32:46:22:d1:93:3d:5c:f8:1c: 5b:ae:3a:48:7f:12:65:10:bb:ba:14:cb:d9:92:10: dd:62:45:8e:e1:0b:e0:6b:8f:27:27:1a:e3:2b:11: 37:24:f8:84:b5:e4:83:08:34:1d:49:6f:42:a4:7e: a5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:BC:07:80:26:EC:D7:26:95:72:00:15:56:05:78:5A:95:26:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3890b99-ad74-3d9a-a450-717e9e64e05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.80.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5a:39:40:4d:38:b1:51:b8:67:a9:c5:57:99:a4:a1:d6:54: 4c:31:f2:1f:86:fa:cc:d6:9e:d6:9b:29:b9:db:38:d5:05:8e: d8:3d:07:2a:8b:0f:c8:f9:4e:6b:42:46:f2:af:b8:94:d4:45: 0f:a9:9c:a5:32:a7:f6:5e:1d:ee:59:3c:14:21:9d:f3:80:b8: f6:47:77:2e:48:8d:7a:43:2d:57:44:a3:45:47:0f:cc:12:79: 0c:11:95:e8:d6:04:b3:e8:f8:dd:38:16:4a:f4:5b:1e:61:d8: 2a:a3:99:37:b7:2e:1d:b4:ee:ac:3a:17:47:b5:06:09:0a:49: 99:4f:df:31:47:bc:4a:f7:60:23:a9:b1:bf:50:37:a9:ad:8c: 6e:7a:73:4f:6c:02:af:8c:82:e7:16:70:a3:e0:98:0a:cc:bc: 68:1e:12:24:37:a3:df:e8:a9:4e:b2:e5:82:06:ff:f7:d3:fe: 57:11:50:6f:87:99:d4:2d:e0:ac:86:85:0e:29:32:71:02:c5: 13:2f:b6:f0:3b:81:f3:63:39:9f:cc:25:fd:0a:33:9a:d5:de: 44:92:8d:32:5f:12:dd:40:44:7d:35:72:78:91:42:8f:c9:a7: a6:60:ef:d5:8e:cc:93:84:6a:2b:ce:37:18:1a:6f:3f:83:1c: 11:6d:b6:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWqLNNBWcYvqRoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWRjMDU0NjUtYzIxNS00YjEzLWI2YzctZDdkNjU2NmNhYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zI6WE0XMC9RIoJHwe/95nwHjJ41cJ1YsIUd FJJemQph1sbQ8FVbNrgKsogq2RyQ7xUEDWtMc50xEFLAiGvuSoJwRO1o8bop+c0t wek6WWsMdiP8QHRvpJnXitnXXmUxxV+fNDbvOLEL03nSaEvbBR/3P5Ea63JGbC0G lfSfEQVDF4JoGDP0n425ZE8KnlByZfVIoYQ1TSkkLPop2P8EOVntdFKI0giECluW Bdb6bAHQnxhxY/5/f3K6chQKuMgEEwuDUTsF1fYyRiLRkz1c+BxbrjpIfxJlELu6 FMvZkhDdYkWO4Qvga48nJxrjKxE3JPiEteSDCDQdSW9CpH6lSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwmvAeAJuzXJpVyABVWBXhalSZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM4OTBiOTktYWQ3NC0z ZDlhLWE0NTAtNzE3ZTllNjRlMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpaOUBNOLFRuGepxVeZpKHWVEwx8h+G+szWntabKbnbONUFjtg9ByqL D8j5TmtCRvKvuJTURQ+pnKUyp/ZeHe5ZPBQhnfOAuPZHdy5IjXpDLVdEo0VHD8wS eQwRlejWBLPo+N04Fkr0Wx5h2CqjmTe3Lh207qw6F0e1BgkKSZlP3zFHvEr3YCOp sb9QN6mtjG56c09sAq+MgucWcKPgmArMvGgeEiQ3o9/oqU6y5YIG//fT/lcRUG+H mdQt4KyGhQ4pMnECxRMvtvA7gfNjOZ/MJf0KM5rV3kSSjTJfEt1ARH01cniRQo/J p6Zg79WOzJOEaivONxgabz+DHBFttrY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:57:12 2026 by rpki-client