$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5153b6d-9057-3745-bb44-ae560ac57c55.roa File: f5153b6d-9057-3745-bb44-ae560ac57c55.roa (raw, json) Hash identifier: qvpWbY6KiXhwkH8/gfjYQ07dpJcKNfkYb1LAjAjwHes= Subject key identifier: 63:DE:7B:4B:2C:0A:43:E1:20:73:F4:32:E8:F7:E3:3D:72:17:68:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BB5EA6C004C12FA742680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5153b6d-9057-3745-bb44-ae560ac57c55.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.58.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:b5:ea:6c:00:4c:12:fa:74:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ec29c6a6-8345-41e7-90ee-952d406a8f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:44:2f:d5:e5:51:16:99:69:b3:ee:fe:bd: 5b:f4:0d:b6:97:bb:d8:14:f4:ac:bf:fc:f0:6f:c4: 65:79:9f:4d:b9:f9:4c:95:32:49:cd:30:fb:35:4d: 4f:93:da:fb:4b:6d:6f:b2:d8:64:2a:aa:3a:31:d0: 68:9e:18:d9:16:8e:20:2d:27:e5:7f:e2:b6:28:16: 03:4e:4c:8e:c9:b6:c1:b4:10:07:a3:4f:bc:84:99: 53:f7:4c:f0:21:c7:93:81:92:9c:87:d3:21:37:f9: 34:62:78:2b:ca:03:4d:67:0c:6e:ea:3b:6e:87:0e: c3:53:23:18:1c:82:a4:c3:83:3f:06:a7:46:79:8c: 2b:fd:11:39:a0:6c:62:ae:cd:65:4f:2d:4a:08:80: 5f:39:44:dd:d4:9a:ad:ec:63:f0:cc:1d:00:2d:2c: 62:35:d0:bc:49:85:27:83:c4:6e:cd:41:10:a2:bb: 8f:1f:f8:fe:26:e9:d2:68:65:52:3e:02:c9:20:bf: 20:e0:6e:bf:df:e5:5b:a3:fe:51:f5:0e:c4:9a:2e: fc:5c:bf:bd:5b:d2:d8:f1:9b:fe:75:ed:89:29:6e: c9:93:36:65:38:8b:21:1b:7f:44:e8:0d:7e:0b:51: c6:4d:e1:e1:da:b3:57:92:70:25:78:7b:e2:c7:d1: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DE:7B:4B:2C:0A:43:E1:20:73:F4:32:E8:F7:E3:3D:72:17:68:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5153b6d-9057-3745-bb44-ae560ac57c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:37:d5:5b:6a:52:2c:65:26:15:f1:1c:f5:42:e1:a8:3f:8d: 7d:c0:46:48:0b:5c:a8:51:b9:56:f2:59:3e:ec:66:db:5b:ab: cd:7c:86:09:0c:0b:67:42:27:5b:bd:7b:f9:35:15:2b:d1:86: 3c:68:a5:91:34:e8:30:ea:20:81:2b:38:72:88:6c:1d:88:cd: 22:57:ce:9a:cf:06:4e:e7:6d:ce:97:50:e0:7b:bd:c1:3e:d2: 0f:bc:77:e3:9c:ac:6a:4a:9d:72:e5:7c:b7:e8:a4:30:20:ab: c4:b0:fd:14:78:0b:78:e2:7f:7d:22:35:6d:f4:40:47:55:ef: 44:e2:52:77:44:dc:1b:47:59:7b:e5:fc:94:b4:b9:27:c6:14: 71:3e:4d:ed:ab:57:d4:88:3e:40:aa:74:89:d5:53:14:4d:19: 28:a4:33:56:06:81:4a:aa:04:58:71:36:ed:70:53:8b:c1:3c: 24:a1:2b:55:f1:8d:bd:7a:56:e7:3e:a1:4b:19:25:94:eb:bd: 94:55:44:6f:72:e6:00:18:69:21:f8:07:23:4e:c1:bd:5e:3a: 4c:e8:be:84:1a:9c:e8:61:ec:5a:ce:18:2c:0d:12:65:0f:85: 53:de:6b:16:86:ef:11:80:0d:2d:7b:d0:e1:7f:80:25:20:50: 13:7b:82:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW7XqbABMEvp0JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWMyOWM2YTYtODM0NS00MWU3LTkwZWUtOTUyZDQwNmE4ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDREL9XlURaZabPu/r1b9A22l7vYFPSsv/zw b8RleZ9NuflMlTJJzTD7NU1Pk9r7S21vsthkKqo6MdBonhjZFo4gLSflf+K2KBYD TkyOybbBtBAHo0+8hJlT90zwIceTgZKch9MhN/k0YngrygNNZwxu6jtuhw7DUyMY HIKkw4M/BqdGeYwr/RE5oGxirs1lTy1KCIBfOUTd1Jqt7GPwzB0ALSxiNdC8SYUn g8RuzUEQoruPH/j+JunSaGVSPgLJIL8g4G6/3+Vbo/5R9Q7Emi78XL+9W9LY8Zv+ de2JKW7JkzZlOIshG39E6A1+C1HGTeHh2rNXknAleHvix9FxGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPee0ssCkPhIHP0Muj34z1yF2ijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjUxNTNiNmQtOTA1Ny0z NzQ1LWJiNDQtYWU1NjBhYzU3YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw31VtqUixlJhXxHPVC4ag/jX3ARkgLXKhRuVbyWT7sZttbq818hgkM C2dCJ1u9e/k1FSvRhjxopZE06DDqIIErOHKIbB2IzSJXzprPBk7nbc6XUOB7vcE+ 0g+8d+OcrGpKnXLlfLfopDAgq8Sw/RR4C3jif30iNW30QEdV70TiUndE3BtHWXvl /JS0uSfGFHE+Te2rV9SIPkCqdInVUxRNGSikM1YGgUqqBFhxNu1wU4vBPCShK1Xx jb16Vuc+oUsZJZTrvZRVRG9y5gAYaSH4ByNOwb1eOkzovoQanOhh7FrOGCwNEmUP hVPeaxaG7xGADS170OF/gCUgUBN7gmE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:15 2026 by rpki-client