$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa File: f798be0c-5247-3c68-a564-1239505b2c42.roa (raw, json) Hash identifier: D8lEGcbmt/R4iaFh7kwJgI9bkrYPrCOu7oFJkNsyftQ= Subject key identifier: 73:37:05:07:09:BC:6B:B9:30:68:EC:19:95:D9:D6:51:A9:2A:C9:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BB6EB62474519E4F48F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 68.58.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:b6:eb:62:47:45:19:e4:f4:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b9c60c05-b940-42e8-8544-974ffebd2d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:ac:ec:88:19:7d:1a:4f:0d:1e:f9:a9:1e: 6b:84:be:6d:46:73:76:a4:12:eb:7e:26:5f:d7:d5: ee:24:ab:51:70:71:6a:d7:ed:d5:1c:45:bf:f0:1e: ed:bf:61:41:d4:6a:ff:69:0f:fb:ba:39:e9:c8:fb: 20:6b:14:36:b4:77:d3:e7:ff:47:0b:f5:13:63:e5: 57:77:4d:30:bf:0f:f1:25:c3:77:fd:15:21:c4:4c: 68:6d:6a:e3:28:9b:4a:e0:f6:b9:dd:23:3d:10:17: 71:a3:e9:32:6e:11:d3:91:ae:d4:93:8c:b1:5f:6e: 6d:cb:47:5a:63:fd:42:8a:eb:1f:f4:72:10:47:b7: d1:0c:0c:fa:b0:66:a0:25:be:ec:06:64:eb:9b:e9: a5:f3:6a:52:fa:fe:9c:79:3a:23:50:dd:ae:65:42: d8:64:9d:62:c8:d1:d5:73:7f:e9:92:dd:92:fe:65: 85:98:10:cd:46:74:a5:c7:70:6f:6f:43:6e:5d:cd: 89:26:8f:51:87:dc:df:84:3e:8b:71:9e:0e:6c:f7: 5a:f6:27:ee:f7:99:a4:c6:ec:fb:15:04:8e:87:9b: af:5b:33:73:c7:1e:db:ef:e2:b2:c0:71:3d:57:f8: f6:fb:f5:cc:3b:40:3c:27:c6:2a:67:c1:b0:38:52: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:05:07:09:BC:6B:B9:30:68:EC:19:95:D9:D6:51:A9:2A:C9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f798be0c-5247-3c68-a564-1239505b2c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:44:87:f0:a1:c6:b4:4c:93:0d:d2:13:80:84:ac:d3:7e:52: b9:fe:aa:92:88:61:53:05:bb:76:c8:51:b2:d5:c1:2f:5f:55: 17:c9:d4:90:43:fa:5b:76:97:21:1d:b8:d9:2b:35:85:58:45: ab:e2:fa:eb:a5:0d:4d:a4:52:b9:d0:43:cb:6e:07:92:d1:98: 0c:47:2d:e2:16:1e:5d:98:a8:f9:96:66:31:0d:8e:93:bc:55: 46:86:b3:6e:39:6e:32:2c:d2:78:6e:b2:52:a3:aa:2e:5c:21: 58:e6:ae:69:2e:2f:52:49:be:2c:d1:86:33:fc:e4:c7:74:d6: 73:b1:e0:21:8d:19:3a:0f:0c:87:82:e0:bd:82:b6:54:44:33: b0:f3:c6:f3:58:02:12:10:05:73:6d:97:0a:11:e4:2b:4f:68: 00:ec:69:76:78:e2:4e:5b:b1:77:79:c7:b1:e4:ad:52:c8:d4: 55:02:a9:6a:36:ac:f2:43:88:30:4b:a6:13:b6:42:38:ac:0f: 77:ad:70:f0:04:f6:a4:0c:12:f9:7b:4c:34:77:dd:73:52:24: f8:5d:c4:d5:97:fd:0b:22:08:f6:8a:ba:7c:35:38:54:0e:ac: b3:08:8d:c4:a7:47:f8:ad:3d:a8:10:17:1f:ab:f5:2b:22:01: 6b:58:a7:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW7brYkdFGeT0j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjljNjBjMDUtYjk0MC00MmU4LTg1NDQtOTc0ZmZlYmQyZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA402s7IgZfRpPDR75qR5rhL5tRnN2pBLrfiZf 19XuJKtRcHFq1+3VHEW/8B7tv2FB1Gr/aQ/7ujnpyPsgaxQ2tHfT5/9HC/UTY+VX d00wvw/xJcN3/RUhxExobWrjKJtK4Pa53SM9EBdxo+kybhHTka7Uk4yxX25ty0da Y/1Ciusf9HIQR7fRDAz6sGagJb7sBmTrm+ml82pS+v6ceTojUN2uZULYZJ1iyNHV c3/pkt2S/mWFmBDNRnSlx3Bvb0NuXc2JJo9Rh9zfhD6LcZ4ObPda9ifu95mkxuz7 FQSOh5uvWzNzxx7b7+KywHE9V/j2+/XMO0A8J8YqZ8GwOFJ11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM3BQcJvGu5MGjsGZXZ1lGpKsllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc5OGJlMGMtNTI0Ny0z YzY4LWE1NjQtMTIzOTUwNWIyYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9Eh/ChxrRMkw3SE4CErNN+Urn+qpKIYVMFu3bIUbLVwS9fVRfJ1JBD +lt2lyEduNkrNYVYRavi+uulDU2kUrnQQ8tuB5LRmAxHLeIWHl2YqPmWZjENjpO8 VUaGs245bjIs0nhuslKjqi5cIVjmrmkuL1JJvizRhjP85Md01nOx4CGNGToPDIeC 4L2CtlREM7DzxvNYAhIQBXNtlwoR5CtPaADsaXZ44k5bsXd5x7HkrVLI1FUCqWo2 rPJDiDBLphO2QjisD3etcPAE9qQMEvl7TDR33XNSJPhdxNWX/QsiCPaKunw1OFQO rLMIjcSnR/itPagQFx+r9SsiAWtYp5k= -----END CERTIFICATE-----Generated at Sun Mar 1 19:07:48 2026 by rpki-client