$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: 74t+0aXNYGSi4b7cnKB0MGgXVyMHuVbZhdxOKJtWXus= Subject key identifier: 4F:88:F3:67:9E:47:14:25:DF:EF:5B:EE:E8:1E:9F:4E:A7:F8:F1:BE Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CB121CEE3D7A16F73B76608C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:ce:e3:d7:a1:6f:73:b7:66:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=495abf8a-848f-4a27-a994-0b5ba8302de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:05:ae:46:45:b4:a2:8c:03:a0:6a:7f:b9: 37:3c:7c:7a:ac:dd:0a:c2:7c:4d:73:1f:aa:40:0e: 87:7f:c7:d4:06:12:c3:44:63:f2:b8:db:6c:49:f3: 4e:5b:49:38:fb:01:9a:0a:b0:5d:70:1b:e6:ad:3e: b6:1d:91:05:ef:fc:93:60:d3:cc:11:22:b8:6b:8a: ce:e6:93:33:e0:70:d7:5d:bd:c0:e4:ef:a8:e6:98: 6c:78:b2:60:14:09:7b:d4:04:1f:1a:16:78:b1:cb: dc:b2:45:56:08:c3:3f:d0:85:0c:ae:1c:ff:1a:48: d3:bf:1d:bc:d1:76:0d:d6:29:8c:4b:fa:90:2a:22: 56:04:53:50:19:11:e6:ff:94:de:18:c7:b5:33:e7: 6b:25:b2:59:29:1e:e9:dd:23:bf:7b:91:5a:c1:8c: 23:b8:62:64:c9:be:17:2b:a5:aa:d4:70:57:79:64: c3:f5:ae:01:23:50:39:bf:e4:54:f3:fc:07:90:11: 1e:cb:3b:fa:eb:16:8c:68:6a:78:22:2b:bf:8a:7e: 05:18:54:88:99:9c:62:6c:27:bd:6f:f2:31:3c:56: 8c:84:2c:51:56:81:6c:04:2e:b2:5d:2e:94:8d:37: 2e:aa:49:29:f2:b2:3c:1f:1e:62:d8:c4:09:3b:a9: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:F3:67:9E:47:14:25:DF:EF:5B:EE:E8:1E:9F:4E:A7:F8:F1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f2:e9:00:33:fe:cf:ec:6d:1c:9f:da:d9:6b:42:81:0f:76: 74:f3:f3:63:ed:7b:dd:be:0e:88:64:04:ac:c4:5f:51:40:00: ec:9f:0a:c7:c8:16:47:d4:5e:6c:9a:cb:98:91:e0:01:90:2d: 06:20:bf:91:ee:e5:aa:f2:91:2d:9e:14:b1:1e:f2:f8:ff:c6: 04:8f:e8:62:bf:7a:13:fd:ee:6e:f1:20:4b:95:d7:66:78:be: 37:e4:30:99:92:59:39:5e:5c:f7:ae:be:d4:61:b2:14:86:ba: 16:4e:ef:8f:83:83:f8:bb:53:12:94:be:2f:91:43:e3:b5:fd: 81:46:92:50:2a:86:8f:c1:11:e8:eb:18:de:d3:85:02:7c:be: 97:56:60:72:36:b7:9a:d3:86:dc:d5:a7:5a:bf:0e:56:ce:d9: 83:fe:8b:80:bd:2f:df:1a:ce:91:12:8a:f4:3b:2a:38:cd:7d: f5:37:cc:1c:d3:5a:4d:45:9b:d6:2b:4c:f0:9f:45:75:dc:7e: 19:85:a2:6c:77:f0:af:1b:20:ed:9a:56:b9:cd:6e:b0:62:e9: 13:ab:8c:ca:6f:75:32:de:32:ad:aa:3a:ac:84:fa:6f:b2:55: d8:ca:27:98:5a:44:47:52:80:d5:de:a1:75:a6:a8:30:70:55: f6:00:3d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIc7j16Fvc7dmCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDk1YWJmOGEtODQ4Zi00YTI3LWE5OTQtMGI1YmE4MzAyZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qEFrkZFtKKMA6Bqf7k3PHx6rN0KwnxNcx+q QA6Hf8fUBhLDRGPyuNtsSfNOW0k4+wGaCrBdcBvmrT62HZEF7/yTYNPMESK4a4rO 5pMz4HDXXb3A5O+o5phseLJgFAl71AQfGhZ4scvcskVWCMM/0IUMrhz/GkjTvx28 0XYN1imMS/qQKiJWBFNQGRHm/5TeGMe1M+drJbJZKR7p3SO/e5FawYwjuGJkyb4X K6Wq1HBXeWTD9a4BI1A5v+RU8/wHkBEeyzv66xaMaGp4Iiu/in4FGFSImZxibCe9 b/IxPFaMhCxRVoFsBC6yXS6UjTcuqkkp8rI8Hx5i2MQJO6niLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+I82eeRxQl3+9b7ugen06n+PG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADby6QAz/s/sbRyf2tlrQoEPdnTz82Pte92+DohkBKzEX1FAAOyfCsfI FkfUXmyay5iR4AGQLQYgv5Hu5arykS2eFLEe8vj/xgSP6GK/ehP97m7xIEuV12Z4 vjfkMJmSWTleXPeuvtRhshSGuhZO74+Dg/i7UxKUvi+RQ+O1/YFGklAqho/BEejr GN7ThQJ8vpdWYHI2t5rThtzVp1q/DlbO2YP+i4C9L98azpESivQ7KjjNffU3zBzT Wk1Fm9YrTPCfRXXcfhmFomx38K8bIO2aVrnNbrBi6ROrjMpvdTLeMq2qOqyE+m+y VdjKJ5haREdSgNXeoXWmqDBwVfYAPe4= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:55 2026 by rpki-client