$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3584430-e0fe-3f6d-ad47-459adcc332fe.roa File: f3584430-e0fe-3f6d-ad47-459adcc332fe.roa (raw, json) Hash identifier: VVmK2sfNQRkY8KRioL68Fk2BkM/tn5xEt6Zui42qEU4= Subject key identifier: B0:A3:A6:FE:92:69:F4:15:2B:4A:E0:59:0D:46:4A:3B:BE:D1:0F:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D0EA7C4D76CAD9E6B8F3DC300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3584430-e0fe-3f6d-ad47-459adcc332fe.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 33661 IP address blocks: 68.85.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:c4:d7:6c:ad:9e:6b:8f:3d:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ce2a9a72-f971-4f75-9dae-16edec114ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:df:b2:7b:41:60:5f:f2:44:dd:6d:f3:68: c1:42:07:d5:13:e7:a5:1d:2c:29:25:6e:68:26:bc: a5:0d:c9:09:16:7f:0e:f9:48:e7:11:2b:43:bc:a1: 6e:00:e6:9c:b1:67:f5:c3:f3:db:0c:9e:fd:a3:4d: 83:86:25:a9:de:c1:27:f7:d7:f3:01:22:b9:b4:31: aa:28:cf:d7:16:6e:41:36:8e:39:7b:dd:a0:28:c9: 7c:45:ff:cd:b8:2b:b4:46:a8:9e:ec:47:f2:f0:78: 75:5a:4c:57:bb:9a:0e:79:89:9d:29:35:a2:91:9b: 05:3f:6b:f7:be:c0:c0:53:64:2a:a9:57:e5:42:08: 52:a6:1b:d7:72:b8:a4:03:02:0a:2e:f8:00:02:52: 5c:71:f0:6f:19:ea:84:73:89:e9:19:4b:d7:c6:8c: 73:a5:9f:1c:ca:2a:b2:07:c6:b4:fb:95:c9:4a:54: 78:0f:74:8d:28:c2:6f:06:6e:d2:25:73:9a:11:2b: 47:2f:9d:41:4d:bb:ea:42:4e:63:f8:78:cd:a2:b3: ee:d3:aa:bc:72:18:74:7e:9f:8a:ef:f9:1c:86:42: 69:43:22:80:4c:8b:cf:23:fc:b3:cd:f9:96:28:9b: b5:a7:9f:bf:06:d4:16:3a:2b:b4:cb:ed:1b:5b:a7: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A3:A6:FE:92:69:F4:15:2B:4A:E0:59:0D:46:4A:3B:BE:D1:0F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3584430-e0fe-3f6d-ad47-459adcc332fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:b0:4b:39:75:5e:f1:66:73:1d:0c:e9:c8:2c:6d:e4:76:a5: 6c:a4:de:5e:47:7b:63:b5:ed:96:00:df:92:df:e3:87:ad:ec: 75:32:0d:14:a9:00:e4:da:1c:b8:55:a7:ef:7b:de:2b:25:92: 5c:84:51:79:98:bf:48:4a:6f:57:ed:02:03:38:3b:fb:d4:27: 39:e9:8c:33:38:12:1e:f6:79:e7:3d:78:08:4d:32:db:42:7e: 62:74:38:f1:01:12:03:ed:51:1e:0a:d4:66:95:b0:29:93:11: 72:a8:ae:d0:91:77:c0:06:3a:77:33:5e:24:9c:48:02:cd:4d: dc:d8:64:93:8b:b5:85:d1:00:14:18:45:8b:56:03:b0:5a:0e: ca:9f:87:91:4d:37:c0:67:bf:b5:da:30:9a:4d:ed:65:cf:a0: 48:67:e0:10:97:34:27:47:5c:10:a4:ab:ca:78:8f:7c:e2:d9: 7b:06:3f:57:42:c9:ad:50:70:e7:0d:8d:f6:9f:1b:25:f7:cb: 9a:81:ce:55:a0:d3:a5:e8:e4:74:94:4a:9b:53:ff:99:c4:11: 60:db:01:60:2a:ff:34:f2:13:6b:4a:a2:9f:5f:f5:b0:5e:42: c2:71:54:df:fd:07:dd:11:2e:1f:5f:89:f4:6d:04:b3:0e:07: 70:6b:dc:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8TXbK2ea489wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk Y2UyYTlhNzItZjk3MS00Zjc1LTlkYWUtMTZlZGVjMTE0ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c3fsntBYF/yRN1t82jBQgfVE+elHSwpJW5o JrylDckJFn8O+UjnEStDvKFuAOacsWf1w/PbDJ79o02DhiWp3sEn99fzASK5tDGq KM/XFm5BNo45e92gKMl8Rf/NuCu0Rqie7Efy8Hh1WkxXu5oOeYmdKTWikZsFP2v3 vsDAU2QqqVflQghSphvXcrikAwIKLvgAAlJccfBvGeqEc4npGUvXxoxzpZ8cyiqy B8a0+5XJSlR4D3SNKMJvBm7SJXOaEStHL51BTbvqQk5j+HjNorPu06q8chh0fp+K 7/kchkJpQyKATIvPI/yzzfmWKJu1p5+/BtQWOiu0y+0bW6fOvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCjpv6SafQVK0rgWQ1GSju+0Q/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjM1ODQ0MzAtZTBmZS0z ZjZkLWFkNDctNDU5YWRjYzMzMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGwSzl1XvFmcx0M6cgsbeR2pWyk3l5He2O17ZYA35Lf44et7HUyDRSp AOTaHLhVp+973islklyEUXmYv0hKb1ftAgM4O/vUJznpjDM4Eh72eec9eAhNMttC fmJ0OPEBEgPtUR4K1GaVsCmTEXKortCRd8AGOnczXiScSALNTdzYZJOLtYXRABQY RYtWA7BaDsqfh5FNN8Bnv7XaMJpN7WXPoEhn4BCXNCdHXBCkq8p4j3zi2XsGP1dC ya1QcOcNjfafGyX3y5qBzlWg06Xo5HSUSptT/5nEEWDbAWAq/zTyE2tKop9f9bBe QsJxVN/9B90RLh9fifRtBLMOB3Br3Fw= -----END CERTIFICATE-----Generated at Sat Mar 7 10:17:10 2026 by rpki-client