$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json) Hash identifier: eg2BOr+c6Q4teNCwmp/PHZpBVEQjZ8jxt5BtHIAqktA= Subject key identifier: 31:27:F3:1C:0B:07:E9:C2:80:51:91:36:8F:31:6F:D9:4A:61:14:B5 Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584CAE57220CC533CAC3A9F1A080 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 16509 IP address blocks: 68.71.224.0/24 maxlen: 24 68.71.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:22:0c:c5:33:ca:c3:a9:f1:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7dda324f-428b-4d16-8fad-3136658843be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:8c:ba:4f:ca:22:a5:2e:98:4d:34:df:74: 65:f3:13:2f:c7:93:fa:4d:a6:99:79:ed:eb:02:1c: 43:e3:e9:17:2e:d6:4b:a1:14:1c:27:90:38:3f:31: 33:cb:29:a3:f4:53:4e:02:2c:e4:65:d6:e1:2b:da: 87:8a:5e:25:4a:03:c4:a1:a6:df:e3:eb:54:84:dc: af:93:7f:57:a5:28:1c:52:bd:a2:56:7e:d4:88:5f: 53:a6:23:b6:6f:af:fb:ae:44:66:3b:99:1b:79:65: 0b:f8:3d:c7:4c:d3:58:c4:73:41:7e:9c:50:de:c2: 13:f1:f4:2a:39:86:99:65:42:50:22:0e:a2:e6:30: 39:4e:3c:ce:f8:92:d9:9d:91:17:c8:19:28:c2:7e: d2:af:04:8a:0b:e1:c2:50:9a:73:43:30:e4:0a:d8: 5b:ef:86:95:77:c1:ba:81:83:db:74:fe:60:6a:6a: fc:e9:a7:1e:05:5f:82:e6:52:7b:ba:93:59:8a:5d: 45:6b:6a:41:0e:c6:1f:88:82:67:e1:a9:76:15:cf: aa:34:ed:79:0a:28:90:18:31:9f:0b:0c:30:22:e2: 27:58:ee:00:6f:3d:ae:4b:59:e1:87:cc:5b:fd:66: f9:4e:70:fe:54:70:a1:f7:f0:28:32:66:7d:5f:05: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:27:F3:1C:0B:07:E9:C2:80:51:91:36:8F:31:6F:D9:4A:61:14:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.224.0/24 68.71.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e5:54:f8:88:bc:05:3c:4f:0e:df:4a:6f:6e:dd:0d:7d:9e: 4c:ce:f3:94:ec:c2:bf:8b:7e:1f:40:6a:6d:52:9c:81:4c:56: 66:36:35:e5:ec:20:9c:64:2e:82:a3:33:ef:59:bf:c7:27:37: f0:ea:11:b6:08:d2:60:3a:34:9b:52:eb:7a:ae:ed:05:e2:db: 4f:2b:1c:3a:df:ed:88:e6:c8:d0:57:90:9d:40:a3:d3:3b:bc: c6:4a:f6:c8:1d:7e:cd:31:d2:9e:1c:48:bd:e6:47:63:50:f5: 8f:4a:8e:52:d0:a8:6a:d8:82:65:93:92:05:37:90:fa:90:18: 3a:94:bf:b9:a6:95:a0:53:ac:5d:b7:72:58:23:b1:df:8f:ce: 28:7b:7d:b3:1c:8b:99:a6:cb:e7:55:c5:37:27:ce:99:80:8b: f7:04:3b:34:54:33:a5:9c:e0:33:31:64:1d:ed:af:c4:bf:74: db:f6:94:a3:ce:4b:7e:42:77:ab:f1:57:b6:5b:25:98:2c:55: 50:91:1f:24:3f:39:41:54:fd:82:1a:cc:10:1b:41:f2:91:2b: 2e:f8:d4:5c:a5:1f:2d:ea:36:8f:29:a1:b2:10:59:c8:2c:30: 5b:bb:d7:25:35:74:fe:1e:36:95:be:a1:cc:3f:3f:90:76:79: 39:ad:8b:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVyIMxTPKw6nxoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2RkYTMyNGYtNDI4Yi00ZDE2LThmYWQtMzEzNjY1ODg0M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi+Muk/KIqUumE0033Rl8xMvx5P6TaaZee3r AhxD4+kXLtZLoRQcJ5A4PzEzyymj9FNOAizkZdbhK9qHil4lSgPEoabf4+tUhNyv k39XpSgcUr2iVn7UiF9TpiO2b6/7rkRmO5kbeWUL+D3HTNNYxHNBfpxQ3sIT8fQq OYaZZUJQIg6i5jA5TjzO+JLZnZEXyBkown7SrwSKC+HCUJpzQzDkCthb74aVd8G6 gYPbdP5gamr86aceBV+C5lJ7upNZil1Fa2pBDsYfiIJn4al2Fc+qNO15CiiQGDGf CwwwIuInWO4Abz2uS1nhh8xb/Wb5TnD+VHCh9/AoMmZ9XwU6uQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDEn8xwLB+nCgFGRNo8xb9lKYRS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAREfgAwQB REfkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI3lVPiIvAU8Tw7fSm9u3Q19nkzO85Tswr+Lfh9Aam1SnIFM VmY2NeXsIJxkLoKjM+9Zv8cnN/DqEbYI0mA6NJtS63qu7QXi208rHDrf7YjmyNBX kJ1Ao9M7vMZK9sgdfs0x0p4cSL3mR2NQ9Y9KjlLQqGrYgmWTkgU3kPqQGDqUv7mm laBTrF23clgjsd+Pzih7fbMci5mmy+dVxTcnzpmAi/cEOzRUM6Wc4DMxZB3tr8S/ dNv2lKPOS35Cd6vxV7ZbJZgsVVCRHyQ/OUFU/YIazBAbQfKRKy741FylHy3qNo8p obIQWcgsMFu71yU1dP4eNpW+ocw/P5B2eTmti78= -----END CERTIFICATE-----Generated at Sat Feb 21 07:27:12 2026 by rpki-client