$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c2e21e-b650-38ab-a4c7-257e7d0078d1.roa File: 00c2e21e-b650-38ab-a4c7-257e7d0078d1.roa (raw, json) Hash identifier: EEJWHtrRMP3u8n6SNUGF0C6wtLfG1ZC0daR6xbkuEkc= Subject key identifier: 3D:65:91:E9:4D:75:74:F7:97:18:61:E1:36:44:2F:AF:11:47:21:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4386F813BEB9FBD70680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c2e21e-b650-38ab-a4c7-257e7d0078d1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.41.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:43:86:f8:13:be:b9:fb:d7:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=664eeeae-58f9-4c9c-bf62-b7b1c749de88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:10:c7:c2:8b:76:85:5c:7e:93:8d:2a:aa: 21:a0:7a:45:de:e6:18:4e:00:88:fe:29:ef:cf:3e: fc:99:1b:4c:c4:a6:97:37:be:96:a7:5a:be:16:aa: 42:6c:22:f8:f4:ec:61:24:7a:37:88:b6:7c:3b:f9: 8d:a9:7a:38:78:83:74:f2:18:fa:af:a2:b5:e3:f7: 69:60:1a:f7:6f:b9:33:78:c6:c9:5f:e9:1d:c6:8e: 93:24:0e:2f:4a:ed:81:02:bd:91:4c:3c:f0:09:08: 7d:ab:37:1c:77:48:96:56:ea:91:d5:97:b4:6a:f0: e1:25:c7:4a:af:dc:51:35:2e:1f:16:17:01:bd:bc: 76:34:db:7f:3c:87:f1:c6:d2:63:77:79:49:e7:ef: ea:38:e3:b2:ba:13:d3:bf:6e:cc:c0:c8:54:31:7e: 5f:57:f1:d5:8c:f2:e3:ef:01:6a:54:24:96:13:80: d1:58:d5:79:32:64:bb:96:8f:7d:91:18:a8:d0:74: a7:6c:02:2c:1e:85:7f:d4:c3:25:47:4e:ee:e7:ba: da:e0:b1:2e:8c:9c:7a:e0:a5:a7:89:31:d6:89:fb: 4b:13:7f:e3:3d:aa:ce:e9:bf:7e:35:75:04:a7:64: 1f:95:04:d6:4e:f6:aa:f3:df:b7:16:72:e8:6a:8b: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:65:91:E9:4D:75:74:F7:97:18:61:E1:36:44:2F:AF:11:47:21:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c2e21e-b650-38ab-a4c7-257e7d0078d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:54:34:b3:58:a9:84:1e:0d:35:98:5a:b2:5b:1d:71:f2:60: cf:1f:e9:f2:d0:7c:91:db:eb:ab:d4:d0:7e:bb:38:f6:88:60: bd:b7:1d:8a:4b:35:69:55:42:18:a7:34:ef:72:ef:d9:92:d3: 9f:f9:ac:5d:e1:4c:65:4b:6a:f0:70:bb:5a:9f:f9:7a:38:8e: ce:9a:29:8f:eb:c0:85:a7:cb:6f:30:b8:cc:46:a1:cf:97:a1: b7:1d:78:f8:c8:c7:93:4b:03:e8:dd:ed:bf:d3:b2:02:79:4d: 66:04:d3:7a:1f:ac:01:72:f0:39:4f:71:43:b9:33:e6:cd:30: 17:86:95:28:b4:ea:e7:31:2a:a4:ad:27:08:6c:9a:09:50:12: 79:d5:b7:fb:0f:4e:65:25:69:75:44:cd:fc:4f:0d:ad:4e:da: 6d:d5:1f:f2:9c:32:76:48:ba:bf:6c:8b:6e:02:e4:4c:cc:05: 6e:dc:bd:1d:ba:13:7e:8c:ca:95:62:90:e4:a4:21:5f:4d:57: 0a:9b:fe:06:23:09:bf:c4:7a:fa:a5:d3:0c:c7:60:53:be:66: 19:6d:fc:b4:10:69:7c:0a:c2:e1:f4:8b:4d:fd:4f:24:f5:90: 23:d1:ef:42:b2:56:a4:b3:24:fd:25:52:35:a8:03:0b:f2:b8: 05:b9:82:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEOG+BO+ufvXBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjY0ZWVlYWUtNThmOS00YzljLWJmNjItYjdiMWM3NDlkZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVYQx8KLdoVcfpONKqohoHpF3uYYTgCI/inv zz78mRtMxKaXN76Wp1q+FqpCbCL49OxhJHo3iLZ8O/mNqXo4eIN08hj6r6K14/dp YBr3b7kzeMbJX+kdxo6TJA4vSu2BAr2RTDzwCQh9qzccd0iWVuqR1Ze0avDhJcdK r9xRNS4fFhcBvbx2NNt/PIfxxtJjd3lJ5+/qOOOyuhPTv27MwMhUMX5fV/HVjPLj 7wFqVCSWE4DRWNV5MmS7lo99kRio0HSnbAIsHoV/1MMlR07u57ra4LEujJx64KWn iTHWiftLE3/jParO6b9+NXUEp2QflQTWTvaq89+3FnLoaotlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1lkelNdXT3lxhh4TZEL68RRyHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBjMmUyMWUtYjY1MC0z OGFiLWE0YzctMjU3ZTdkMDA3OGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlUNLNYqYQeDTWYWrJbHXHyYM8f6fLQfJHb66vU0H67OPaIYL23HYpL NWlVQhinNO9y79mS05/5rF3hTGVLavBwu1qf+Xo4js6aKY/rwIWny28wuMxGoc+X obcdePjIx5NLA+jd7b/TsgJ5TWYE03ofrAFy8DlPcUO5M+bNMBeGlSi06ucxKqSt JwhsmglQEnnVt/sPTmUlaXVEzfxPDa1O2m3VH/KcMnZIur9si24C5EzMBW7cvR26 E36MypVikOSkIV9NVwqb/gYjCb/Eevql0wzHYFO+Zhlt/LQQaXwKwuH0i039TyT1 kCPR70KyVqSzJP0lUjWoAwvyuAW5gvE= -----END CERTIFICATE-----Generated at Fri Apr 17 03:25:53 2026 by rpki-client