$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa File: 07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa (raw, json) Hash identifier: aag4O4ddVK3HOdxYK31jtETNjmnc0mJJaOA+XVRQqo4= Subject key identifier: 79:2B:6C:B3:F2:3A:E3:20:84:E5:76:F9:DD:1E:B6:F4:2D:F5:94:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB212EE8EC733FD483C800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.60.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:21:2e:e8:ec:73:3f:d4:83:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cbf9041c-2069-49d1-b280-904e52f4a695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:57:52:bb:8b:89:bd:50:9b:b0:f2:90:f0: 2b:1b:bb:17:94:67:eb:db:9f:1c:ef:c8:b5:9d:91: dc:be:bd:de:ea:36:97:03:55:55:be:e4:f4:9a:f0: 40:82:6d:07:2e:a6:05:11:fd:58:c3:33:1b:39:a0: ca:3d:eb:9e:7e:8a:70:a5:98:8d:92:f5:a3:12:be: cf:d4:75:0d:0b:15:2d:c2:19:62:c0:db:dd:9d:95: 3d:76:87:6f:4e:d8:4a:67:59:fe:38:04:aa:69:20: 6a:65:03:d3:7e:63:02:16:b5:e3:86:db:b3:19:11: f4:f8:0c:88:9e:c7:96:53:7b:75:d3:42:47:e0:5b: 8a:f4:7e:57:37:5d:a3:19:82:2c:bc:f5:0c:b9:3a: 85:3b:51:a4:fa:e8:9b:69:8c:8a:85:12:33:11:ae: 9d:77:a3:6b:6b:d5:a9:bf:33:18:a4:84:81:dc:ae: 4e:ae:de:4e:db:49:b5:09:99:6b:0f:6e:63:16:f0: a3:e8:21:83:ee:ac:ee:ed:96:8b:61:ff:42:47:60: f3:de:f3:90:e2:d6:90:b0:72:43:bf:5b:e6:ff:c3: 17:cb:28:48:73:57:41:60:d0:48:2d:1c:86:9f:32: 71:9b:9f:d5:46:75:af:05:52:39:49:1b:c2:80:f0: eb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2B:6C:B3:F2:3A:E3:20:84:E5:76:F9:DD:1E:B6:F4:2D:F5:94:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07f2bd01-a444-34f3-ab7a-1d20c75b98e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.60.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:80:c8:44:e9:23:27:be:45:26:84:8e:fb:f5:d3:9d:41:42: 97:2e:c4:aa:ce:fe:d3:4b:10:cf:37:ca:c7:a8:94:40:ba:0a: 57:0d:7e:f9:ed:ab:74:85:5e:00:31:1a:f9:a9:7b:b9:49:4c: 0a:f6:1b:00:b4:8c:77:9a:37:9c:4e:e7:a2:d2:7a:d8:b1:dc: 68:a4:8d:fe:c0:14:53:4e:5a:73:82:db:de:67:b0:37:fb:a9: 14:3c:94:c6:1f:ea:ee:0f:a8:3d:b8:f5:31:15:29:0c:49:3a: dc:fd:36:ba:2a:09:21:ec:31:20:02:48:63:aa:4f:70:06:e8: 86:b1:b3:48:72:a1:c7:ac:d4:f4:55:61:59:ed:fd:47:0b:08: ee:95:90:7d:0b:8b:ac:05:94:e1:ea:53:16:9f:50:35:4a:0d: e3:e0:c4:ff:78:80:62:5d:d3:b3:a5:95:7e:b3:ab:46:d9:29: 4a:bd:b5:f2:2e:d6:55:62:1b:7a:34:65:2d:61:d6:30:03:40: 79:70:fb:2b:2d:5f:62:a4:84:a3:51:33:ff:07:a9:4c:76:dd: 60:67:17:39:0f:ff:cd:4d:07:0b:10:f7:e3:e4:9b:1d:70:1e: 95:ad:02:4a:d2:ee:55:02:c3:65:8e:42:e0:e9:0b:5f:98:f9: db:79:1e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuyEu6OxzP9SDyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2JmOTA0MWMtMjA2OS00OWQxLWIyODAtOTA0ZTUyZjRhNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHpXUruLib1Qm7DykPArG7sXlGfr258c78i1 nZHcvr3e6jaXA1VVvuT0mvBAgm0HLqYFEf1YwzMbOaDKPeuefopwpZiNkvWjEr7P 1HUNCxUtwhliwNvdnZU9dodvTthKZ1n+OASqaSBqZQPTfmMCFrXjhtuzGRH0+AyI nseWU3t100JH4FuK9H5XN12jGYIsvPUMuTqFO1Gk+uibaYyKhRIzEa6dd6Nra9Wp vzMYpISB3K5Ort5O20m1CZlrD25jFvCj6CGD7qzu7ZaLYf9CR2Dz3vOQ4taQsHJD v1vm/8MXyyhIc1dBYNBILRyGnzJxm5/VRnWvBVI5SRvCgPDrAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkrbLPyOuMghOV2+d0etvQt9ZSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdmMmJkMDEtYTQ0NC0z NGYzLWFiN2EtMWQyMGM3NWI5OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKAyETpIye+RSaEjvv1051BQpcuxKrO/tNLEM83yseolEC6ClcNfvnt q3SFXgAxGvmpe7lJTAr2GwC0jHeaN5xO56LSetix3Gikjf7AFFNOWnOC295nsDf7 qRQ8lMYf6u4PqD249TEVKQxJOtz9NroqCSHsMSACSGOqT3AG6Iaxs0hyoces1PRV YVnt/UcLCO6VkH0Li6wFlOHqUxafUDVKDePgxP94gGJd07OllX6zq0bZKUq9tfIu 1lViG3o0ZS1h1jADQHlw+ystX2KkhKNRM/8HqUx23WBnFzkP/81NBwsQ9+Pkmx1w HpWtAkrS7lUCw2WOQuDpC1+Y+dt5Hlw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:50:32 2026 by rpki-client