$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aaa8d45-40f5-341d-8124-2fe4a5a089c6.roa File: 0aaa8d45-40f5-341d-8124-2fe4a5a089c6.roa (raw, json) Hash identifier: 5SkylCj2yAvRC9GqEDE8FLkf6ZIk5bl+EGD+HCHRS9U= Subject key identifier: B1:3A:94:33:A5:4A:03:C2:A7:C3:34:72:CE:F9:46:67:CF:C8:85:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC12D89B70934C6BFB3180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aaa8d45-40f5-341d-8124-2fe4a5a089c6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 73.68.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:12:d8:9b:70:93:4c:6b:fb:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=81f8e1d6-d6ce-43bb-a758-ca9ca20e63ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:34:22:f8:93:c4:c6:0a:73:60:be:c9:df: 87:51:b9:b7:70:20:ac:9c:43:f8:3f:97:10:c2:0b: 5b:36:48:b5:7a:21:4a:f0:11:db:df:2e:22:90:ba: 76:25:a7:e3:86:31:b4:2a:09:6c:ea:de:6b:97:69: be:7a:3a:e2:43:f9:9a:5b:80:63:c5:63:2a:be:c4: 78:67:55:5e:81:87:4f:08:37:ad:d8:e4:46:7f:ae: 94:98:51:53:fd:de:80:20:74:94:ed:17:4b:9f:9a: 68:56:2e:ec:e3:8b:74:34:00:de:73:fa:39:40:72: 06:e8:22:01:e3:2b:9c:3a:34:d7:7d:3e:36:94:20: c7:4e:58:0b:33:4b:c8:21:44:51:b3:a8:c2:7a:4a: 26:d8:ec:8a:ed:18:c9:7c:d4:fc:cc:4a:fd:36:b2: 3f:dd:82:1d:4f:36:b0:20:c0:95:46:e2:a6:19:02: 3b:c4:29:7a:cf:f3:2c:e7:3f:e7:70:40:f7:a6:17: 5b:f5:99:b1:a0:a0:49:06:0c:b9:3b:8f:eb:57:36: cf:03:9f:b7:5b:bc:90:74:20:a2:27:a4:e2:6b:ad: fa:11:f9:0c:10:4d:d4:5a:8d:d5:ef:e6:05:c7:11: 41:03:71:19:28:66:7b:94:99:0a:de:6f:3d:19:bd: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:94:33:A5:4A:03:C2:A7:C3:34:72:CE:F9:46:67:CF:C8:85:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aaa8d45-40f5-341d-8124-2fe4a5a089c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.68.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:97:13:43:27:4e:06:8a:cc:d4:37:3a:7d:9b:b8:f4:00:f7: ec:b7:35:ac:07:48:28:09:62:34:9e:88:63:8d:21:56:b7:24: 1b:c6:41:fd:31:c5:9c:d5:a0:24:67:a8:fd:a9:b9:99:77:c4: c6:d3:d2:3c:36:75:f6:65:8c:c8:81:27:02:a4:67:6f:6b:f1: d7:77:4d:2a:33:8e:6f:db:ca:c6:19:21:0c:7f:24:65:f4:2c: 4b:a9:f5:f5:49:1d:60:f2:f1:77:0a:e9:04:f2:a6:47:dc:73: 2c:c5:1d:17:2e:37:5f:67:ce:be:fd:0f:31:1f:4c:36:06:d5: 1d:11:64:a3:e4:3b:9d:ae:87:f9:10:d1:49:dd:4e:16:ac:af: d6:86:79:6a:c3:9a:77:08:69:6b:d9:c7:a1:34:16:63:fb:ae: 86:64:54:dd:07:17:19:e3:4b:4d:55:73:87:35:e8:b6:cf:ff: b2:0e:49:41:d2:19:29:91:87:e1:1d:68:21:ed:b7:9d:42:1a: d5:b6:ab:c8:51:f9:6c:38:4d:93:bc:d8:1a:6b:5e:bc:65:f4: 82:12:fb:bb:a3:a5:b8:70:56:d4:37:0a:24:af:86:eb:24:96: 7f:12:e9:a7:20:1f:b1:1d:d2:42:4c:e9:dd:6c:e3:d6:44:81: 42:86:54:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvBLYm3CTTGv7MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODFmOGUxZDYtZDZjZS00M2JiLWE3NTgtY2E5Y2EyMGU2M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx380IviTxMYKc2C+yd+HUbm3cCCsnEP4P5cQ wgtbNki1eiFK8BHb3y4ikLp2JafjhjG0Kgls6t5rl2m+ejriQ/maW4BjxWMqvsR4 Z1VegYdPCDet2ORGf66UmFFT/d6AIHSU7RdLn5poVi7s44t0NADec/o5QHIG6CIB 4yucOjTXfT42lCDHTlgLM0vIIURRs6jCekom2OyK7RjJfNT8zEr9NrI/3YIdTzaw IMCVRuKmGQI7xCl6z/Ms5z/ncED3phdb9ZmxoKBJBgy5O4/rVzbPA5+3W7yQdCCi J6Tia636EfkMEE3UWo3V7+YFxxFBA3EZKGZ7lJkK3m89Gb2koQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE6lDOlSgPCp8M0cs75RmfPyIWcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFhYThkNDUtNDBmNS0z NDFkLTgxMjQtMmZlNGE1YTA4OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSURsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOXE0MnTgaKzNQ3On2buPQA9+y3NawHSCgJYjSeiGONIVa3JBvGQf0x xZzVoCRnqP2puZl3xMbT0jw2dfZljMiBJwKkZ29r8dd3TSozjm/bysYZIQx/JGX0 LEup9fVJHWDy8XcK6QTypkfccyzFHRcuN19nzr79DzEfTDYG1R0RZKPkO52uh/kQ 0UndThasr9aGeWrDmncIaWvZx6E0FmP7roZkVN0HFxnjS01Vc4c16LbP/7IOSUHS GSmRh+EdaCHtt51CGtW2q8hR+Ww4TZO82BprXrxl9IIS+7ujpbhwVtQ3CiSvhusk ln8S6acgH7Ed0kJM6d1s49ZEgUKGVJg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:58:25 2026 by rpki-client