$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa File: 172de811-4bd1-337c-a2a1-d4acf27533b5.roa (raw, json) Hash identifier: vaadg62wfD5zVE2yxgB4VILRj9XLqWeZ+HeQ6w/rlyE= Subject key identifier: 9F:B4:2F:3C:9F:BA:04:B6:EA:D9:14:C0:6B:1C:E1:C5:C1:B6:48:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4F9FF96911B0AD8BB880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.56.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:4f:9f:f9:69:11:b0:ad:8b:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4d2b9ccb-1202-44a8-a189-b9d84472bedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:bb:55:3c:1f:41:fe:47:dc:14:a6:4f:f0: a0:6e:1e:03:89:db:e5:cf:6c:01:a0:c2:9b:55:ac: 53:20:b4:b1:2a:eb:d1:71:1e:67:d9:71:cf:9a:de: 32:47:d9:b9:bf:04:21:8f:60:b1:06:21:55:7c:2b: b4:cf:1a:44:05:54:7a:72:da:32:5e:95:2f:5f:74: 47:51:4e:5c:00:24:86:00:b4:5b:a0:61:28:0c:eb: d7:0d:c6:69:a0:2c:b2:f7:f4:23:8a:17:42:8a:90: e3:67:05:d4:4a:ec:8d:9c:c1:34:a5:4a:18:71:59: f2:2f:05:09:29:09:bd:ac:dc:67:2b:5c:f6:2e:3e: 6e:e3:1f:91:4f:eb:5c:ab:dc:26:24:07:0e:9e:41: 4b:0d:38:c3:50:c8:ee:5c:15:61:1f:84:9e:38:49: 8b:7f:e8:7e:c4:98:a4:55:49:c9:cc:69:72:b1:80: ac:92:98:41:64:58:7f:06:9f:24:70:4f:6f:d5:e6: ac:f6:bb:2f:9c:e4:38:4e:86:67:48:75:1e:00:32: a9:16:d5:c0:c8:a7:1b:c0:fd:b0:9c:c8:5b:7f:5c: ca:e1:f2:92:2b:b2:e3:7a:8c:1b:a7:46:ac:31:f5: b9:e2:10:a6:d8:2e:6a:92:8b:b1:a5:ce:e1:86:3b: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:2F:3C:9F:BA:04:B6:EA:D9:14:C0:6B:1C:E1:C5:C1:B6:48:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:10:3b:db:77:7f:8b:0d:76:a9:9c:ab:2f:77:17:30:81:48: 97:e3:2f:01:d1:a5:e4:8d:2a:d8:85:60:0e:85:65:3a:4b:28: 8c:71:11:7e:43:35:de:88:81:fa:2b:58:c4:a9:31:29:84:19: 70:32:c7:47:1a:60:d4:02:63:05:20:7f:6e:3c:47:ac:80:68: 4a:d0:1b:34:86:9e:bc:8e:34:89:56:d1:d3:5c:27:a9:63:8d: 7c:6e:4c:e9:08:d3:fc:ca:62:f5:82:d7:54:7d:a6:c8:46:f9: 2b:76:77:f4:9d:ab:5e:8c:31:79:40:90:c1:0d:95:c9:ab:e1: 74:66:38:d4:84:00:2b:e2:9f:3e:a9:38:c9:28:63:a7:63:41: 99:7d:18:8f:61:90:bd:c1:60:73:1d:d3:40:91:22:0d:72:30: 49:8a:4d:80:15:1b:92:e1:65:bc:4e:7d:ee:cc:48:0e:a8:9e: d4:9d:8f:fa:22:c1:c3:be:b9:59:56:af:7a:1b:67:24:c7:29: b8:93:ba:47:06:f6:c9:ed:f7:14:a8:f7:d6:1e:f7:5e:69:ce: ad:27:ab:41:53:25:c2:bf:20:ee:f1:4a:11:d4:87:83:c5:33: f0:64:56:64:fb:7a:20:f1:61:58:a4:30:19:07:f6:16:f5:ed: b5:07:3d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvE+f+WkRsK2LuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGQyYjljY2ItMTIwMi00NGE4LWExODktYjlkODQ0NzJiZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3C7VTwfQf5H3BSmT/Cgbh4Didvlz2wBoMKb VaxTILSxKuvRcR5n2XHPmt4yR9m5vwQhj2CxBiFVfCu0zxpEBVR6ctoyXpUvX3RH UU5cACSGALRboGEoDOvXDcZpoCyy9/QjihdCipDjZwXUSuyNnME0pUoYcVnyLwUJ KQm9rNxnK1z2Lj5u4x+RT+tcq9wmJAcOnkFLDTjDUMjuXBVhH4SeOEmLf+h+xJik VUnJzGlysYCskphBZFh/Bp8kcE9v1eas9rsvnOQ4ToZnSHUeADKpFtXAyKcbwP2w nMhbf1zK4fKSK7Ljeowbp0asMfW54hCm2C5qkouxpc7hhjsM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+0LzyfugS26tkUwGsc4cXBtkiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcyZGU4MTEtNGJkMS0z MzdjLWEyYTEtZDRhY2YyNzUzM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEQO9t3f4sNdqmcqy93FzCBSJfjLwHRpeSNKtiFYA6FZTpLKIxxEX5D Nd6IgforWMSpMSmEGXAyx0caYNQCYwUgf248R6yAaErQGzSGnryONIlW0dNcJ6lj jXxuTOkI0/zKYvWC11R9pshG+St2d/Sdq16MMXlAkMENlcmr4XRmONSEACvinz6p OMkoY6djQZl9GI9hkL3BYHMd00CRIg1yMEmKTYAVG5LhZbxOfe7MSA6ontSdj/oi wcO+uVlWr3obZyTHKbiTukcG9snt9xSo99Ye915pzq0nq0FTJcK/IO7xShHUh4PF M/BkVmT7eiDxYVikMBkH9hb17bUHPbM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:49 2026 by rpki-client