$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa File: 1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa (raw, json) Hash identifier: BQ72V+w6+0fod3yTy1pKN+xc+EKeCygWsax3cmQdd1Y= Subject key identifier: 7D:45:ED:72:34:D9:09:55:1F:E4:BB:8F:49:13:F0:81:4D:89:01:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB08BABAEF6E34ADFCB6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.36.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:08:ba:ba:ef:6e:34:ad:fc:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f94bc0ae-10a2-40e2-be0b-b64f9a85be2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:94:98:0a:07:db:20:a1:76:21:65:64:d9: 0a:dc:88:3a:20:9e:d1:a7:93:22:1f:ad:72:7f:c6: ea:f0:eb:72:22:2f:bd:58:2f:23:2a:ee:6c:1a:a3: d7:17:70:34:c3:57:1e:0c:26:a7:44:2f:b0:66:7f: ee:1c:c1:e1:83:51:56:05:1d:7c:2a:0d:c5:33:05: dd:cb:e9:5f:37:8b:03:2d:2b:d9:d2:86:95:8a:09: 16:bc:86:43:0d:2e:a9:8e:b0:25:2f:1d:c6:a7:c2: 9e:95:f6:7d:23:b0:fc:96:2f:61:d4:f4:33:96:d2: 1f:fc:f0:ef:bd:3a:df:35:40:d4:1f:64:9e:7e:db: 79:53:f9:0f:66:c4:5a:16:4e:2d:92:f5:40:7e:2b: e3:b5:85:72:85:18:68:ab:52:70:d7:4f:a3:df:c6: a2:de:46:77:56:41:11:26:48:d2:17:b6:06:c3:de: 27:0d:ab:d5:43:44:5d:75:f9:e8:59:58:ee:ad:1e: ac:ec:37:cd:3f:b5:26:87:a0:19:60:a0:8a:08:d6: 72:74:40:67:83:19:58:e6:14:d1:9e:e4:61:e1:da: 6b:fc:0a:b1:70:48:9f:3f:80:2a:21:8b:31:a3:3e: b2:97:91:ef:16:56:52:fe:29:94:69:07:e8:82:7e: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:ED:72:34:D9:09:55:1F:E4:BB:8F:49:13:F0:81:4D:89:01:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d34bbc7-6674-3cf8-a8ad-5298b0ef0998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:76:5f:66:ab:5b:06:69:2c:32:f9:f8:b8:bc:d5:54:48:fe: d2:fe:b8:d2:c6:0b:53:81:e0:6d:29:56:a4:85:9a:73:37:9e: 8b:10:75:c6:31:0d:1f:2a:8e:23:f6:9a:90:a0:03:a2:85:a0: d9:0e:94:6d:09:7a:97:37:7d:83:7d:c6:24:7d:7a:2d:21:dc: 49:fb:cb:82:cc:ce:c7:c3:82:67:ec:ec:01:23:a3:aa:d4:ad: 78:ab:30:45:b3:c0:f0:05:e8:e5:ce:4e:60:3d:e4:3f:4e:81: e4:aa:53:cd:14:f0:5f:d9:32:c5:18:7c:9b:13:19:97:57:78: 79:60:5e:35:26:db:af:c9:01:47:dd:32:ac:56:c1:61:d9:2e: 88:c2:09:a8:8a:6c:ea:c1:62:3e:1f:33:9a:4f:16:44:d6:6a: b0:2a:d4:65:39:61:51:d8:79:4c:48:39:7c:bc:e2:de:74:d4: 71:1e:39:59:c9:1a:af:50:9c:2d:de:ad:5c:4b:3b:f9:e9:5f: b9:a7:93:c4:81:92:dc:2b:4a:b5:7d:50:be:ff:e3:8f:2e:2e: d7:8b:27:11:aa:75:d8:76:90:c0:36:4e:3b:2a:fe:0a:44:bb: 53:0f:40:9e:87:d6:aa:7a:ff:53:82:08:cf:be:37:66:11:c8: 1b:8c:c4:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuwi6uu9uNK38tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Zjk0YmMwYWUtMTBhMi00MGUyLWJlMGItYjY0ZjlhODViZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUWUmAoH2yChdiFlZNkK3Ig6IJ7Rp5MiH61y f8bq8OtyIi+9WC8jKu5sGqPXF3A0w1ceDCanRC+wZn/uHMHhg1FWBR18Kg3FMwXd y+lfN4sDLSvZ0oaVigkWvIZDDS6pjrAlLx3Gp8KelfZ9I7D8li9h1PQzltIf/PDv vTrfNUDUH2Seftt5U/kPZsRaFk4tkvVAfivjtYVyhRhoq1Jw10+j38ai3kZ3VkER JkjSF7YGw94nDavVQ0RddfnoWVjurR6s7DfNP7Umh6AZYKCKCNZydEBngxlY5hTR nuRh4dpr/AqxcEifP4AqIYsxoz6yl5HvFlZS/imUaQfogn4ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1F7XI02QlVH+S7j0kT8IFNiQGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQzNGJiYzctNjY3NC0z Y2Y4LWE4YWQtNTI5OGIwZWYwOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL52X2arWwZpLDL5+Li81VRI/tL+uNLGC1OB4G0pVqSFmnM3nosQdcYx DR8qjiP2mpCgA6KFoNkOlG0Jepc3fYN9xiR9ei0h3En7y4LMzsfDgmfs7AEjo6rU rXirMEWzwPAF6OXOTmA95D9OgeSqU80U8F/ZMsUYfJsTGZdXeHlgXjUm26/JAUfd MqxWwWHZLojCCaiKbOrBYj4fM5pPFkTWarAq1GU5YVHYeUxIOXy84t501HEeOVnJ Gq9QnC3erVxLO/npX7mnk8SBktwrSrV9UL7/448uLteLJxGqddh2kMA2Tjsq/gpE u1MPQJ6H1qp6/1OCCM++N2YRyBuMxOg= -----END CERTIFICATE-----Generated at Fri Apr 17 01:45:18 2026 by rpki-client