$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2556e28c-aab9-3123-a596-54ccdd5ad95e.roa File: 2556e28c-aab9-3123-a596-54ccdd5ad95e.roa (raw, json) Hash identifier: G7RylxUYqnplGxhkBj6epwQ3IoZ/aWa8t/JUo94CNbs= Subject key identifier: DF:04:F8:F5:10:33:3E:AB:90:1A:81:FD:B7:1E:07:FE:05:C2:97:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE872EBB1EF57F03961C3A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2556e28c-aab9-3123-a596-54ccdd5ad95e.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 7725 IP address blocks: 68.85.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:2e:bb:1e:f5:7f:03:96:1c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=4acb9c14-1964-4b63-94f5-5f3150d4208b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:a0:79:46:13:46:89:7c:aa:d3:30:6e:b6: 72:49:9a:27:12:f7:8f:43:11:ca:cc:a2:2f:36:44: ec:b7:d5:69:d5:6d:f9:f5:81:c5:fd:26:f0:c4:6f: 63:cd:d8:da:32:62:0b:01:f4:80:80:28:9a:d9:c8: 82:10:4d:59:9d:0c:6a:da:9f:8f:5e:1d:57:ce:31: 33:d1:0e:d7:b1:42:b8:e2:f3:be:c4:38:11:e2:e2: 59:38:6f:66:85:08:c4:73:a0:07:46:02:a5:7c:9f: 5b:4b:03:36:e8:a7:26:e7:6b:d2:25:e0:37:34:60: cd:c6:b2:9a:5a:17:5d:4f:17:e1:8b:b8:26:15:ca: 2d:5d:14:60:ef:2f:24:80:e9:69:5c:6f:e3:6f:a6: 0f:52:5a:ae:f5:61:36:46:28:9e:8c:1c:ed:c7:49: 02:36:ea:3f:52:3e:3e:e1:06:c6:45:4f:cb:b2:b9: 28:22:06:62:51:10:e6:a4:bd:19:3e:93:51:c3:17: 35:54:07:a9:4f:06:31:ec:88:a1:8f:df:ed:25:07: cb:ed:1f:28:31:b2:b1:18:2c:a2:ca:9a:c8:88:84: 55:13:b5:e5:6c:27:e3:de:73:8c:3c:67:ac:3f:f2: 0a:1b:af:45:1d:c7:06:f1:78:93:eb:a6:b2:69:c0: 3c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:F8:F5:10:33:3E:AB:90:1A:81:FD:B7:1E:07:FE:05:C2:97:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2556e28c-aab9-3123-a596-54ccdd5ad95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:18:76:d2:91:cf:ba:19:c1:48:81:4d:4e:d8:37:4f:4e:62: 49:99:f0:fc:0b:da:18:02:e7:25:dc:f7:8f:40:36:76:aa:89: d0:30:f0:3b:95:3c:3d:57:79:65:2a:b4:ee:ef:a4:79:21:ea: 88:b7:aa:1d:d3:71:71:7a:2e:64:3a:78:53:64:11:a5:a2:ed: 1d:17:8d:31:b3:32:07:6d:79:b3:98:c8:91:c9:a5:2e:b4:45: 75:c7:8b:50:54:1a:b3:3a:0a:16:ef:59:3f:13:b7:3d:14:22: 44:c1:de:0d:b0:91:bd:d1:f4:dd:8d:d0:69:fd:64:ab:15:37: f3:dd:92:fa:f1:9b:de:95:8a:83:6c:46:a4:f5:7a:4a:bf:48: f4:b1:98:b8:d4:43:95:04:3e:7a:d0:b4:48:42:75:ce:1b:b9: 88:5b:c5:a0:4d:d8:ce:64:a9:93:29:f1:d3:1f:12:22:bf:53: 0c:14:67:bb:20:46:75:d5:72:cd:31:18:44:14:2b:e7:14:85: c6:b9:0e:47:04:e8:71:e5:c8:66:a7:3d:eb:20:9e:2d:29:b8: b0:22:38:07:2c:ac:64:97:26:97:85:22:0a:2e:de:38:6f:a1: 54:9c:5f:40:49:c8:88:b9:95:32:5b:46:cc:41:3f:cd:ba:cf: a3:5d:ee:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehy67HvV/A5YcOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk NGFjYjljMTQtMTk2NC00YjYzLTk0ZjUtNWYzMTUwZDQyMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUOgeUYTRol8qtMwbrZySZonEvePQxHKzKIv NkTst9Vp1W359YHF/SbwxG9jzdjaMmILAfSAgCia2ciCEE1ZnQxq2p+PXh1XzjEz 0Q7XsUK44vO+xDgR4uJZOG9mhQjEc6AHRgKlfJ9bSwM26Kcm52vSJeA3NGDNxrKa WhddTxfhi7gmFcotXRRg7y8kgOlpXG/jb6YPUlqu9WE2RiiejBztx0kCNuo/Uj4+ 4QbGRU/LsrkoIgZiURDmpL0ZPpNRwxc1VAepTwYx7Iihj9/tJQfL7R8oMbKxGCyi yprIiIRVE7XlbCfj3nOMPGesP/IKG69FHccG8XiT66ayacA8NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8E+PUQMz6rkBqB/bceB/4FwpdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjU1NmUyOGMtYWFiOS0z MTIzLWE1OTYtNTRjY2RkNWFkOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8YdtKRz7oZwUiBTU7YN09OYkmZ8PwL2hgC5yXc949ANnaqidAw8DuV PD1XeWUqtO7vpHkh6oi3qh3TcXF6LmQ6eFNkEaWi7R0XjTGzMgdtebOYyJHJpS60 RXXHi1BUGrM6ChbvWT8Ttz0UIkTB3g2wkb3R9N2N0Gn9ZKsVN/Pdkvrxm96VioNs RqT1ekq/SPSxmLjUQ5UEPnrQtEhCdc4buYhbxaBN2M5kqZMp8dMfEiK/UwwUZ7sg RnXVcs0xGEQUK+cUhca5DkcE6HHlyGanPesgni0puLAiOAcsrGSXJpeFIgou3jhv oVScX0BJyIi5lTJbRsxBP826z6Nd7ms= -----END CERTIFICATE-----Generated at Sat Jun 13 23:17:12 2026 by rpki-client