$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2852a5ce-b26e-36f8-8b8b-91894a32312f.roa File: 2852a5ce-b26e-36f8-8b8b-91894a32312f.roa (raw, json) Hash identifier: QjHtIE1688uXOxN/iEzVIKZnb82IIZeNKBbjJ0Ay2eg= Subject key identifier: 78:1E:43:26:16:3E:D5:44:A2:3F:AD:FA:D0:DB:0B:5F:4E:24:93:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4E129722E2DC1719B320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2852a5ce-b26e-36f8-8b8b-91894a32312f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.56.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:4e:12:97:22:e2:dc:17:19:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4f256fe3-72d0-4b76-8af0-bbdb1be429e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:53:41:f6:ac:2b:d8:93:98:c0:73:0a:e7: b3:47:5a:4a:9a:8f:ae:0b:80:e3:fa:1e:56:5c:bd: e6:c5:ce:56:40:26:0d:c5:35:4f:7a:3a:a8:b5:cb: 73:de:ab:07:7d:cf:bf:62:12:f2:e8:7f:1b:e4:50: 67:4e:02:eb:32:af:fc:93:f5:6d:c2:b0:a3:f5:86: 69:36:6c:77:51:0c:3a:57:95:c2:f5:6b:22:4b:5d: dd:be:77:e8:31:0b:39:74:52:09:2f:f4:30:a0:60: b8:02:81:aa:e3:5f:a6:d3:98:4c:86:21:f9:c7:39: 3a:cd:c8:e9:68:c8:5a:4c:e5:48:af:4e:50:be:1c: 8a:b1:f9:89:17:4b:83:03:a4:44:3c:1b:d6:6e:0b: eb:0d:0f:fb:84:1a:02:e6:e0:50:31:96:64:21:14: 18:20:1c:14:cd:cb:b0:a8:a4:20:13:a7:3b:fe:b5: 99:15:4e:c8:ac:1e:96:90:1e:b6:9b:f2:8c:1c:54: 20:f5:7e:92:86:74:cf:73:27:13:fa:eb:fb:73:3c: 21:88:00:68:9e:54:6f:cf:e3:da:4b:71:fe:44:1f: 52:7e:9a:8b:5b:f5:39:a7:df:ea:04:02:00:d4:ee: 3b:f7:3c:73:c4:f9:54:cb:46:e5:e6:14:f2:96:c3: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:43:26:16:3E:D5:44:A2:3F:AD:FA:D0:DB:0B:5F:4E:24:93:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2852a5ce-b26e-36f8-8b8b-91894a32312f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:2a:15:9e:1f:e0:0c:44:4f:3c:6b:92:c0:b9:a0:ee:ac:02: c6:68:93:a2:dd:32:3e:f9:e6:34:b1:ba:65:c2:dd:5e:d0:b7: 20:3f:9c:cd:41:78:80:14:4f:fd:2d:0d:46:88:57:8e:fb:c2: aa:a4:23:1d:f4:aa:eb:10:16:59:af:0c:d5:47:b7:9a:bf:3f: d9:c4:e5:6a:e7:32:3f:c2:5a:9b:40:52:40:3b:d2:06:6b:81: 19:ab:17:e0:9c:a3:86:b9:f7:6a:4e:8f:a3:c3:ad:a7:d5:d0: da:d5:61:40:60:3a:42:cc:49:03:cd:96:8a:dc:b3:b2:6e:f1: b8:84:69:f6:42:4d:c0:c8:f5:3b:5e:20:78:ba:e1:06:9e:57: 32:f6:67:96:b6:05:40:3b:1e:8c:db:3e:73:95:d7:1e:10:e0: 69:ff:cb:17:cc:29:11:6b:fd:a2:95:19:98:3b:b1:41:70:b4: 56:f6:f7:35:af:66:93:96:2e:3d:39:50:af:b3:db:e6:7c:2b: 1a:d9:9f:f3:63:64:6f:1c:bc:e7:50:f4:b9:37:2a:a6:5d:f9: 40:5a:03:d4:71:40:b0:62:ee:52:d8:0f:73:36:4e:d4:cf:d6: 23:11:c2:3b:43:6b:be:ce:70:f8:f2:7f:78:34:c2:fe:41:ee: dd:0c:90:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvE4SlyLi3BcZsyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGYyNTZmZTMtNzJkMC00Yjc2LThhZjAtYmJkYjFiZTQyOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJNTQfasK9iTmMBzCuezR1pKmo+uC4Dj+h5W XL3mxc5WQCYNxTVPejqotctz3qsHfc+/YhLy6H8b5FBnTgLrMq/8k/VtwrCj9YZp Nmx3UQw6V5XC9WsiS13dvnfoMQs5dFIJL/QwoGC4AoGq41+m05hMhiH5xzk6zcjp aMhaTOVIr05QvhyKsfmJF0uDA6REPBvWbgvrDQ/7hBoC5uBQMZZkIRQYIBwUzcuw qKQgE6c7/rWZFU7IrB6WkB62m/KMHFQg9X6ShnTPcycT+uv7czwhiABonlRvz+Pa S3H+RB9SfpqLW/U5p9/qBAIA1O479zxzxPlUy0bl5hTylsMGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgeQyYWPtVEoj+t+tDbC19OJJOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg1MmE1Y2UtYjI2ZS0z NmY4LThiOGItOTE4OTRhMzIzMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwqFZ4f4AxETzxrksC5oO6sAsZok6LdMj755jSxumXC3V7QtyA/nM1B eIAUT/0tDUaIV477wqqkIx30qusQFlmvDNVHt5q/P9nE5WrnMj/CWptAUkA70gZr gRmrF+Cco4a592pOj6PDrafV0NrVYUBgOkLMSQPNlorcs7Ju8biEafZCTcDI9Tte IHi64QaeVzL2Z5a2BUA7HozbPnOV1x4Q4Gn/yxfMKRFr/aKVGZg7sUFwtFb29zWv ZpOWLj05UK+z2+Z8KxrZn/NjZG8cvOdQ9Lk3KqZd+UBaA9RxQLBi7lLYD3M2TtTP 1iMRwjtDa77OcPjyf3g0wv5B7t0MkHI= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:56 2026 by rpki-client