$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa File: 2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa (raw, json) Hash identifier: 9uxs2DD8bl3zNUtW+XGQGYy2NTDTKkDM/S9gtcCRuOM= Subject key identifier: D6:33:B9:CF:21:12:F0:BB:28:00:C3:20:23:78:93:61:E5:60:94:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE86ABF97DB0783EF6781380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33491 IP address blocks: 68.58.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:ab:f9:7d:b0:78:3e:f6:78:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=f7c91725-4e28-4b3c-87d6-1cb4937a5646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:3c:33:ad:3b:aa:2c:46:81:bd:2c:8b:bd: 49:c7:6c:68:17:00:a3:94:e1:b6:f3:68:f7:e0:29: e4:a9:4a:03:33:ad:e6:e6:b5:ca:5c:c6:d7:7d:73: 89:b3:10:00:f0:82:08:d1:69:84:29:4f:d4:ef:34: 7c:5b:d2:93:bb:1b:02:86:2f:fd:96:b4:14:9c:e4: a6:dd:89:83:a9:a0:f9:a4:05:76:7c:85:b4:bf:a8: 7c:15:35:1f:35:7b:3f:3d:d3:e9:15:6a:2a:a8:6a: 31:8f:61:98:30:80:0a:03:dc:35:3b:76:a8:8e:c6: 36:95:b1:e6:44:31:57:3d:db:dd:f9:4f:9b:25:fc: 4e:6b:18:65:b2:8c:11:2f:cb:bd:d3:a5:8e:92:82: 9a:aa:97:fc:00:12:f7:3d:73:f6:a5:3b:14:9a:10: ca:76:d5:a3:fe:38:ef:77:6c:c7:0c:11:11:16:00: 85:88:19:ba:b6:d4:ee:76:56:98:9c:3b:3d:d4:90: 21:b6:d6:56:10:cf:84:47:ba:08:03:5b:31:27:d9: 7c:7c:bc:dc:54:db:b1:2f:5d:b2:36:19:89:08:d0: c3:cd:de:7b:65:bd:d5:37:3f:31:0f:b3:d0:25:29: 7d:65:fb:58:ca:fe:6f:74:6b:48:c1:2c:7e:73:68: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:B9:CF:21:12:F0:BB:28:00:C3:20:23:78:93:61:E5:60:94:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd3496c-4819-3484-8712-b21ebf9e6ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:aa:14:36:f6:34:51:08:97:4c:fc:be:54:a9:82:9f:8f:db: 18:ac:4f:54:14:2f:52:b3:c0:5f:a9:ca:49:60:b5:41:cd:35: 1d:98:5d:59:9f:28:e1:c6:d2:f1:b3:41:92:6b:ab:7c:bc:7b: 68:c2:d7:18:53:9b:e0:35:69:6d:4c:06:12:c5:eb:84:7b:49: fd:0d:6a:f5:46:bb:43:9e:39:f4:7c:6d:61:d3:48:c1:9b:9f: aa:f6:8d:de:fd:4b:dd:26:4b:f1:17:64:52:1e:20:f6:93:4f: 45:bf:8c:fd:e6:50:45:e2:ff:be:cf:de:d1:cd:88:ce:31:c4: c9:b4:49:09:98:72:e5:48:da:94:a7:26:84:f3:3c:c5:46:e4: b0:52:9c:5d:03:8b:80:13:98:9e:e4:45:22:91:6d:67:40:7b: 23:18:08:3a:7e:6e:0c:75:3a:bb:d9:dc:8f:26:e1:9d:8f:f3: 2f:52:6d:6b:f0:ab:10:a1:b1:3b:a3:6b:b5:5d:69:31:95:07: 77:0d:44:c6:dc:9c:0f:12:44:7f:d7:8f:5c:bc:2b:30:7a:1a: 8d:b8:8f:51:e8:42:54:ad:8f:8f:fb:85:7d:f0:a0:5e:0f:da: 56:86:14:8f:93:61:f2:dc:dd:65:cf:22:b5:50:d1:e9:44:0b: 42:59:1d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehqv5fbB4PvZ4E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZjdjOTE3MjUtNGUyOC00YjNjLTg3ZDYtMWNiNDkzN2E1NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDA8M607qixGgb0si71Jx2xoFwCjlOG282j3 4CnkqUoDM63m5rXKXMbXfXOJsxAA8III0WmEKU/U7zR8W9KTuxsChi/9lrQUnOSm 3YmDqaD5pAV2fIW0v6h8FTUfNXs/PdPpFWoqqGoxj2GYMIAKA9w1O3aojsY2lbHm RDFXPdvd+U+bJfxOaxhlsowRL8u906WOkoKaqpf8ABL3PXP2pTsUmhDKdtWj/jjv d2zHDBERFgCFiBm6ttTudlaYnDs91JAhttZWEM+ER7oIA1sxJ9l8fLzcVNuxL12y NhmJCNDDzd57Zb3VNz8xD7PQJSl9ZftYyv5vdGtIwSx+c2h8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYzuc8hEvC7KADDICN4k2HlYJQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNkMzQ5NmMtNDgxOS0z NDg0LTg3MTItYjIxZWJmOWU2YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRDoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+qFDb2NFEIl0z8vlSpgp+P2xisT1QUL1KzwF+pyklgtUHNNR2YXVmf KOHG0vGzQZJrq3y8e2jC1xhTm+A1aW1MBhLF64R7Sf0NavVGu0OeOfR8bWHTSMGb n6r2jd79S90mS/EXZFIeIPaTT0W/jP3mUEXi/77P3tHNiM4xxMm0SQmYcuVI2pSn JoTzPMVG5LBSnF0Di4ATmJ7kRSKRbWdAeyMYCDp+bgx1OrvZ3I8m4Z2P8y9SbWvw qxChsTuja7VdaTGVB3cNRMbcnA8SRH/Xj1y8KzB6Go24j1HoQlStj4/7hX3woF4P 2laGFI+TYfLc3WXPIrVQ0elEC0JZHVY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:22:44 2026 by rpki-client