$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa File: 3b821de4-0165-31c4-850c-71c00657c909.roa (raw, json) Hash identifier: gUmQR6qFAEvvjA/EPR69BE08hBqQ7NV16fkWhD6RazQ= Subject key identifier: A0:E0:06:1E:BE:07:0F:77:2C:D2:29:BB:85:6F:4D:B7:45:0D:CD:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC414FEE3650489F695680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.40.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:41:4f:ee:36:50:48:9f:69:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c77d3141-92b9-45e6-b56a-d4c31ef6638f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:a8:1f:ad:e1:96:9d:ee:13:18:56:6d:3f: 0c:f7:c2:81:5b:3e:46:8a:99:10:fc:d6:ec:f4:c3: 5b:ff:46:b5:d3:f8:71:a0:5c:28:19:78:a8:00:d4: a4:cb:d0:d3:fd:cd:73:dd:16:e3:d7:c2:56:9a:c2: 7a:85:73:80:f9:62:91:ef:a9:8c:ed:17:ad:1f:ba: c7:d3:44:d4:41:10:9d:97:9c:7d:b6:de:40:44:26: 3c:22:d9:d4:8b:0f:9d:e5:9b:cb:49:98:22:95:da: ed:87:24:17:16:b8:66:74:84:a4:b2:34:6f:2b:60: 59:70:61:d2:ab:68:72:84:cb:ce:d4:ea:f7:16:1a: 54:76:c4:ca:0d:c2:f9:c8:2f:ca:00:7a:a5:08:85: d3:a6:1a:f4:75:78:a7:0c:6f:09:bd:f5:6b:2b:c8: 10:f2:c8:94:c5:0e:cb:4a:fd:9e:8d:aa:16:af:e0: 2e:df:7e:3d:99:90:f2:d7:54:6b:04:3c:12:b5:c7: 3f:ad:2a:a4:85:0d:79:5d:69:94:4a:9c:3a:c9:79: 67:49:7b:6a:2f:f5:30:1b:19:e9:13:70:d0:01:03: 27:53:6d:3e:f5:42:66:7e:08:7e:44:4d:cd:a9:97: bf:7a:da:98:d5:85:c2:22:a4:e5:48:47:c4:3f:7b: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E0:06:1E:BE:07:0F:77:2C:D2:29:BB:85:6F:4D:B7:45:0D:CD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1e:7c:9e:f2:18:a5:e7:85:c4:e5:52:f7:02:65:32:7f:58: 92:a6:57:48:6f:7d:3f:70:7d:e1:90:9d:bc:73:85:a1:82:cc: 7c:b1:b5:02:52:e6:b7:a8:35:7a:9f:99:49:9a:da:8e:d5:01: f4:e7:c6:ca:05:59:be:06:b8:3d:b6:1e:5e:aa:89:af:66:cf: 21:84:10:73:49:25:dd:0c:78:98:c6:55:83:7a:d0:da:23:7c: a2:37:a8:18:ee:1b:ce:a5:1c:46:d8:89:bb:5b:a1:69:09:30: 2c:c1:e7:fd:99:28:69:78:f9:5e:72:ab:14:df:a8:e1:03:16: 40:4d:1a:76:f8:ba:5e:69:9d:4b:5f:8b:93:2f:e1:40:53:ef: 8b:8a:13:72:15:34:d7:ba:3b:93:1c:31:3c:e3:03:8b:a7:38: f7:4b:a9:85:a9:d0:53:d0:74:09:9a:fa:32:d2:ee:1a:f6:96: 5a:ce:df:c5:50:27:3f:53:79:04:e2:73:a1:06:ad:6a:4d:e8: 63:e3:0a:e8:49:69:fd:a5:73:ce:95:b8:bb:fb:31:b7:7e:61: e5:04:f5:11:2c:07:2a:0d:b9:7e:e4:8c:46:19:91:64:ca:00: 84:3d:1f:0c:de:a2:09:9d:b4:92:3d:7c:6f:5e:4b:65:64:a3: df:77:d9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEFP7jZQSJ9pVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Yzc3ZDMxNDEtOTJiOS00NWU2LWI1NmEtZDRjMzFlZjY2MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS6oH63hlp3uExhWbT8M98KBWz5GipkQ/Nbs 9MNb/0a10/hxoFwoGXioANSky9DT/c1z3Rbj18JWmsJ6hXOA+WKR76mM7RetH7rH 00TUQRCdl5x9tt5ARCY8ItnUiw+d5ZvLSZgildrthyQXFrhmdISksjRvK2BZcGHS q2hyhMvO1Or3FhpUdsTKDcL5yC/KAHqlCIXTphr0dXinDG8JvfVrK8gQ8siUxQ7L Sv2ejaoWr+Au3349mZDy11RrBDwStcc/rSqkhQ15XWmUSpw6yXlnSXtqL/UwGxnp E3DQAQMnU20+9UJmfgh+RE3NqZe/etqY1YXCIqTlSEfEP3v53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDgBh6+Bw93LNIpu4VvTbdFDc0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I4MjFkZTQtMDE2NS0z MWM0LTg1MGMtNzFjMDA2NTdjOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcefJ7yGKXnhcTlUvcCZTJ/WJKmV0hvfT9wfeGQnbxzhaGCzHyxtQJS 5reoNXqfmUma2o7VAfTnxsoFWb4GuD22Hl6qia9mzyGEEHNJJd0MeJjGVYN60Noj fKI3qBjuG86lHEbYibtboWkJMCzB5/2ZKGl4+V5yqxTfqOEDFkBNGnb4ul5pnUtf i5Mv4UBT74uKE3IVNNe6O5McMTzjA4unOPdLqYWp0FPQdAma+jLS7hr2llrO38VQ Jz9TeQTic6EGrWpN6GPjCuhJaf2lc86VuLv7Mbd+YeUE9REsByoNuX7kjEYZkWTK AIQ9HwzeogmdtJI9fG9eS2Vko9932SI= -----END CERTIFICATE-----Generated at Fri Apr 17 01:55:44 2026 by rpki-client