$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa File: 3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa (raw, json) Hash identifier: hKad1rzA6ZdBpmljyA/ewSFnot73+Vi8ephrU26M74A= Subject key identifier: 4F:DD:32:41:8A:2B:2E:8F:C1:84:CF:97:35:6C:8F:F6:A3:50:8C:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4363AEAA8091F4E80F32 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.41.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:43:63:ae:aa:80:91:f4:e8:0f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b45f9cba-c88c-457e-abf6-dba10f771f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:c4:08:bc:3a:a6:e7:c1:ef:ea:1b:ba:6d: f6:5a:73:b3:b8:1d:9e:0d:5e:50:1c:ea:97:69:f4: de:86:46:50:82:8a:a9:cb:2f:56:6b:fe:2a:c1:78: 05:7e:a3:4d:c2:5f:73:ef:17:26:b1:06:05:15:43: c4:b3:e8:5f:62:9a:a7:12:2b:4b:c1:44:74:9d:93: 55:ff:9f:be:44:f4:3c:46:9e:4d:7a:7f:f0:c6:02: 85:3a:af:f1:3d:74:e7:73:b2:d8:6c:84:85:3a:f1: 9b:6c:0c:be:e2:63:22:4f:92:1e:a3:ae:9f:26:26: d1:fb:f6:89:49:f1:74:de:71:bb:d0:d4:f3:a7:04: ba:2b:11:5a:db:03:b2:c9:ba:39:b3:5e:1e:f2:c9: ec:41:1e:ef:bb:0c:d3:7a:ed:bf:8a:61:e0:4d:35: 65:fe:5b:3f:2f:3e:d6:69:0a:f6:3d:5f:d0:c0:1d: f4:f9:bf:dd:1c:fe:fc:75:a0:ee:a1:6e:2f:f1:90: 99:11:9b:69:3b:46:0a:93:9c:31:81:68:87:c4:97: c0:65:75:ce:1b:3f:fc:2c:00:1b:c2:30:72:9b:28: 18:38:c3:a4:15:2f:c5:03:b3:99:b7:31:31:34:cc: 39:0b:59:f6:eb:33:8a:83:a7:bf:ed:e1:01:7b:7c: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DD:32:41:8A:2B:2E:8F:C1:84:CF:97:35:6C:8F:F6:A3:50:8C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7bb790-92a7-3e8c-a51c-f8137d18f134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6e:a4:d0:8e:f7:23:fd:17:56:e2:74:98:c4:b4:07:65:d0: d6:89:e3:8d:72:e0:a1:29:84:59:41:7a:54:5d:6d:4a:2a:0e: 24:54:29:09:ee:b8:c1:a2:5c:7d:d0:76:0b:dc:5b:fc:8c:bf: e1:5a:45:9d:fa:21:16:ee:d0:80:e5:51:54:f2:22:97:7c:58: 5f:05:af:51:ae:66:1e:04:0c:9d:3a:d3:ad:a5:43:4c:39:7d: 28:5a:78:1c:04:9e:eb:6f:2b:78:32:ff:35:88:7d:77:65:e2: bb:b9:dc:fe:65:49:99:13:b7:27:39:fb:73:2e:2c:de:d5:29: 39:6b:75:01:9e:b6:f8:97:91:65:68:04:64:b9:00:40:93:a2: cf:fe:0c:44:ca:48:f3:49:63:76:55:95:44:7e:02:80:de:b7: 49:e7:f2:4a:8c:83:91:f5:24:e4:fb:e3:dc:86:eb:cd:cb:0c: 42:ee:9a:ae:35:93:ab:b8:76:52:dc:0b:a9:d8:4d:ad:e8:03: 6a:a6:f3:b6:2c:7c:8c:c9:f7:a0:eb:6d:a2:88:d6:02:4f:02: 27:e4:ac:93:8e:e8:61:9b:06:4d:21:c0:4c:35:50:35:07:1a: d1:c0:07:e2:b1:5e:fc:b5:d7:d0:24:df:e8:a8:8b:ed:7f:05: 3c:49:b6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvENjrqqAkfToDzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjQ1ZjljYmEtYzg4Yy00NTdlLWFiZjYtZGJhMTBmNzcxZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivDECLw6pufB7+obum32WnOzuB2eDV5QHOqX afTehkZQgoqpyy9Wa/4qwXgFfqNNwl9z7xcmsQYFFUPEs+hfYpqnEitLwUR0nZNV /5++RPQ8Rp5Nen/wxgKFOq/xPXTnc7LYbISFOvGbbAy+4mMiT5Ieo66fJibR+/aJ SfF03nG70NTzpwS6KxFa2wOyybo5s14e8snsQR7vuwzTeu2/imHgTTVl/ls/Lz7W aQr2PV/QwB30+b/dHP78daDuoW4v8ZCZEZtpO0YKk5wxgWiHxJfAZXXOGz/8LAAb wjBymygYOMOkFS/FA7OZtzExNMw5C1n26zOKg6e/7eEBe3xAWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/dMkGKKy6PwYTPlzVsj/ajUIyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y3YmI3OTAtOTJhNy0z ZThjLWE1MWMtZjgxMzdkMThmMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9upNCO9yP9F1bidJjEtAdl0NaJ441y4KEphFlBelRdbUoqDiRUKQnu uMGiXH3QdgvcW/yMv+FaRZ36IRbu0IDlUVTyIpd8WF8Fr1GuZh4EDJ06062lQ0w5 fShaeBwEnutvK3gy/zWIfXdl4ru53P5lSZkTtyc5+3MuLN7VKTlrdQGetviXkWVo BGS5AECTos/+DETKSPNJY3ZVlUR+AoDet0nn8kqMg5H1JOT749yG683LDELumq41 k6u4dlLcC6nYTa3oA2qm87YsfIzJ96DrbaKI1gJPAifkrJOO6GGbBk0hwEw1UDUH GtHAB+KxXvy119Ak3+ioi+1/BTxJtgs= -----END CERTIFICATE-----Generated at Fri Apr 17 21:04:58 2026 by rpki-client