$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c506ec-7745-352d-8898-85bd085b4f76.roa File: 42c506ec-7745-352d-8898-85bd085b4f76.roa (raw, json) Hash identifier: ixbyBP/E7RZFfvjGOj1qcHW/zxy4enA8akUGkddBpO4= Subject key identifier: 10:BA:1E:DA:2D:66:88:FF:A5:20:95:64:77:AF:A1:80:19:BB:CB:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB2511AAC4D09AAE81B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c506ec-7745-352d-8898-85bd085b4f76.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.84.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:25:11:aa:c4:d0:9a:ae:81:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=63361102-79ee-402d-8b78-3dfd02265ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:5b:a5:a1:d5:db:59:dd:fd:af:b0:6b:8e: 3b:38:e7:1f:a3:00:a8:34:ee:54:5b:2d:4c:ce:8d: 2a:93:03:b0:0a:f9:b7:0f:e2:43:5b:e1:49:c5:41: 95:7d:ee:98:17:b7:48:a4:70:b3:cf:83:38:bb:2f: ad:22:bc:fc:79:5d:da:42:82:57:f1:0b:75:9c:56: 38:53:45:39:35:a3:32:be:76:b2:8b:af:ff:e3:10: 05:1a:8c:1e:ff:47:9e:0d:d4:d1:d9:a3:88:da:71: bf:63:e2:cb:57:5c:f2:67:d1:81:10:b0:2e:21:d5: c6:dc:f8:d4:2b:0f:00:28:15:80:63:6d:28:81:bb: 55:31:95:93:a8:aa:52:eb:58:87:6b:11:9c:ae:d3: c4:f5:b6:3b:b7:77:39:e5:b6:d3:94:fe:02:0d:25: 3d:5b:91:c7:a4:c0:66:67:d7:81:eb:57:3b:63:5d: 50:f6:df:4a:20:2a:23:e4:4b:05:68:29:aa:08:41: 36:5e:06:49:a7:93:0b:a3:d6:80:d6:55:41:6e:5b: 37:42:98:c4:cf:80:31:0b:79:f8:d9:ab:21:30:bc: 3a:87:d1:c9:8d:1a:3a:ae:ac:5f:6d:cb:28:ae:ee: d2:0d:f9:ca:87:c1:d4:84:aa:0c:d7:4f:e7:32:5d: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:1E:DA:2D:66:88:FF:A5:20:95:64:77:AF:A1:80:19:BB:CB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42c506ec-7745-352d-8898-85bd085b4f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:90:8d:0d:22:ce:d5:f7:05:bf:10:eb:8f:92:b6:31:91:a3: 7c:ad:31:6b:cf:f0:b1:60:f3:00:6a:28:a3:c3:50:0a:83:e9: aa:7e:85:7f:c3:a3:e8:a9:e9:70:fc:8e:9b:60:25:25:b8:47: c6:eb:28:2a:f1:33:81:ae:c2:36:a7:dc:21:c8:7b:4b:01:df: 35:d7:8d:9c:34:12:84:e3:f2:cf:2f:63:df:ee:9d:a1:d3:5e: 3f:20:a3:ca:0c:6f:01:d6:bf:b5:c6:2b:64:bf:8a:7a:83:0b: 12:a7:08:25:e0:7e:c6:34:bf:3e:8d:de:5e:04:a2:b8:79:5e: b7:0a:e7:13:ff:d4:3e:e1:50:89:cb:93:9b:83:71:92:44:5f: 51:25:46:bb:7f:cc:e1:d3:ef:a0:d5:50:b3:0a:28:de:49:69: ae:6f:70:00:29:1b:c9:09:01:f5:f7:f7:fc:e3:c2:b3:79:57: 66:99:d0:36:32:0e:0d:56:16:88:3a:61:73:59:7c:f1:db:21: 27:8c:56:94:39:2e:f5:16:e2:24:7a:91:ea:e5:31:fa:ca:b7: 40:73:6d:cf:92:b7:7e:f8:0c:d6:fc:8c:7e:be:90:da:0f:2e: 84:bf:ef:34:3e:8a:8a:fc:86:72:dc:ec:84:de:92:51:3d:ff: 5a:96:d9:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuyURqsTQmq6BtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjMzNjExMDItNzllZS00MDJkLThiNzgtM2RmZDAyMjY1ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZbpaHV21nd/a+wa447OOcfowCoNO5UWy1M zo0qkwOwCvm3D+JDW+FJxUGVfe6YF7dIpHCzz4M4uy+tIrz8eV3aQoJX8Qt1nFY4 U0U5NaMyvnayi6//4xAFGowe/0eeDdTR2aOI2nG/Y+LLV1zyZ9GBELAuIdXG3PjU Kw8AKBWAY20ogbtVMZWTqKpS61iHaxGcrtPE9bY7t3c55bbTlP4CDSU9W5HHpMBm Z9eB61c7Y11Q9t9KICoj5EsFaCmqCEE2XgZJp5MLo9aA1lVBbls3QpjEz4AxC3n4 2ashMLw6h9HJjRo6rqxfbcsoru7SDfnKh8HUhKoM10/nMl3CGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC6HtotZoj/pSCVZHevoYAZu8vLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJjNTA2ZWMtNzc0NS0z NTJkLTg4OTgtODViZDA4NWI0Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeQjQ0iztX3Bb8Q64+StjGRo3ytMWvP8LFg8wBqKKPDUAqD6ap+hX/D o+ip6XD8jptgJSW4R8brKCrxM4Guwjan3CHIe0sB3zXXjZw0EoTj8s8vY9/unaHT Xj8go8oMbwHWv7XGK2S/inqDCxKnCCXgfsY0vz6N3l4Eorh5XrcK5xP/1D7hUInL k5uDcZJEX1ElRrt/zOHT76DVULMKKN5Jaa5vcAApG8kJAfX39/zjwrN5V2aZ0DYy Dg1WFog6YXNZfPHbISeMVpQ5LvUW4iR6kerlMfrKt0Bzbc+St374DNb8jH6+kNoP LoS/7zQ+ior8hnLc7ITeklE9/1qW2X8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:38:01 2026 by rpki-client