$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa File: 43b85172-eff1-37e5-82d9-808fec87e10c.roa (raw, json) Hash identifier: abOYA9nliFui3O3EilKyJv2s0FBdp5oeRW0LdlajNw0= Subject key identifier: AA:A9:65:BC:4E:57:B0:3C:8E:D7:5B:E4:37:01:E4:36:F7:49:A8:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC46AFC82604618A1DC300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.43.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:46:af:c8:26:04:61:8a:1d:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0f0488b7-ef13-4ec2-8353-64f3155bd2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:3a:d9:87:ee:60:47:9b:3f:93:d1:fd:da: 46:df:e3:de:93:17:b1:61:4a:12:b6:40:61:78:74: b3:40:87:40:26:fe:66:60:2d:c4:57:df:ec:16:68: 73:ec:af:5e:04:6d:4e:dc:15:40:33:ce:8e:3c:67: 03:08:f4:70:f3:76:87:59:8b:74:3c:63:32:34:94: 72:db:dd:04:6f:85:4f:13:92:22:91:3d:0e:d1:52: 17:c1:0b:47:72:f3:d3:5a:29:20:09:6e:c5:69:8d: 52:38:1e:c4:55:b6:6d:0c:4b:47:ef:3c:9b:47:0f: 0a:99:17:a8:72:2f:a6:bc:00:e5:98:63:85:47:38: c7:95:5a:98:45:8b:0e:f2:80:2b:50:02:a9:61:14: 88:2a:a6:dc:8a:1a:4e:99:a2:eb:f8:51:88:29:1f: ae:19:d7:0a:45:34:41:54:9b:f5:b7:55:78:d3:46: 51:22:17:28:80:de:1a:5d:d5:0f:74:e2:db:26:f9: 65:e0:27:1e:da:f3:50:58:44:ae:8c:ba:31:95:3e: f8:6d:25:92:89:fd:8c:f7:1e:47:51:38:cf:b0:67: cc:5d:7b:1c:57:68:76:ef:0f:ca:c3:30:79:85:a2: a4:94:5c:ed:14:24:1a:f1:4f:18:a2:ec:b8:ce:8a: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A9:65:BC:4E:57:B0:3C:8E:D7:5B:E4:37:01:E4:36:F7:49:A8:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b85172-eff1-37e5-82d9-808fec87e10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ed:e0:3b:aa:e0:57:40:c0:7c:cb:d2:76:32:2d:7d:7c:ac: d1:18:87:05:18:53:05:af:5c:da:d5:b7:01:31:51:19:2d:73: f5:38:1a:20:9e:32:4b:04:39:8e:17:91:b2:c2:60:93:e6:66: 29:13:a6:a7:af:a4:b6:28:5d:4c:5c:d7:61:65:9f:fe:ae:db: 84:6e:5f:50:f4:2b:7b:55:17:3c:73:63:b4:a6:39:ac:b7:f8: 65:63:5a:4f:e3:f4:02:e7:86:96:ab:3c:bb:bd:98:f1:bc:98: 5e:dd:05:e5:06:3d:43:0a:75:39:84:7c:d8:a6:05:7b:de:f2: 89:09:6d:23:3c:24:20:8c:94:b4:1e:70:2c:db:52:f8:9b:d7: be:25:57:ef:d1:c4:0e:12:41:25:84:78:33:f1:a1:f2:f5:41: 08:f3:d8:24:31:d3:f2:60:ff:b2:50:26:d9:50:19:5d:d3:04: 84:fc:da:23:b3:08:90:87:63:6c:99:d7:8b:7e:fe:cc:90:78: 8a:79:ab:26:28:9e:42:fa:7f:df:27:dc:97:fc:88:50:ab:d6: 6e:22:ac:6c:8a:b0:a3:73:35:70:6f:c0:34:4d:4e:bb:41:ed: 21:6b:4b:20:31:0b:67:2c:00:41:30:3e:6f:e0:44:8a:25:a2: e9:33:e1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEavyCYEYYodwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGYwNDg4YjctZWYxMy00ZWMyLTgzNTMtNjRmMzE1NWJkMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fc62YfuYEebP5PR/dpG3+PekxexYUoStkBh eHSzQIdAJv5mYC3EV9/sFmhz7K9eBG1O3BVAM86OPGcDCPRw83aHWYt0PGMyNJRy 290Eb4VPE5IikT0O0VIXwQtHcvPTWikgCW7FaY1SOB7EVbZtDEtH7zybRw8KmReo ci+mvADlmGOFRzjHlVqYRYsO8oArUAKpYRSIKqbcihpOmaLr+FGIKR+uGdcKRTRB VJv1t1V400ZRIhcogN4aXdUPdOLbJvll4Cce2vNQWESujLoxlT74bSWSif2M9x5H UTjPsGfMXXscV2h27w/KwzB5haKklFztFCQa8U8Youy4zoqJjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqpZbxOV7A8jtdb5DcB5Db3SagyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNiODUxNzItZWZmMS0z N2U1LTgyZDktODA4ZmVjODdlMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7t4Duq4FdAwHzL0nYyLX18rNEYhwUYUwWvXNrVtwExURktc/U4GiCe MksEOY4XkbLCYJPmZikTpqevpLYoXUxc12Fln/6u24RuX1D0K3tVFzxzY7SmOay3 +GVjWk/j9ALnhparPLu9mPG8mF7dBeUGPUMKdTmEfNimBXve8okJbSM8JCCMlLQe cCzbUvib174lV+/RxA4SQSWEeDPxofL1QQjz2CQx0/Jg/7JQJtlQGV3TBIT82iOz CJCHY2yZ14t+/syQeIp5qyYonkL6f98n3Jf8iFCr1m4irGyKsKNzNXBvwDRNTrtB 7SFrSyAxC2csAEEwPm/gRIoloukz4RE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:00 2026 by rpki-client