$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa File: 49e20564-5bb6-373a-bf3f-8d7320b64039.roa (raw, json) Hash identifier: 5v8itHHhVb6gXayHuZp3f2112zIAJGKiZSSQ3RlQNUo= Subject key identifier: 11:67:C8:4B:7F:3F:89:0F:4A:56:B5:5C:38:3E:CB:95:87:A4:88:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB17B2D8E3CF7534F21E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.49.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:17:b2:d8:e3:cf:75:34:f2:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c6f5a1a0-83f2-4676-b0f0-733a5dfff456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:62:0d:cf:a6:a0:e6:8f:c5:ee:e8:bc:8e: fa:d1:ef:da:ab:a5:d0:45:b6:3e:8b:a9:a9:c0:6e: 45:ac:e1:eb:4d:20:65:5f:69:cd:0c:4c:39:45:50: 9b:03:5d:69:df:d9:28:ac:d4:45:3a:50:db:7f:11: 0a:45:6a:cf:5f:04:dd:c6:2e:f1:4a:6e:cd:51:1a: 17:9c:62:68:f3:e0:70:10:f3:e1:82:cc:94:b3:94: c1:7d:7a:39:25:6a:3a:e4:f5:f5:9b:6c:35:89:68: 92:60:36:9a:cd:a9:cb:c4:22:01:23:eb:43:f4:68: 9b:51:87:ca:45:e8:c1:95:1f:a5:1d:a2:a0:fc:21: c4:1e:62:93:cd:f7:1f:b8:fc:30:11:46:32:bb:2b: cd:bb:ef:fa:d3:db:e6:38:8b:26:11:56:4a:79:dc: ff:ce:a0:74:37:b7:29:eb:5b:5e:c1:d3:40:16:73: fc:d9:55:87:f8:22:cf:c7:f8:e2:f9:71:4a:13:4b: 15:d8:2e:e0:5f:78:92:b7:35:df:60:52:65:37:fb: 9e:93:27:51:32:9b:9c:ad:93:17:a5:3c:f8:db:6e: 9b:56:49:e5:c6:a1:2d:5b:e0:8d:d3:d6:d7:7c:5e: 1b:15:c9:d5:c1:2d:2b:73:a2:f9:31:c1:d3:10:c9: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:C8:4B:7F:3F:89:0F:4A:56:B5:5C:38:3E:CB:95:87:A4:88:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5a:d1:13:3e:52:ac:67:74:a7:2c:48:c6:c1:09:a4:0f:90: 4d:dc:2b:18:1c:73:7a:4b:54:3c:7a:a4:33:8d:cf:31:b2:df: f0:b9:e5:02:7b:6c:72:93:e4:ad:ea:95:35:68:80:40:20:7d: 06:d5:15:82:54:a2:f3:70:d5:37:9b:fe:78:fc:25:e0:99:de: 2a:de:1b:df:58:fc:86:66:dd:37:d2:d1:79:b1:67:46:cc:f4: fc:73:4a:8a:e7:4f:01:ae:db:60:14:f4:fb:f9:82:a0:05:88: 28:da:a7:0b:f0:87:2b:c2:3a:1a:c6:2e:6b:4f:9e:4b:71:bf: 81:2d:66:d3:54:ba:e2:f9:97:52:68:39:a9:e6:73:c7:1c:de: e0:6a:20:0d:a3:5e:82:53:76:90:bf:64:1b:f5:85:b5:62:e2: e1:bd:7e:a5:fe:f9:4b:fd:f4:ad:10:e7:f0:87:f4:36:e7:3a: 4b:70:60:18:9f:98:b0:17:b3:48:5e:1f:d5:d5:2c:b5:75:45: a5:e7:bb:fc:b0:df:df:dc:0b:0a:ba:95:13:9d:98:db:04:04: 5f:4f:f8:b8:a7:f3:5b:c5:d0:0a:96:dd:f9:a4:c6:bf:d6:db: 0c:4d:dd:d8:38:a8:0c:1f:77:0b:f0:d3:ad:55:c6:bd:d7:c0: 32:64:09:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuxey2OPPdTTyHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzZmNWExYTAtODNmMi00Njc2LWIwZjAtNzMzYTVkZmZmNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmldiDc+moOaPxe7ovI760e/aq6XQRbY+i6mp wG5FrOHrTSBlX2nNDEw5RVCbA11p39korNRFOlDbfxEKRWrPXwTdxi7xSm7NURoX nGJo8+BwEPPhgsyUs5TBfXo5JWo65PX1m2w1iWiSYDaazanLxCIBI+tD9GibUYfK RejBlR+lHaKg/CHEHmKTzfcfuPwwEUYyuyvNu+/609vmOIsmEVZKedz/zqB0N7cp 61tewdNAFnP82VWH+CLPx/ji+XFKE0sV2C7gX3iStzXfYFJlN/uekydRMpucrZMX pTz4226bVknlxqEtW+CN09bXfF4bFcnVwS0rc6L5McHTEMlwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFnyEt/P4kPSla1XDg+y5WHpIgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDllMjA1NjQtNWJiNi0z NzNhLWJmM2YtOGQ3MzIwYjY0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpa0RM+UqxndKcsSMbBCaQPkE3cKxgcc3pLVDx6pDONzzGy3/C55QJ7 bHKT5K3qlTVogEAgfQbVFYJUovNw1Teb/nj8JeCZ3ireG99Y/IZm3TfS0XmxZ0bM 9PxzSornTwGu22AU9Pv5gqAFiCjapwvwhyvCOhrGLmtPnktxv4EtZtNUuuL5l1Jo Oanmc8cc3uBqIA2jXoJTdpC/ZBv1hbVi4uG9fqX++Uv99K0Q5/CH9DbnOktwYBif mLAXs0heH9XVLLV1RaXnu/yw39/cCwq6lROdmNsEBF9P+Lin81vF0AqW3fmkxr/W 2wxN3dg4qAwfdwvw061Vxr3XwDJkCQQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:51 2026 by rpki-client