$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bdbd711-26f5-37bc-8ff1-fcc62e668092.roa File: 4bdbd711-26f5-37bc-8ff1-fcc62e668092.roa (raw, json) Hash identifier: x+cMYzfJeBg1iQOQZ3kvcPtcrbG6eUKINyHD2dKWVEI= Subject key identifier: 8C:04:11:ED:69:AC:57:F4:91:AC:82:42:71:F2:92:43:F7:49:57:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB1824B67EDD1802C9CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bdbd711-26f5-37bc-8ff1-fcc62e668092.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.49.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:18:24:b6:7e:dd:18:02:c9:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1bfeb1d3-4155-4c0e-a460-7d526af6f09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:7e:ee:71:ca:12:14:ec:9a:73:86:0d:70: cc:65:e4:cb:6e:0f:b1:7a:d6:25:9f:d3:f7:96:5f: 1b:dc:e6:85:75:dc:e7:a5:86:b5:42:b9:6a:2d:fb: 82:8d:d2:7a:af:32:87:80:fc:74:1a:f8:2f:71:87: ee:04:6b:0a:b4:7d:d6:ae:af:07:f3:68:4f:51:99: 53:78:32:d8:86:69:c5:2d:47:2f:bb:85:ff:cc:11: 37:09:7b:8f:77:74:db:6b:0e:f0:cf:50:bd:ed:b5: 3f:98:09:15:87:59:9c:5a:77:22:55:cc:3c:29:ea: 6c:33:93:25:40:d7:a4:cb:52:e7:1e:c0:87:74:8f: 4d:ac:3e:1f:d1:6d:1c:2d:3b:a6:2f:6f:d7:c8:95: fe:ef:d4:1f:b4:13:a5:ed:eb:a8:2b:70:40:d5:74: 44:f7:d5:56:44:c0:ea:6c:ff:91:83:78:28:22:39: b8:31:08:62:b4:e1:c7:80:ce:91:dc:6d:b5:b8:d9: 77:0d:e9:c5:dd:b1:7f:25:2e:b9:ec:15:47:07:4c: 90:0c:50:ce:f3:63:76:fc:13:2d:1e:ff:11:49:73: fa:63:7c:5c:fa:70:c1:b2:a4:87:4c:06:90:4b:13: 11:37:ff:fe:83:63:7f:eb:69:51:46:12:05:a2:f5: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:11:ED:69:AC:57:F4:91:AC:82:42:71:F2:92:43:F7:49:57:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bdbd711-26f5-37bc-8ff1-fcc62e668092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:94:1d:07:b1:70:ee:f9:72:c8:33:04:54:29:07:0f:71:e3: e9:e5:dd:2a:24:c4:01:7a:0a:1d:e6:cc:69:61:95:b8:0b:9b: b9:c1:57:bd:2b:20:d2:b1:de:ec:91:88:02:a9:80:c7:de:d5: ec:f8:b6:74:f9:f2:8b:cd:fd:34:37:37:68:57:2c:82:db:db: fc:96:75:10:f1:7b:a7:1c:6f:5b:ba:f8:90:e2:18:36:22:de: a8:1b:ed:37:af:3a:89:d5:28:f0:cb:b5:71:de:35:c5:ad:4f: b9:e5:39:f8:4c:0e:e3:7b:22:12:d2:30:d1:00:ba:94:9f:e5: 2f:02:c7:b9:54:e0:3e:ab:23:96:1f:b3:3d:5f:1c:2b:94:ca: 4a:cf:6a:dc:33:99:28:fe:c6:3f:b2:0f:5a:c9:6d:5b:ad:0c: b8:7f:a8:2c:81:d8:f7:43:09:17:4d:ac:47:16:92:57:60:db: dd:b7:0f:6b:ce:45:d3:f8:be:1f:44:de:a0:6e:39:7c:ed:71: 09:eb:c3:53:da:88:46:4b:4a:34:90:94:a8:ac:c4:5b:48:e2: fa:9f:8e:32:87:e3:9f:28:2e:b3:ee:ab:ea:32:ba:86:e4:a3: d2:1b:ba:09:36:5b:5b:6b:ea:33:a6:c9:30:c3:11:57:9b:f0: 74:d6:c7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuxgktn7dGALJzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWJmZWIxZDMtNDE1NS00YzBlLWE0NjAtN2Q1MjZhZjZmMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9V+7nHKEhTsmnOGDXDMZeTLbg+xetYln9P3 ll8b3OaFddznpYa1QrlqLfuCjdJ6rzKHgPx0GvgvcYfuBGsKtH3Wrq8H82hPUZlT eDLYhmnFLUcvu4X/zBE3CXuPd3Tbaw7wz1C97bU/mAkVh1mcWnciVcw8KepsM5Ml QNeky1LnHsCHdI9NrD4f0W0cLTumL2/XyJX+79QftBOl7euoK3BA1XRE99VWRMDq bP+Rg3goIjm4MQhitOHHgM6R3G21uNl3DenF3bF/JS657BVHB0yQDFDO82N2/BMt Hv8RSXP6Y3xc+nDBsqSHTAaQSxMRN//+g2N/62lRRhIFovWGjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwEEe1prFf0kayCQnHykkP3SVcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJkYmQ3MTEtMjZmNS0z N2JjLThmZjEtZmNjNjJlNjY4MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2UHQexcO75csgzBFQpBw9x4+nl3SokxAF6Ch3mzGlhlbgLm7nBV70r INKx3uyRiAKpgMfe1ez4tnT58ovN/TQ3N2hXLILb2/yWdRDxe6ccb1u6+JDiGDYi 3qgb7TevOonVKPDLtXHeNcWtT7nlOfhMDuN7IhLSMNEAupSf5S8Cx7lU4D6rI5Yf sz1fHCuUykrPatwzmSj+xj+yD1rJbVutDLh/qCyB2PdDCRdNrEcWkldg2923D2vO RdP4vh9E3qBuOXztcQnrw1PaiEZLSjSQlKisxFtI4vqfjjKH458oLrPuq+oyuobk o9Ibugk2W1tr6jOmyTDDEVeb8HTWxwM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:43 2026 by rpki-client