$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52eaea8f-da37-3d36-85d9-37dc75d7d4e4.roa File: 52eaea8f-da37-3d36-85d9-37dc75d7d4e4.roa (raw, json) Hash identifier: v//tDHWEMZ5FQqDYVLsSSt6y8j55pc3Jxaoa2vdiUKo= Subject key identifier: 7E:EE:62:E3:6F:A2:42:D2:4E:B6:B2:CA:11:87:28:A8:C6:27:56:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB05FDCF8DC962D1FD5500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52eaea8f-da37-3d36-85d9-37dc75d7d4e4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.32.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:05:fd:cf:8d:c9:62:d1:fd:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=90210e0e-e742-4873-ad1a-0bac65792698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:17:f0:7c:cb:4c:f1:89:e6:86:41:6f:5e: 82:5e:63:14:a1:ef:5b:b3:29:cb:cc:a2:ad:f4:1a: a3:62:ab:30:69:f1:8d:64:c0:c1:c4:b4:69:d9:a1: 15:22:83:65:5f:20:15:b2:23:30:25:8a:43:6b:f6: 3b:dc:9c:69:0c:39:25:6f:53:f1:01:46:0e:f0:10: 7f:c4:e7:c9:0f:d8:d2:4f:8f:54:17:a8:05:0b:89: 3c:fe:d8:42:a8:36:71:ce:b0:d3:a6:d7:4a:64:30: 24:7b:b2:c3:43:4d:ef:9a:a7:9a:7f:58:66:3d:61: 3f:5c:17:b4:2d:b7:db:ab:01:c2:86:66:bd:1f:56: 85:7c:a6:d9:8b:41:01:f5:29:08:33:ef:cc:02:3c: 4b:63:1a:47:19:d2:51:c4:4b:0f:3e:91:4c:d1:3f: db:85:09:1f:2a:33:ff:49:c6:1a:3b:07:1a:2d:ad: ee:cb:f4:0b:f3:ce:55:7d:7b:0f:38:0b:6d:2a:52: 97:1f:4a:4d:5e:95:d7:71:b8:4b:c3:19:59:38:d7: 85:12:d7:e1:5c:4d:fc:8a:d7:f7:11:31:64:62:d2: ea:11:73:ef:19:ba:7b:33:96:1a:96:69:29:f5:2b: bb:26:7f:e1:5c:24:46:b3:f3:83:26:dc:76:b2:06: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EE:62:E3:6F:A2:42:D2:4E:B6:B2:CA:11:87:28:A8:C6:27:56:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52eaea8f-da37-3d36-85d9-37dc75d7d4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5c:99:86:e3:33:9a:12:57:8e:cd:2d:fb:0e:9f:89:1d:56: 60:94:e1:3c:70:1e:ce:81:3c:b3:af:6c:f2:d9:37:19:fe:e0: 78:99:4b:40:5f:5f:bc:fc:6f:7e:a3:0d:a3:a7:32:da:a8:e6: 94:1c:a2:02:83:c4:f3:34:6c:98:2a:e7:fe:3a:1e:5e:35:93: 2c:b1:07:0b:fc:75:73:53:58:06:55:76:1a:4b:55:60:de:8d: 1c:80:9c:c0:ba:1f:b7:74:b7:e7:d7:2e:c1:0b:39:f6:68:44: f3:a5:cd:28:47:ca:aa:2b:63:6d:fa:53:66:91:38:96:90:d7: 41:24:c9:10:4d:77:cb:13:88:ac:fb:b1:22:a5:12:62:03:d7: 70:3e:22:4a:eb:44:55:ae:0c:86:6e:93:8c:1d:1e:a5:8b:87: f8:1b:ed:05:32:80:82:79:a9:51:85:d5:78:9b:ab:d6:bc:4c: c4:76:d9:d6:bd:40:c9:0e:22:3f:1a:45:6e:86:fb:c5:04:1c: 6a:6f:bc:22:5e:0d:bb:72:b3:25:ee:98:45:e2:20:24:c8:12: 25:36:2e:9a:33:77:b6:15:30:57:8d:c3:9c:f1:d4:fa:9e:a5: ed:0a:b8:f2:a5:4f:02:84:18:90:1e:dc:9a:b3:99:73:8d:6f: d1:34:fd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuwX9z43JYtH9VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTAyMTBlMGUtZTc0Mi00ODczLWFkMWEtMGJhYzY1NzkyNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwAX8HzLTPGJ5oZBb16CXmMUoe9bsynLzKKt 9BqjYqswafGNZMDBxLRp2aEVIoNlXyAVsiMwJYpDa/Y73JxpDDklb1PxAUYO8BB/ xOfJD9jST49UF6gFC4k8/thCqDZxzrDTptdKZDAke7LDQ03vmqeaf1hmPWE/XBe0 LbfbqwHChma9H1aFfKbZi0EB9SkIM+/MAjxLYxpHGdJRxEsPPpFM0T/bhQkfKjP/ ScYaOwcaLa3uy/QL885VfXsPOAttKlKXH0pNXpXXcbhLwxlZONeFEtfhXE38itf3 ETFkYtLqEXPvGbp7M5Yalmkp9Su7Jn/hXCRGs/ODJtx2sgbUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7uYuNvokLSTrayyhGHKKjGJ1YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJlYWVhOGYtZGEzNy0z ZDM2LTg1ZDktMzdkYzc1ZDdkNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCDCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5cmYbjM5oSV47NLfsOn4kdVmCU4TxwHs6BPLOvbPLZNxn+4HiZS0Bf X7z8b36jDaOnMtqo5pQcogKDxPM0bJgq5/46Hl41kyyxBwv8dXNTWAZVdhpLVWDe jRyAnMC6H7d0t+fXLsELOfZoRPOlzShHyqorY236U2aROJaQ10EkyRBNd8sTiKz7 sSKlEmID13A+IkrrRFWuDIZuk4wdHqWLh/gb7QUygIJ5qVGF1Xibq9a8TMR22da9 QMkOIj8aRW6G+8UEHGpvvCJeDbtysyXumEXiICTIEiU2Lpozd7YVMFeNw5zx1Pqe pe0KuPKlTwKEGJAe3JqzmXONb9E0/ak= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:42 2026 by rpki-client