$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53edb63c-8f0e-32cb-aa3e-bfe6520d0e2d.roa File: 53edb63c-8f0e-32cb-aa3e-bfe6520d0e2d.roa (raw, json) Hash identifier: BgCkw7lm7SwIua81e5zqqZ8AP5+WSJxz1qgBc5Aogfo= Subject key identifier: 3E:B2:BD:C0:FE:D7:7A:EF:41:3C:DC:4C:52:F1:86:71:22:C5:B9:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC1DB614FDD895E080CD90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53edb63c-8f0e-32cb-aa3e-bfe6520d0e2d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 75.68.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:1d:b6:14:fd:d8:95:e0:80:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3afa0afc-22a3-4198-885f-9b510a4e378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:47:7e:8c:17:76:9b:cb:75:3d:8a:79:a0: ee:f1:7b:70:4d:06:80:d5:56:ef:f2:10:5e:79:28: c8:7c:16:da:68:37:d9:f2:d1:2f:21:2e:bd:cf:e2: 3c:72:1c:79:96:c4:49:8a:e5:ee:db:82:c6:be:e9: 37:8a:60:22:4b:fd:a9:0f:54:27:52:d3:13:46:70: 28:91:76:2a:0c:ca:77:11:7b:85:4e:40:f2:4c:ef: 63:88:93:f5:4d:f4:94:55:41:39:7e:79:cc:45:e5: ba:fd:e7:4e:53:9a:b7:15:8d:93:be:72:38:3d:0d: 03:42:de:06:c3:07:b1:0e:ae:0e:e2:ad:7c:b4:69: 24:1e:3e:ce:16:8b:8d:f8:95:c4:5b:cd:dd:af:a4: 09:e9:27:7d:90:9e:3d:45:ad:76:d1:40:c1:c0:21: 56:94:e3:db:90:41:74:7c:86:15:ef:b4:b5:e7:6a: 41:65:99:8d:68:9b:02:77:a2:53:be:3f:db:f0:4a: 64:ea:05:b3:d4:29:35:4f:3a:79:ed:f0:e3:ce:32: 7b:a6:18:e8:d3:e5:2a:55:b0:44:c7:94:8d:ae:ed: e8:67:3f:d4:38:9d:5f:99:f4:c0:a4:c0:59:d7:5b: af:0d:f6:ea:ab:ea:d8:4a:35:88:1d:54:15:e9:c4: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B2:BD:C0:FE:D7:7A:EF:41:3C:DC:4C:52:F1:86:71:22:C5:B9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53edb63c-8f0e-32cb-aa3e-bfe6520d0e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.68.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:aa:5b:d1:3e:7a:b7:6f:58:81:9e:a8:51:07:04:8a:59:4d: 4d:9a:3c:99:a0:a2:e8:96:00:19:f1:c5:a9:db:12:74:de:c1: 83:7d:4d:6f:79:39:22:95:61:36:03:d3:e1:e4:2c:41:6a:f3: 11:d6:b2:58:aa:fa:11:44:82:86:2f:f2:a3:e1:c4:c9:29:a9: 47:1c:61:d7:15:4e:56:d9:06:a3:19:35:6f:a4:64:64:9a:7e: d9:6e:a1:63:42:f8:bb:2e:be:a1:37:d8:ab:22:3e:88:10:67: f0:9b:de:65:c0:bd:a4:2e:c7:9f:07:ab:d9:b6:c2:c2:1f:28: 30:5a:9f:ea:dd:94:07:97:74:c3:df:90:32:6d:a8:41:14:70: e2:f4:32:ef:03:69:f6:26:d2:b4:27:03:1e:a4:c2:63:2b:eb: 83:39:e5:ad:57:e5:4d:cc:99:de:44:04:1d:33:e2:11:94:74: a3:bf:dc:55:a6:4a:35:87:e5:c5:62:01:0b:8a:38:b3:22:b3: cc:7a:fc:12:42:aa:96:e0:c9:0a:15:6b:8a:4d:23:0b:7b:4c: 62:06:f2:73:b8:df:da:60:56:5e:5f:45:d5:02:7f:7d:35:48: 68:17:f5:14:00:ae:4a:c5:cb:de:20:c0:cb:72:a8:cb:74:54: e4:f5:9f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvB22FP3YleCAzZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2FmYTBhZmMtMjJhMy00MTk4LTg4NWYtOWI1MTBhNGUzNzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit9HfowXdpvLdT2KeaDu8XtwTQaA1Vbv8hBe eSjIfBbaaDfZ8tEvIS69z+I8chx5lsRJiuXu24LGvuk3imAiS/2pD1QnUtMTRnAo kXYqDMp3EXuFTkDyTO9jiJP1TfSUVUE5fnnMReW6/edOU5q3FY2TvnI4PQ0DQt4G wwexDq4O4q18tGkkHj7OFouN+JXEW83dr6QJ6Sd9kJ49Ra120UDBwCFWlOPbkEF0 fIYV77S152pBZZmNaJsCd6JTvj/b8Epk6gWz1Ck1Tzp57fDjzjJ7phjo0+UqVbBE x5SNru3oZz/UOJ1fmfTApMBZ11uvDfbqq+rYSjWIHVQV6cTrBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6yvcD+13rvQTzcTFLxhnEixbllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNlZGI2M2MtOGYwZS0z MmNiLWFhM2UtYmZlNjUyMGQwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS0RIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCqW9E+erdvWIGeqFEHBIpZTU2aPJmgouiWABnxxanbEnTewYN9TW95 OSKVYTYD0+HkLEFq8xHWsliq+hFEgoYv8qPhxMkpqUccYdcVTlbZBqMZNW+kZGSa ftluoWNC+LsuvqE32KsiPogQZ/Cb3mXAvaQux58Hq9m2wsIfKDBan+rdlAeXdMPf kDJtqEEUcOL0Mu8DafYm0rQnAx6kwmMr64M55a1X5U3Mmd5EBB0z4hGUdKO/3FWm SjWH5cViAQuKOLMis8x6/BJCqpbgyQoVa4pNIwt7TGIG8nO439pgVl5fRdUCf301 SGgX9RQArkrFy94gwMtyqMt0VOT1n1A= -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:18 2026 by rpki-client