$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5843d124-2cf4-36b0-8110-531d8ace2169.roa File: 5843d124-2cf4-36b0-8110-531d8ace2169.roa (raw, json) Hash identifier: 1dITJEzQc5IVO6dQsxXWbUSlROJnt5ew0pnG39wi+bU= Subject key identifier: E3:4D:BF:EA:FA:51:6E:46:78:52:C7:48:20:27:35:57:86:B2:FD:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC3E5B2447658AFB1A8080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5843d124-2cf4-36b0-8110-531d8ace2169.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.37.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:3e:5b:24:47:65:8a:fb:1a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ef332ce1-668c-4f59-98f7-31e1e565bebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:68:d9:49:78:da:f3:bc:b7:7c:59:fa:74:ee: 3f:25:53:5b:97:dd:f2:e8:c3:6f:21:34:fc:22:94: dd:17:16:cf:82:06:72:49:77:dc:3e:b2:f0:67:17: 01:39:58:8c:80:a6:a7:38:fc:db:35:a5:91:5f:75: b8:af:ba:b8:8d:19:78:80:22:8c:8d:69:1b:74:1d: 75:14:a3:2e:0c:74:0c:03:71:26:1f:47:5a:41:8b: fe:10:f3:7a:18:5f:bf:76:1d:cb:02:33:9a:c3:7c: 36:ad:d5:ea:c1:70:2c:15:78:b6:b2:64:e1:55:1f: 62:22:c5:9e:08:f4:5c:96:2d:a7:2c:ef:0d:45:a7: 1f:55:18:bd:45:1e:4b:a8:52:0c:2c:7a:99:e4:83: 8e:25:76:ab:62:29:1b:26:36:49:7f:f2:6a:b8:dc: c6:32:91:76:e5:5d:9e:dd:9c:36:e3:06:fa:00:6a: e1:4b:12:9e:cf:e6:77:0c:12:07:43:49:28:40:f9: 2d:87:7a:4b:12:e0:5c:99:4f:67:80:54:f0:cb:67: ea:7b:2c:9f:22:bd:1a:0e:fb:27:65:b8:4c:5a:1e: 8c:79:28:67:f5:71:b0:7d:f9:e4:a7:b4:e1:de:5e: 4b:5c:72:96:b0:b0:15:0c:d6:76:1f:fc:dc:c8:d9: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4D:BF:EA:FA:51:6E:46:78:52:C7:48:20:27:35:57:86:B2:FD:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5843d124-2cf4-36b0-8110-531d8ace2169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5f:e7:b7:9a:19:0e:47:d4:e2:ea:dd:66:ec:79:d4:6b:e7: a5:c7:6e:0f:28:51:78:89:de:14:0d:ea:86:1f:51:e2:47:8d: a7:18:5b:ea:97:37:e9:1b:a0:5b:b4:48:ea:6a:d8:4b:83:2e: c8:8d:8d:c8:20:01:c8:e3:71:f4:1b:8e:c4:c6:23:78:d5:07: 17:92:06:1e:87:56:31:68:f1:ea:b4:1d:6d:a1:9f:14:63:1c: 48:c8:39:54:2d:40:f4:ec:37:fa:07:5b:2f:43:46:6b:85:16: e9:85:d6:80:de:f6:07:8f:30:1e:db:76:7f:f7:98:a9:a7:7f: 99:79:cd:f9:2b:79:79:3d:bc:27:d1:6b:35:0f:b9:07:eb:73: 20:2c:48:ad:91:1b:85:4d:29:b2:03:be:7a:d6:10:fd:35:d3: fa:17:73:c4:b7:53:5a:a9:28:a6:71:4c:db:fb:7b:e1:45:13: 0f:77:82:37:14:b5:77:22:21:be:7b:14:c2:f5:4e:6a:25:aa: 7c:1b:88:09:8c:05:99:e5:61:c7:e2:68:c9:04:9e:38:6f:18: b4:1b:c4:13:84:48:52:f6:0e:3d:94:c0:43:3b:8e:6b:1a:24: 91:4b:33:a5:50:0e:2a:5c:c9:c6:ca:57:22:d1:7e:97:c2:b6: cc:ce:48:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvD5bJEdlivsagIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZWYzMzJjZTEtNjY4Yy00ZjU5LTk4ZjctMzFlMWU1NjViZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWjZSXja87y3fFn6dO4/JVNbl93y6MNvITT8 IpTdFxbPggZySXfcPrLwZxcBOViMgKanOPzbNaWRX3W4r7q4jRl4gCKMjWkbdB11 FKMuDHQMA3EmH0daQYv+EPN6GF+/dh3LAjOaw3w2rdXqwXAsFXi2smThVR9iIsWe CPRcli2nLO8NRacfVRi9RR5LqFIMLHqZ5IOOJXarYikbJjZJf/JquNzGMpF25V2e 3Zw24wb6AGrhSxKez+Z3DBIHQ0koQPkth3pLEuBcmU9ngFTwy2fqeyyfIr0aDvsn ZbhMWh6MeShn9XGwffnkp7Th3l5LXHKWsLAVDNZ2H/zcyNmVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONNv+r6UW5GeFLHSCAnNVeGsv2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg0M2QxMjQtMmNmNC0z NmIwLTgxMTAtNTMxZDhhY2UyMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZf57eaGQ5H1OLq3WbsedRr56XHbg8oUXiJ3hQN6oYfUeJHjacYW+qX N+kboFu0SOpq2EuDLsiNjcggAcjjcfQbjsTGI3jVBxeSBh6HVjFo8eq0HW2hnxRj HEjIOVQtQPTsN/oHWy9DRmuFFumF1oDe9gePMB7bdn/3mKmnf5l5zfkreXk9vCfR azUPuQfrcyAsSK2RG4VNKbIDvnrWEP010/oXc8S3U1qpKKZxTNv7e+FFEw93gjcU tXciIb57FML1TmolqnwbiAmMBZnlYcfiaMkEnjhvGLQbxBOESFL2Dj2UwEM7jmsa JJFLM6VQDipcycbKVyLRfpfCtszOSCY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:48:50 2026 by rpki-client