$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa File: 68101dc3-f69a-351d-bfac-8fa3b238b663.roa (raw, json) Hash identifier: lJfojTsFKG0QhOQVgB8WMCi/NJl5c53V/Z5Wo5H3rJQ= Subject key identifier: 66:AC:FA:AF:5F:E9:B6:47:12:0D:C4:AE:37:86:34:C8:9A:FB:D6:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB094C95B4CF52E3A3F300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.36.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:09:4c:95:b4:cf:52:e3:a3:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b9b3d967-d0b3-4043-b18a-dd3bed1ee188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:2e:0c:fc:17:63:da:5e:4a:cf:10:c8:c3: 05:17:1a:e4:b7:40:64:c5:8d:2b:7a:f3:67:f4:b4: b6:c3:96:1d:9a:90:bf:d7:91:9e:76:91:c6:30:02: fd:e4:fe:c0:30:24:de:6c:0e:18:04:bc:c6:71:33: 61:f0:ca:5d:eb:9c:c9:ca:25:5d:53:c4:84:82:37: 1d:82:42:f3:da:f5:20:38:3d:30:60:0a:42:03:98: 78:8f:cb:77:b5:3b:33:f9:bc:f7:64:ea:35:6c:92: af:9f:39:2d:2d:0b:84:0f:3f:30:d2:04:09:5c:36: 97:23:ce:ea:47:61:84:9f:90:01:de:af:e8:7d:44: e7:30:9d:f7:b7:e4:fd:e0:87:a3:f2:8f:f0:fe:14: 4c:3a:97:bb:6a:37:6f:97:0f:02:bd:9e:db:f4:b2: bc:7f:4d:82:a3:84:ab:65:57:5a:50:f2:ad:05:18: 1d:9d:6f:b5:e3:6e:31:71:27:52:1e:56:19:48:74: c0:20:d2:d9:9e:91:fc:14:de:75:c9:8e:45:6a:96: 20:fb:61:cb:88:da:1a:9e:b8:d7:27:6c:5b:4f:c3: ce:97:8a:67:50:de:d7:95:7a:a8:1e:21:b3:b8:d9: f7:b5:77:31:50:f5:ec:33:c5:34:76:f7:56:fe:ee: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AC:FA:AF:5F:E9:B6:47:12:0D:C4:AE:37:86:34:C8:9A:FB:D6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68101dc3-f69a-351d-bfac-8fa3b238b663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:10:79:0a:2c:84:20:33:31:a1:0f:35:28:04:35:a6:89:1d: 07:3f:09:44:94:f2:d8:0f:13:ee:3f:14:62:4b:49:20:cc:6b: f4:21:41:2b:64:bb:4b:fd:48:e3:f0:41:56:aa:29:77:b5:2d: df:b3:f5:28:c4:b7:5f:7c:d6:bf:92:35:9f:e9:d7:a2:2f:40: 4b:f3:8b:ce:88:49:34:fa:07:eb:0b:a4:8a:f1:92:4f:3e:96: ae:6a:b0:01:20:ba:78:24:d0:70:b3:eb:4e:66:d2:74:d4:9f: 8a:91:9a:0e:71:c4:76:53:fa:b7:ad:59:14:75:eb:73:2e:fc: ac:79:d0:47:f7:de:1d:ce:3f:74:05:6b:eb:8a:ef:8d:8e:be: 4b:2f:79:3f:00:43:34:e5:c5:9e:d0:44:ac:e1:d8:12:de:75: 17:e5:8d:40:03:db:dc:3d:58:25:3d:27:7c:56:86:2b:d8:26: 08:ac:69:4b:bf:ea:f6:4a:7f:59:55:e1:99:7b:d3:45:81:77: 4f:03:ea:0d:2e:82:12:f8:8a:3b:86:e8:3e:ed:26:97:01:4a: cf:21:27:71:7e:62:5c:c3:e8:df:be:b7:32:f4:e0:ee:44:49: 6b:df:d9:a3:ba:87:62:3f:89:f0:6f:46:de:e9:e8:ac:44:35: d3:23:a0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuwlMlbTPUuOj8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjliM2Q5NjctZDBiMy00MDQzLWIxOGEtZGQzYmVkMWVlMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs4uDPwXY9peSs8QyMMFFxrkt0BkxY0revNn 9LS2w5YdmpC/15GedpHGMAL95P7AMCTebA4YBLzGcTNh8Mpd65zJyiVdU8SEgjcd gkLz2vUgOD0wYApCA5h4j8t3tTsz+bz3ZOo1bJKvnzktLQuEDz8w0gQJXDaXI87q R2GEn5AB3q/ofUTnMJ33t+T94Iej8o/w/hRMOpe7ajdvlw8CvZ7b9LK8f02Co4Sr ZVdaUPKtBRgdnW+1424xcSdSHlYZSHTAINLZnpH8FN51yY5FapYg+2HLiNoanrjX J2xbT8POl4pnUN7XlXqoHiGzuNn3tXcxUPXsM8U0dvdW/u4IwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGas+q9f6bZHEg3ErjeGNMia+9ZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjgxMDFkYzMtZjY5YS0z NTFkLWJmYWMtOGZhM2IyMzhiNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcQeQoshCAzMaEPNSgENaaJHQc/CUSU8tgPE+4/FGJLSSDMa/QhQStk u0v9SOPwQVaqKXe1Ld+z9SjEt1981r+SNZ/p16IvQEvzi86ISTT6B+sLpIrxkk8+ lq5qsAEgungk0HCz605m0nTUn4qRmg5xxHZT+retWRR163Mu/Kx50Ef33h3OP3QF a+uK742OvksveT8AQzTlxZ7QRKzh2BLedRfljUAD29w9WCU9J3xWhivYJgisaUu/ 6vZKf1lV4Zl700WBd08D6g0ughL4ijuG6D7tJpcBSs8hJ3F+YlzD6N++tzL04O5E SWvf2aO6h2I/ifBvRt7p6KxENdMjoCI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:46:16 2026 by rpki-client