$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a14f4f5-3882-39a8-b56c-f1b6c9384e16.roa File: 6a14f4f5-3882-39a8-b56c-f1b6c9384e16.roa (raw, json) Hash identifier: sHkkBsjOEyMzyUiLgGatTxMoDK1oWzad473dML7YI0s= Subject key identifier: 72:0D:A0:68:59:68:C5:2A:CB:50:11:79:53:4A:A3:EF:04:2A:31:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC40C046B1BF5DEA5E9980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a14f4f5-3882-39a8-b56c-f1b6c9384e16.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.40.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:40:c0:46:b1:bf:5d:ea:5e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4b61b613-f081-407e-8f2c-7aadee359718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:0c:1d:aa:e6:6e:41:14:a9:11:c6:c4:a6: 5d:04:16:ba:0d:f0:37:6a:c2:b7:52:cc:5e:bd:18: be:29:d5:36:e3:d3:6c:d6:56:96:4a:39:51:43:af: e3:e6:51:e3:fa:ea:bd:df:14:de:fb:06:16:cb:d7: e3:f4:ad:5f:2b:ef:cb:49:16:a4:20:a6:b7:a8:e7: f1:e6:e8:99:f6:30:0d:d6:77:e1:03:a6:44:e6:7b: fd:bb:ca:98:63:60:c7:9f:1c:85:86:16:28:87:2f: 9e:52:56:e6:ef:42:1c:44:9c:c1:44:fb:ff:00:3b: 25:e9:b3:57:da:c0:3f:32:19:fb:5b:c4:94:2a:f9: 6c:e3:88:ac:57:5c:cf:05:16:01:11:9d:5c:89:c6: 6a:7c:c0:6d:b3:be:2c:86:91:25:15:40:c6:a7:98: bc:dc:24:6f:7a:76:d9:ef:13:7e:42:92:bc:c8:f0: 86:db:a2:ac:6f:6a:d8:a7:53:c8:5f:5b:6f:6e:bf: 75:b5:06:b2:f3:1c:15:b1:9d:4f:95:46:5d:e0:e2: b2:2c:c4:e4:e4:91:81:e2:f2:e0:c6:47:7e:f2:b0: f7:2c:a0:ee:33:27:c9:70:af:e4:02:4f:5c:ad:69: 75:25:d2:1e:fe:10:99:eb:63:f5:e7:8d:c9:a0:cb: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0D:A0:68:59:68:C5:2A:CB:50:11:79:53:4A:A3:EF:04:2A:31:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a14f4f5-3882-39a8-b56c-f1b6c9384e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:48:63:a7:c0:8f:5c:26:87:a7:fe:a5:da:50:56:d8:11:66: e5:79:8f:70:83:c3:68:ba:e6:83:a7:b7:b4:2c:71:18:aa:3f: 17:60:ab:5b:c9:17:1c:75:08:e7:fe:db:89:61:28:ce:8e:1d: a6:74:1c:0e:1f:bd:bd:51:c4:67:f4:f6:0e:2a:42:2b:d8:4b: bf:5a:16:04:9c:50:f8:16:75:7a:61:72:85:bc:2d:8e:ae:ab: ed:90:28:21:f1:30:3d:35:67:54:52:d6:29:88:2e:78:cd:30: 50:e4:ae:3e:c1:d2:8c:9f:e3:20:13:30:8b:50:1b:c6:d8:4d: 64:29:c4:78:27:35:6e:e6:70:06:1a:db:19:03:90:f1:a4:f6: e5:83:be:17:3e:1c:7a:bc:6b:0a:32:03:8d:74:9c:44:52:9f: 62:c8:69:26:b7:d1:bc:67:aa:aa:d2:eb:52:a7:27:07:20:79: a6:fd:5c:e2:56:26:74:ca:b6:cc:e8:93:cb:6a:27:87:80:cf: 1e:b3:21:fe:16:91:4d:5f:90:a0:24:e1:50:09:81:d9:f8:2f: e6:11:88:30:e4:86:cd:24:e1:b9:b1:a1:e4:4d:2e:1f:96:a7: ac:fc:40:51:8f:48:b7:7f:fc:61:1e:91:30:4f:c6:9f:1e:c0: 9d:9c:d6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEDARrG/XepemYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGI2MWI2MTMtZjA4MS00MDdlLThmMmMtN2FhZGVlMzU5NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSkMHarmbkEUqRHGxKZdBBa6DfA3asK3Usxe vRi+KdU249Ns1laWSjlRQ6/j5lHj+uq93xTe+wYWy9fj9K1fK+/LSRakIKa3qOfx 5uiZ9jAN1nfhA6ZE5nv9u8qYY2DHnxyFhhYohy+eUlbm70IcRJzBRPv/ADsl6bNX 2sA/Mhn7W8SUKvls44isV1zPBRYBEZ1cicZqfMBts74shpElFUDGp5i83CRvenbZ 7xN+QpK8yPCG26Ksb2rYp1PIX1tvbr91tQay8xwVsZ1PlUZd4OKyLMTk5JGB4vLg xkd+8rD3LKDuMyfJcK/kAk9crWl1JdIe/hCZ62P1543JoMuzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHINoGhZaMUqy1AReVNKo+8EKjG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmExNGY0ZjUtMzg4Mi0z OWE4LWI1NmMtZjFiNmM5Mzg0ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCiWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5IY6fAj1wmh6f+pdpQVtgRZuV5j3CDw2i65oOnt7QscRiqPxdgq1vJ Fxx1COf+24lhKM6OHaZ0HA4fvb1RxGf09g4qQivYS79aFgScUPgWdXphcoW8LY6u q+2QKCHxMD01Z1RS1imILnjNMFDkrj7B0oyf4yATMItQG8bYTWQpxHgnNW7mcAYa 2xkDkPGk9uWDvhc+HHq8awoyA410nERSn2LIaSa30bxnqqrS61KnJwcgeab9XOJW JnTKtszok8tqJ4eAzx6zIf4WkU1fkKAk4VAJgdn4L+YRiDDkhs0k4bmxoeRNLh+W p6z8QFGPSLd//GEekTBPxp8ewJ2c1vg= -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:56 2026 by rpki-client