$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa File: 70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa (raw, json) Hash identifier: C11j31noUgxxtv6FsqCLpwYHKnwkGYM2cLzm4LletuE= Subject key identifier: 09:34:D2:D1:AF:2B:D5:3E:D4:38:AC:5D:89:A4:49:DC:BD:D3:F7:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4F5D450B8EFF0E330A70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:4f:5d:45:0b:8e:ff:0e:33:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=01696938-3ff0-43ec-a80c-c2d2a4b0db12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:98:33:d0:a1:eb:08:30:a3:8a:f6:dc:d8: e6:15:14:3a:e0:ad:dc:d6:73:23:80:6c:06:09:66: f0:10:41:f9:a5:cd:9b:96:2e:83:00:f6:31:81:fd: 89:a9:84:6e:3f:d1:58:69:73:97:13:ed:98:9d:96: b4:8d:9f:eb:81:e7:d0:15:e3:89:8b:47:21:0f:55: 9c:be:79:0f:c1:34:4f:07:e4:e2:d9:e8:0e:31:1c: 5b:86:35:01:88:e9:38:7f:c8:ba:61:30:cc:5c:14: 5d:1c:c1:62:45:d2:e6:74:fa:1e:ed:1b:40:98:3f: 6a:4a:79:d8:eb:f9:65:56:a7:da:98:62:cb:18:9a: 36:e4:d5:7b:7e:d6:77:ba:e2:dd:a4:ad:df:e3:89: 84:04:ff:c2:88:09:7e:8c:f1:63:fc:f0:69:a0:4b: d1:31:06:13:8c:ff:0a:b7:23:27:a3:b9:3d:62:9d: a2:ef:1e:c7:32:ff:98:f3:d2:f3:92:5e:00:ba:d4: 12:0e:50:81:84:f8:99:6f:f6:23:02:83:32:0b:20: 3b:ce:60:fb:6c:ba:09:b1:06:73:7b:36:16:ca:15: 47:5f:43:93:e4:88:d2:d9:78:a8:dc:92:ff:54:0d: de:74:f9:6a:ea:8d:55:36:f1:37:2f:99:cf:df:14: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:D2:D1:AF:2B:D5:3E:D4:38:AC:5D:89:A4:49:DC:BD:D3:F7:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ffe82a-1f1c-3ead-a1ab-973637a25a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8b:5c:7f:b7:2f:b5:35:31:3d:b5:a3:d7:f3:0c:f4:40:32: 60:b2:22:45:c0:e1:80:ac:1f:9f:5c:88:97:1b:d2:fe:65:1e: e6:b2:09:cd:91:4f:a2:c5:20:dd:7c:89:a8:41:d2:08:6a:76: f3:ad:99:2c:c9:cf:c7:03:19:2a:75:48:65:e9:b3:49:48:a2: e8:32:1e:ef:68:32:4e:b6:7f:7b:41:27:b9:63:c3:98:c8:e5: 2e:18:49:08:05:6d:16:da:c4:51:f9:80:ed:25:c2:e6:4d:25: 63:96:02:25:03:11:ce:6b:17:2a:8b:5f:b1:3c:39:bc:85:bd: 0f:41:cd:15:bc:e6:5a:8f:7d:22:9a:27:67:ab:0f:b0:51:7e: 74:24:88:31:42:c4:5b:2c:72:78:a7:4d:a4:ea:01:42:ed:60: db:95:b9:c4:c9:1f:92:bd:0a:15:41:c0:be:7d:04:bf:22:52: f2:84:1b:73:f6:bb:f3:0e:6e:f0:11:e4:8c:c9:9b:e3:8f:55: 34:bd:03:66:cf:64:24:5e:ba:57:a0:d4:23:d9:0f:10:56:42: 91:3a:c7:8e:b6:dd:68:01:6d:e8:95:f4:b1:8a:10:dd:a5:4b: 23:f5:0e:9b:f0:66:6a:aa:9c:29:2e:97:5b:e8:9d:a1:1f:10: 28:d0:79:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvE9dRQuO/w4zCnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDE2OTY5MzgtM2ZmMC00M2VjLWE4MGMtYzJkMmE0YjBkYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24CYM9Ch6wgwo4r23NjmFRQ64K3c1nMjgGwG CWbwEEH5pc2bli6DAPYxgf2JqYRuP9FYaXOXE+2YnZa0jZ/rgefQFeOJi0chD1Wc vnkPwTRPB+Ti2egOMRxbhjUBiOk4f8i6YTDMXBRdHMFiRdLmdPoe7RtAmD9qSnnY 6/llVqfamGLLGJo25NV7ftZ3uuLdpK3f44mEBP/CiAl+jPFj/PBpoEvRMQYTjP8K tyMno7k9Yp2i7x7HMv+Y89Lzkl4AutQSDlCBhPiZb/YjAoMyCyA7zmD7bLoJsQZz ezYWyhVHX0OT5IjS2Xio3JL/VA3edPlq6o1VNvE3L5nP3xT91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk00tGvK9U+1DisXYmkSdy90/fAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBmZmU4MmEtMWYxYy0z ZWFkLWExYWItOTczNjM3YTI1YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuLXH+3L7U1MT21o9fzDPRAMmCyIkXA4YCsH59ciJcb0v5lHuayCc2R T6LFIN18iahB0ghqdvOtmSzJz8cDGSp1SGXps0lIougyHu9oMk62f3tBJ7ljw5jI 5S4YSQgFbRbaxFH5gO0lwuZNJWOWAiUDEc5rFyqLX7E8ObyFvQ9BzRW85lqPfSKa J2erD7BRfnQkiDFCxFsscninTaTqAULtYNuVucTJH5K9ChVBwL59BL8iUvKEG3P2 u/MObvAR5IzJm+OPVTS9A2bPZCReuleg1CPZDxBWQpE6x4623WgBbeiV9LGKEN2l SyP1DpvwZmqqnCkul1vonaEfECjQeTg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:02:48 2026 by rpki-client