$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa File: 7431dad7-bd36-3801-8f59-e9cfd625f104.roa (raw, json) Hash identifier: T3Cpz4N0coX/9AF3nPQ0zR7xAOtAReFlrRuCZvh/ntc= Subject key identifier: 46:FF:BE:1B:DA:FC:11:AE:F8:B6:4C:67:06:C9:3F:A7:3A:C0:7E:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC45B801D6A8D06B075F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.43.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:45:b8:01:d6:a8:d0:6b:07:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=9601e4fb-5b12-4687-a306-0b1d3044af08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:0e:61:11:aa:39:1f:0a:8c:25:65:17:43: 2d:56:dc:90:e3:ef:ee:88:92:15:b9:1d:14:00:8e: 87:e1:1c:3d:32:ac:26:ea:47:4f:70:4b:9b:70:5f: 76:57:26:70:5e:f0:f9:35:bc:fd:b8:40:9f:0e:04: 66:1b:27:56:4c:2e:ab:c8:29:00:8b:9d:87:ee:c8: 24:8b:c6:b9:7f:40:a1:d5:bc:d9:8a:11:49:5f:87: 06:1a:b0:9a:85:4e:3c:53:f6:f0:81:49:29:b8:19: 7e:2e:85:37:63:a1:21:65:ee:4b:67:5e:76:70:87: 70:48:10:3b:8e:37:83:5e:3f:fd:27:2a:6b:38:f2: 8e:87:be:6d:67:17:24:18:f6:33:ba:35:84:eb:11: 33:46:69:29:d7:90:37:bb:08:aa:0e:3c:4d:85:76: c3:46:ad:a6:fd:b1:89:f4:2f:a3:66:3c:15:cb:1b: 58:ab:d3:d8:ac:b7:4d:f9:ee:5d:de:2e:c4:95:9b: 2a:28:31:77:20:62:5c:81:6f:18:76:a8:71:42:31: 81:1e:f7:de:3a:18:76:a0:f6:7e:1d:19:50:08:fc: 98:24:68:c9:e7:99:b5:71:99:58:d6:c6:a7:cc:a0: 2e:63:77:c4:75:12:d9:b1:7c:e7:fd:67:f7:90:0c: e7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FF:BE:1B:DA:FC:11:AE:F8:B6:4C:67:06:C9:3F:A7:3A:C0:7E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:d4:51:04:22:29:f1:12:40:b2:67:35:ba:7a:a0:ab:dd:d6: 7b:b4:fb:de:e9:91:58:0e:da:c9:dd:8e:ad:cb:b8:e8:44:7b: 8d:4e:a8:2e:16:00:29:51:a5:e1:a6:4a:b2:06:cb:65:33:83: 0f:77:5e:c3:37:f9:bc:68:5d:96:81:f0:59:57:f7:0e:23:67: 97:8f:1f:2e:9f:46:83:99:f2:35:67:31:81:7e:20:86:f0:4d: a4:e3:28:d1:39:53:39:2d:73:42:d3:3b:19:d2:56:93:35:1e: a7:86:02:4f:c8:51:26:86:6a:a4:0d:bd:24:49:75:48:1c:8b: a6:ac:b3:89:a4:3e:01:66:af:a0:a0:b3:28:5a:72:62:c2:f0: 64:81:3b:66:1a:7f:58:23:42:3b:c4:e2:98:28:1d:32:ce:70: da:42:d1:b5:4b:92:01:78:34:3d:3a:51:e2:89:45:9a:16:a4: 60:95:cf:e1:a4:5f:41:f5:ad:13:0d:a0:58:49:4e:8a:6d:08: a0:a4:89:b8:5b:92:61:c1:e6:69:60:de:52:64:88:f1:8a:f2: f3:5f:1a:db:04:f9:b8:f8:13:70:8d:66:46:e2:37:33:4d:9f: 9e:9c:ec:f1:01:8f:d0:6f:82:c0:8d:d4:dc:7c:d1:8d:f5:91: d4:77:0c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEW4Adao0GsHXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTYwMWU0ZmItNWIxMi00Njg3LWEzMDYtMGIxZDMwNDRhZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka4OYRGqOR8KjCVlF0MtVtyQ4+/uiJIVuR0U AI6H4Rw9Mqwm6kdPcEubcF92VyZwXvD5Nbz9uECfDgRmGydWTC6ryCkAi52H7sgk i8a5f0Ch1bzZihFJX4cGGrCahU48U/bwgUkpuBl+LoU3Y6EhZe5LZ152cIdwSBA7 jjeDXj/9JyprOPKOh75tZxckGPYzujWE6xEzRmkp15A3uwiqDjxNhXbDRq2m/bGJ 9C+jZjwVyxtYq9PYrLdN+e5d3i7ElZsqKDF3IGJcgW8YdqhxQjGBHvfeOhh2oPZ+ HRlQCPyYJGjJ55m1cZlY1sanzKAuY3fEdRLZsXzn/Wf3kAznjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb/vhva/BGu+LZMZwbJP6c6wH4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzQzMWRhZDctYmQzNi0z ODAxLThmNTktZTljZmQ2MjVmMTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfUUQQiKfESQLJnNbp6oKvd1nu0+97pkVgO2sndjq3LuOhEe41OqC4W AClRpeGmSrIGy2Uzgw93XsM3+bxoXZaB8FlX9w4jZ5ePHy6fRoOZ8jVnMYF+IIbw TaTjKNE5Uzktc0LTOxnSVpM1HqeGAk/IUSaGaqQNvSRJdUgci6ass4mkPgFmr6Cg syhacmLC8GSBO2Yaf1gjQjvE4pgoHTLOcNpC0bVLkgF4ND06UeKJRZoWpGCVz+Gk X0H1rRMNoFhJToptCKCkibhbkmHB5mlg3lJkiPGK8vNfGtsE+bj4E3CNZkbiNzNN n56c7PEBj9BvgsCN1Nx80Y31kdR3DKA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:27:09 2026 by rpki-client