$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a21e96d-55af-3685-95a3-cb5909e9f0b6.roa File: 7a21e96d-55af-3685-95a3-cb5909e9f0b6.roa (raw, json) Hash identifier: LQCWR+uIyuIxtuD+bJLt+yqO5YhORGx90ECWvNZsr2M= Subject key identifier: E7:65:50:9D:28:62:71:08:88:72:5E:6B:17:CA:35:48:E4:3E:B0:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB140DE86ABAA7FEF40680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a21e96d-55af-3685-95a3-cb5909e9f0b6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.43.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:14:0d:e8:6a:ba:a7:fe:f4:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c761db5e-4b53-487e-b449-bc83f22ea29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:9f:3f:3f:91:88:76:d3:75:6b:bc:c2:78: 19:82:51:7e:25:81:40:33:d5:78:b2:24:99:c4:32: 1a:e1:c7:bf:cd:e1:43:07:3c:f3:fa:35:02:3a:8c: b1:a6:80:4d:92:fc:58:ea:ed:6d:45:82:d2:ae:7b: 51:54:a7:a4:8b:ed:34:4e:90:94:94:55:df:0c:13: 2f:34:36:23:4b:48:80:85:0e:80:de:39:7a:85:c7: d9:9a:82:64:36:68:4b:21:67:db:1f:9b:50:11:bb: 46:88:39:d8:77:b9:96:27:be:b8:37:e9:46:78:5b: 09:9d:f4:b7:f9:66:69:83:92:d4:fb:ab:7e:cb:2b: eb:00:6d:4d:4d:bd:03:e0:f4:5b:e3:73:b9:b9:cc: b7:ae:02:ba:95:4b:b0:fe:60:cb:da:6c:e5:d2:ba: e9:e0:13:ae:84:2a:fe:82:f7:3a:17:cc:f3:6d:21: b7:02:db:93:7c:17:53:55:ab:04:02:a0:f3:da:0e: 68:92:d0:3c:31:39:f5:98:4c:ee:4b:57:1b:67:20: 57:b6:dc:65:8c:da:74:5b:a8:16:70:08:56:da:44: 50:d2:e2:23:c2:fe:0d:ec:a8:bb:31:64:a2:fc:59: cf:e6:1f:2d:5c:e4:cc:4b:d7:15:ae:15:6f:1a:0b: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:65:50:9D:28:62:71:08:88:72:5E:6B:17:CA:35:48:E4:3E:B0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a21e96d-55af-3685-95a3-cb5909e9f0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1f:50:2d:79:fe:17:6d:22:7b:88:5d:bb:d1:2e:cf:8f:ad: ee:62:ab:0e:cf:c0:b2:cc:ac:e9:19:82:cd:94:0f:38:82:10: 77:39:fb:5d:9f:68:f1:09:b9:bc:45:5b:9f:b0:dd:54:ef:d4: 5e:c3:bf:2a:c9:74:dd:06:33:28:aa:6c:d2:c3:55:8b:a3:25: 87:b4:67:5f:27:48:74:16:4f:69:e5:73:3a:20:fe:63:0c:4b: ec:d6:8e:98:c3:f1:a0:97:25:dc:4f:a3:23:31:f9:55:dc:43: ae:42:83:98:91:8d:60:fa:16:c1:f1:b6:16:d4:3e:bc:7a:23: 9f:7b:a2:d5:86:48:f7:e5:e9:26:76:e7:0c:a5:84:d3:6f:1a: b7:76:ad:d1:1d:99:b3:ea:54:21:02:dd:68:a1:26:10:a6:b2: 41:7e:40:c5:36:12:c5:6c:ff:18:aa:e3:5c:e2:ed:06:db:93: ef:e6:15:63:22:9a:d8:5c:6c:1c:e4:ea:67:1c:e4:e5:11:19: 2a:87:de:58:f9:6f:f2:4f:73:a6:49:4a:a7:9a:c5:66:03:cc: bd:89:5d:66:c7:83:cf:39:b6:fe:bd:cf:22:13:f7:c5:8d:55: 81:f2:f0:b9:10:50:7f:f5:3f:d4:0d:39:84:fe:61:19:5c:80: 33:be:ae:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxQN6Gq6p/70BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Yzc2MWRiNWUtNGI1My00ODdlLWI0NDktYmM4M2YyMmVhMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWfPz+RiHbTdWu8wngZglF+JYFAM9V4siSZ xDIa4ce/zeFDBzzz+jUCOoyxpoBNkvxY6u1tRYLSrntRVKeki+00TpCUlFXfDBMv NDYjS0iAhQ6A3jl6hcfZmoJkNmhLIWfbH5tQEbtGiDnYd7mWJ764N+lGeFsJnfS3 +WZpg5LU+6t+yyvrAG1NTb0D4PRb43O5ucy3rgK6lUuw/mDL2mzl0rrp4BOuhCr+ gvc6F8zzbSG3AtuTfBdTVasEAqDz2g5oktA8MTn1mEzuS1cbZyBXttxljNp0W6gW cAhW2kRQ0uIjwv4N7Ki7MWSi/FnP5h8tXOTMS9cVrhVvGgtWFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdlUJ0oYnEIiHJeaxfKNUjkPrDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2EyMWU5NmQtNTVhZi0z Njg1LTk1YTMtY2I1OTA5ZTlmMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEofUC15/hdtInuIXbvRLs+Pre5iqw7PwLLMrOkZgs2UDziCEHc5+12f aPEJubxFW5+w3VTv1F7DvyrJdN0GMyiqbNLDVYujJYe0Z18nSHQWT2nlczog/mMM S+zWjpjD8aCXJdxPoyMx+VXcQ65Cg5iRjWD6FsHxthbUPrx6I597otWGSPfl6SZ2 5wylhNNvGrd2rdEdmbPqVCEC3WihJhCmskF+QMU2EsVs/xiq41zi7Qbbk+/mFWMi mthcbBzk6mcc5OURGSqH3lj5b/JPc6ZJSqeaxWYDzL2JXWbHg885tv69zyIT98WN VYHy8LkQUH/1P9QNOYT+YRlcgDO+rjU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:00 2026 by rpki-client