$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d65fb3d-d2fd-37e0-b7c1-d4ef2fef7133.roa File: 7d65fb3d-d2fd-37e0-b7c1-d4ef2fef7133.roa (raw, json) Hash identifier: TJKzwcuLiTTpZdJUhCnaVmKppUiUbj1TIBcQAayP5NI= Subject key identifier: 94:FF:C0:A7:9D:37:DC:0E:F6:17:4C:CE:04:0E:09:92:F8:5C:9B:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC48A4A84E3787F4214700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d65fb3d-d2fd-37e0-b7c1-d4ef2fef7133.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.48.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:48:a4:a8:4e:37:87:f4:21:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4bfb920f-9fdc-45f3-9d92-8f3effef985f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:52:bc:3b:ad:b2:1d:51:07:ec:84:88:cc: c7:e2:d5:25:15:64:0e:a7:fb:df:b3:fc:c3:ec:0b: 4d:f8:07:26:63:b3:72:83:e5:cb:95:6a:b0:be:88: 13:0e:a7:1e:40:09:8c:61:96:d7:a2:5d:76:70:b2: fe:87:97:c4:e8:0c:cd:41:77:2b:fe:2e:03:c1:78: c4:0a:ad:38:a9:dc:ef:81:bd:31:39:70:0f:e6:d7: d4:00:48:8f:51:0c:4c:db:dc:a0:b3:7f:83:58:bb: 8e:a9:58:ca:db:1d:13:1a:46:0e:e7:e6:fe:22:e4: 6f:ba:67:05:da:fa:10:6a:cf:9a:ce:b5:3e:77:19: 36:3f:40:51:21:b1:a1:95:d9:07:13:36:44:7d:46: f8:7e:5d:e5:44:0d:6c:d4:e6:f6:9b:45:c9:87:44: f6:7e:3a:45:ec:28:55:b0:5b:da:c6:50:17:1b:29: f0:ec:ae:92:6d:65:12:73:58:ab:15:e2:15:fa:65: 7b:4c:be:50:f7:f2:13:79:f8:72:f4:33:28:60:8c: f0:10:31:84:62:ab:f2:1d:80:a4:cf:1b:3b:3e:73: 4e:48:a6:7e:7f:b8:4c:ea:d0:da:95:c7:4b:27:91: 95:7a:0b:e9:0a:f1:cc:1f:7c:8a:b6:1c:76:10:2b: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:C0:A7:9D:37:DC:0E:F6:17:4C:CE:04:0E:09:92:F8:5C:9B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d65fb3d-d2fd-37e0-b7c1-d4ef2fef7133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.48.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:08:ff:a5:54:f5:3c:07:1e:10:3e:77:04:14:ce:19:00:9d: c0:09:39:ed:dc:56:ba:b7:c7:b5:ea:55:76:2c:9c:23:e7:f7: 0b:c5:51:89:25:86:a9:36:d2:9b:d8:6b:bd:56:83:95:5a:a4: 41:51:e5:f1:9c:f7:ed:70:4b:7d:82:b1:07:1d:95:0b:d7:53: c0:5d:88:74:03:43:fa:9a:af:b2:0f:a4:e8:14:7e:e6:a7:ed: df:87:1e:e2:63:24:cc:7d:0b:b8:47:ea:ac:a7:d6:de:1f:4c: c6:bb:62:2e:ae:bb:75:a3:ba:a9:db:13:48:cf:20:dc:dc:f3: 1f:f6:53:2f:d5:1a:33:29:7f:3a:54:3b:27:5b:34:10:72:f6: 20:6c:ac:63:8c:22:39:c9:fe:a7:83:c4:dd:b5:95:e1:8f:67: 52:29:8f:85:78:6d:36:47:65:40:05:f8:4e:53:b8:ed:18:2b: 66:9e:c1:5f:50:ef:b3:ca:ed:98:02:10:15:a7:19:e1:b8:c1: e7:ca:74:e0:d9:7e:ec:04:c6:f8:a9:b3:e8:9d:08:c6:11:9e: 8c:f5:02:8c:fb:12:81:4c:54:57:2c:04:a3:bc:61:95:2f:c2: c3:46:3a:c5:35:64:60:52:fd:62:a3:07:d4:13:02:89:8d:d6: 32:91:0e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEikqE43h/QhRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGJmYjkyMGYtOWZkYy00NWYzLTlkOTItOGYzZWZmZWY5ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6FSvDutsh1RB+yEiMzH4tUlFWQOp/vfs/zD 7AtN+AcmY7Nyg+XLlWqwvogTDqceQAmMYZbXol12cLL+h5fE6AzNQXcr/i4DwXjE Cq04qdzvgb0xOXAP5tfUAEiPUQxM29ygs3+DWLuOqVjK2x0TGkYO5+b+IuRvumcF 2voQas+azrU+dxk2P0BRIbGhldkHEzZEfUb4fl3lRA1s1Ob2m0XJh0T2fjpF7ChV sFvaxlAXGynw7K6SbWUSc1irFeIV+mV7TL5Q9/ITefhy9DMoYIzwEDGEYqvyHYCk zxs7PnNOSKZ+f7hM6tDalcdLJ5GVegvpCvHMH3yKthx2ECvscwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT/wKedN9wO9hdMzgQOCZL4XJteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q2NWZiM2QtZDJmZC0z N2UwLWI3YzEtZDRlZjJmZWY3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYI/6VU9TwHHhA+dwQUzhkAncAJOe3cVrq3x7XqVXYsnCPn9wvFUYkl hqk20pvYa71Wg5VapEFR5fGc9+1wS32CsQcdlQvXU8BdiHQDQ/qar7IPpOgUfuan 7d+HHuJjJMx9C7hH6qyn1t4fTMa7Yi6uu3WjuqnbE0jPINzc8x/2Uy/VGjMpfzpU OydbNBBy9iBsrGOMIjnJ/qeDxN21leGPZ1Ipj4V4bTZHZUAF+E5TuO0YK2aewV9Q 77PK7ZgCEBWnGeG4wefKdODZfuwExvips+idCMYRnoz1Aoz7EoFMVFcsBKO8YZUv wsNGOsU1ZGBS/WKjB9QTAomN1jKRDqo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:27 2026 by rpki-client