$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81712256-b700-3902-b3a4-89fa45ecdc76.roa File: 81712256-b700-3902-b3a4-89fa45ecdc76.roa (raw, json) Hash identifier: eT4Q3D0aQeLYOREvDz5C5UAWVxJJIL16k3UezYQt8+g= Subject key identifier: 7D:67:EF:48:71:09:0C:03:57:13:0B:0D:CC:97:E9:29:65:F1:1B:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB0E49BD17252DDA9ABE60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81712256-b700-3902-b3a4-89fa45ecdc76.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.37.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:0e:49:bd:17:25:2d:da:9a:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=88ee72a5-f193-4c0e-b6e8-ee8ba7f7d1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:44:a8:8d:a6:86:35:50:f0:80:7d:66:49: 62:bb:a2:19:ff:f7:66:b5:bf:a2:46:06:4f:e8:b5: 26:40:9f:d1:32:d6:6c:7e:05:30:b7:40:80:89:d0: 33:80:9c:68:57:fd:28:c2:db:21:b2:61:0e:57:14: b3:2a:d1:05:38:2d:ba:18:51:69:4d:65:b1:24:51: f0:5c:f6:d4:0e:8a:56:d6:b0:af:cc:ab:1d:f6:79: 40:19:07:17:42:3f:02:de:64:b7:3e:24:ec:b4:d0: bc:00:b6:5f:5f:a6:49:f0:09:3a:b8:e9:e8:fa:a4: 8b:30:14:52:f0:8a:32:9f:de:3e:c6:db:69:f0:b1: 8b:39:87:a3:f2:83:27:07:38:bf:52:fd:80:75:be: ae:78:d7:a1:1b:d5:e3:8e:04:0b:19:8f:a4:1b:2c: be:1c:f6:c6:1a:16:43:da:99:da:17:93:19:20:fe: 98:17:91:2b:d3:e3:cd:08:37:20:69:a7:f0:c2:99: 75:6c:5e:93:c9:d0:54:34:43:c0:e7:ad:f4:44:4a: 7c:db:5a:13:c7:0e:fa:da:6c:54:2e:36:c7:2b:ff: 71:ad:9b:c8:e2:f3:95:39:8d:27:1d:09:30:d8:78: da:31:57:8e:af:a5:bc:06:63:b5:ca:3b:0b:da:c5: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:67:EF:48:71:09:0C:03:57:13:0B:0D:CC:97:E9:29:65:F1:1B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81712256-b700-3902-b3a4-89fa45ecdc76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:2c:68:54:a1:12:b5:98:19:00:53:4a:35:5e:1f:4d:6c:70: fe:48:d7:ea:69:4e:5c:ae:71:e1:e5:74:25:20:77:41:1f:5b: 72:48:98:97:77:ff:5e:9f:32:6c:d0:41:f1:e9:cc:71:24:a2: b6:f6:04:c2:33:5e:5c:fe:51:c6:80:39:58:eb:40:5b:95:96: 1a:95:4f:f5:0e:1c:e3:b3:ce:e2:3c:b9:42:50:ca:47:c7:f1: 8c:2e:3d:91:73:85:00:32:b3:71:55:9e:a6:2e:68:33:74:ba: d5:80:35:68:02:81:9a:fb:a7:5b:6d:a9:36:95:c2:47:b5:83: f5:e4:ae:e7:9a:34:f5:f1:9d:86:9f:45:0e:c6:fb:24:1a:9d: 8f:e7:12:d8:c4:03:25:56:49:42:79:61:20:e6:3a:30:bf:db: e6:c8:22:5e:be:d4:c5:30:2c:08:3c:54:65:1c:71:ba:4b:a0: 10:da:59:c8:06:38:c0:57:a0:18:b5:02:36:f5:97:62:22:39: 6a:d4:5a:49:26:1a:1d:53:34:20:a7:c6:56:02:72:9e:8f:95: 5c:fd:83:37:22:b8:90:47:6e:32:78:6f:51:3d:db:de:0c:35: 0e:7e:7d:ef:62:ec:eb:8b:4f:53:79:a1:f3:63:70:c4:53:90: 9d:37:73:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuw5JvRclLdqavmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODhlZTcyYTUtZjE5My00YzBlLWI2ZTgtZWU4YmE3ZjdkMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArClEqI2mhjVQ8IB9Zkliu6IZ//dmtb+iRgZP 6LUmQJ/RMtZsfgUwt0CAidAzgJxoV/0owtshsmEOVxSzKtEFOC26GFFpTWWxJFHw XPbUDopW1rCvzKsd9nlAGQcXQj8C3mS3PiTstNC8ALZfX6ZJ8Ak6uOno+qSLMBRS 8Ioyn94+xttp8LGLOYej8oMnBzi/Uv2Adb6ueNehG9XjjgQLGY+kGyy+HPbGGhZD 2pnaF5MZIP6YF5Er0+PNCDcgaafwwpl1bF6TydBUNEPA5630REp821oTxw762mxU LjbHK/9xrZvI4vOVOY0nHQkw2HjaMVeOr6W8BmO1yjsL2sVzKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1n70hxCQwDVxMLDcyX6Sll8RstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE3MTIyNTYtYjcwMC0z OTAyLWIzYTQtODlmYTQ1ZWNkYzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANosaFShErWYGQBTSjVeH01scP5I1+ppTlyuceHldCUgd0EfW3JImJd3 /16fMmzQQfHpzHEkorb2BMIzXlz+UcaAOVjrQFuVlhqVT/UOHOOzzuI8uUJQykfH 8YwuPZFzhQAys3FVnqYuaDN0utWANWgCgZr7p1ttqTaVwke1g/XkrueaNPXxnYaf RQ7G+yQanY/nEtjEAyVWSUJ5YSDmOjC/2+bIIl6+1MUwLAg8VGUccbpLoBDaWcgG OMBXoBi1Ajb1l2IiOWrUWkkmGh1TNCCnxlYCcp6PlVz9gzciuJBHbjJ4b1E9294M NQ5+fe9i7OuLT1N5ofNjcMRTkJ03c50= -----END CERTIFICATE-----Generated at Fri Apr 17 15:31:56 2026 by rpki-client