$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa File: 8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa (raw, json) Hash identifier: MnRRgqPjqfdY+WOODmn0vXA5NF/ZomCfs2xz+/st5uM= Subject key identifier: 01:2C:FC:F7:79:AE:10:78:7D:08:70:FF:C5:2E:5F:83:16:9C:6F:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC3C75F30FA45365758140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.36.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:3c:75:f3:0f:a4:53:65:75:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1c5e5ac2-af2f-4189-8857-df9787203a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:28:03:db:ce:e1:eb:de:f9:6b:98:3e:ce: ba:03:ed:6d:a7:ce:fb:b7:ef:51:12:60:0e:66:fc: d9:71:ce:af:0e:e5:72:7c:9e:8c:39:eb:26:95:45: ca:07:89:15:7c:39:a0:05:d7:8b:76:3d:5a:84:84: b3:50:8c:d9:68:4d:c7:12:6d:5a:09:77:59:04:be: 36:2d:fb:e4:b4:fc:7e:e8:05:29:8c:53:15:9c:5d: 82:eb:8e:2d:81:92:38:a7:80:e5:6a:3d:65:36:43: a3:b9:7f:8e:a6:c1:58:cd:a3:9a:76:3a:0e:70:04: 2d:e5:d0:f7:c4:c7:55:38:e2:b3:c2:76:79:c2:b1: de:58:40:17:00:d3:33:50:f7:26:77:46:d9:36:7f: ae:9d:66:bc:d8:af:6f:91:cd:59:bc:a8:cc:25:fb: f9:16:1c:d0:da:d6:68:fa:8e:6c:9f:9b:b2:77:1e: e7:aa:fb:5e:5c:da:07:c7:66:68:62:42:f7:87:31: 3d:ad:50:e0:4c:a7:18:1d:90:42:5c:9e:ed:5c:68: c7:49:f4:68:4a:0f:11:d1:31:68:7e:e1:37:63:26: 37:16:fa:c9:50:fd:bd:5d:56:16:5a:40:81:b0:82: e8:b2:2e:01:f0:7a:f8:37:70:97:83:03:5b:0e:45: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:FC:F7:79:AE:10:78:7D:08:70:FF:C5:2E:5F:83:16:9C:6F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dd905ec-10a5-330b-aa99-7ae9ed0cc0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c2:dd:26:fd:fc:15:87:c7:e8:6b:b3:08:15:a8:03:a1:a9: b7:9a:29:a9:73:1e:c1:30:fc:77:27:ee:b2:95:68:9c:52:d3: 19:b7:4c:47:6c:17:53:f8:a4:bf:97:7d:91:9e:e4:9b:d1:43: 71:51:71:b7:e4:af:f5:c5:2f:b5:92:ab:60:6d:5b:bd:b0:da: b1:e0:5f:06:e6:15:b8:5a:da:4f:e8:fa:e5:4b:e9:4b:4c:50: 94:b9:5e:68:a7:f8:33:da:43:1a:83:f5:da:f1:b0:6f:68:be: b4:6f:49:1c:26:90:cd:06:03:cd:c7:ae:4e:83:0b:c9:c8:a1: 44:9e:a7:c2:d8:89:13:7b:44:95:f7:e0:7f:c8:d8:63:1f:6e: 05:cc:db:38:12:58:33:76:2c:83:6c:2e:52:3a:aa:fa:e0:03: 68:1e:7f:6f:14:18:98:3b:f8:0e:8d:3f:09:01:e3:12:70:bb: 5d:3e:8a:e4:57:78:ce:eb:b0:3f:a2:0b:70:cc:41:99:3e:54: 3e:30:44:57:bb:a7:46:67:fb:4e:a6:46:c8:2d:81:b9:54:24: f6:e6:c1:a9:16:99:91:7c:4a:59:a0:c7:78:de:8b:51:47:cc: 50:0b:31:05:f9:9e:b2:94:e6:0b:36:d5:6d:55:cf:eb:d5:c9: f6:8a:c1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDx18w+kU2V1gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWM1ZTVhYzItYWYyZi00MTg5LTg4NTctZGY5Nzg3MjAzYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDQoA9vO4eve+WuYPs66A+1tp877t+9REmAO ZvzZcc6vDuVyfJ6MOesmlUXKB4kVfDmgBdeLdj1ahISzUIzZaE3HEm1aCXdZBL42 LfvktPx+6AUpjFMVnF2C644tgZI4p4Dlaj1lNkOjuX+OpsFYzaOadjoOcAQt5dD3 xMdVOOKzwnZ5wrHeWEAXANMzUPcmd0bZNn+unWa82K9vkc1ZvKjMJfv5FhzQ2tZo +o5sn5uydx7nqvteXNoHx2ZoYkL3hzE9rVDgTKcYHZBCXJ7tXGjHSfRoSg8R0TFo fuE3YyY3FvrJUP29XVYWWkCBsILosi4B8Hr4N3CXgwNbDkVCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEs/Pd5rhB4fQhw/8UuX4MWnG8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRkOTA1ZWMtMTBhNS0z MzBiLWFhOTktN2FlOWVkMGNjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLC3Sb9/BWHx+hrswgVqAOhqbeaKalzHsEw/Hcn7rKVaJxS0xm3TEds F1P4pL+XfZGe5JvRQ3FRcbfkr/XFL7WSq2BtW72w2rHgXwbmFbha2k/o+uVL6UtM UJS5Xmin+DPaQxqD9drxsG9ovrRvSRwmkM0GA83Hrk6DC8nIoUSep8LYiRN7RJX3 4H/I2GMfbgXM2zgSWDN2LINsLlI6qvrgA2gef28UGJg7+A6NPwkB4xJwu10+iuRX eM7rsD+iC3DMQZk+VD4wRFe7p0Zn+06mRsgtgblUJPbmwakWmZF8Slmgx3jei1FH zFALMQX5nrKU5gs21W1Vz+vVyfaKwcw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:36 2026 by rpki-client