$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa File: 906a41cd-df96-351d-b422-89337a02c3c5.roa (raw, json) Hash identifier: r/QR0KlEhiSMYVnU/szAtRJvoVgVGCr/7rSLe1FqMzQ= Subject key identifier: 95:54:9A:DA:78:47:F2:E0:1E:33:BC:97:67:DB:0B:87:8E:5E:EC:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4660A28DBB2C4AA7CC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.43.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:46:60:a2:8d:bb:2c:4a:a7:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a1c87b7d-dceb-4be9-b61c-88315dd6b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:5b:40:6b:34:1d:48:57:ab:4f:b0:86:51: a1:16:c1:4a:e6:41:44:ce:5d:65:f9:a8:82:cd:0c: bb:88:6d:00:b5:dc:15:46:ac:be:75:46:cf:3e:f5: 81:c5:f5:ec:3e:ba:74:bf:40:10:96:42:f0:74:92: f7:f8:6e:3e:45:f7:00:0f:4c:bc:74:a0:f8:17:5b: 4a:82:2f:23:26:ee:b6:81:d3:2e:80:ea:a0:f0:0e: 42:bc:42:66:e1:88:96:ed:09:3e:75:10:b6:79:7d: d7:cb:c7:0c:4b:f2:c9:75:63:f6:3d:25:d8:0b:bc: 36:c3:1f:9c:3f:84:39:ef:f0:cd:45:17:16:f8:55: 82:0f:47:68:b4:f3:7f:c6:04:38:6a:17:30:c3:6d: 56:05:78:a6:a3:b6:60:43:b7:68:3d:a4:e0:b2:05: d9:8b:c2:17:ba:21:0b:e0:e0:30:0a:7c:78:a8:04: 68:17:ec:4c:2e:3d:6c:f7:e0:63:9d:43:14:81:78: cb:0e:77:73:ba:ec:31:b4:d0:86:53:21:c4:ce:17: f0:e5:36:4f:6d:be:21:64:61:b4:92:9b:f4:7d:ed: de:22:f5:85:87:6f:5a:72:b1:08:84:50:f4:5f:1a: cd:90:a4:99:ce:dc:2d:db:f7:35:88:25:02:d7:67: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:9A:DA:78:47:F2:E0:1E:33:BC:97:67:DB:0B:87:8E:5E:EC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/906a41cd-df96-351d-b422-89337a02c3c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.43.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ac:ea:c4:fd:2a:2e:d0:d3:eb:af:e6:b0:de:7b:ad:85:43: 7a:92:55:da:19:1c:39:33:43:6d:96:4a:42:f1:b1:ef:d2:82: da:78:59:d5:69:3c:b4:b4:c8:9d:20:b2:65:5e:e9:f8:ba:52: cf:8b:2c:4c:0c:db:91:4c:73:42:62:33:19:af:2f:0d:28:00: 66:cc:28:c8:97:9f:7f:75:a3:de:3b:5e:22:ec:f3:f6:90:29: 1d:de:54:c5:f6:99:f3:3f:88:4d:d6:5b:19:97:43:32:74:ee: 3a:38:1f:7a:c2:bc:9c:40:93:c5:c3:71:59:f4:49:26:1e:ea: 81:f6:a4:3b:d1:0a:a7:08:36:e0:48:30:e1:18:47:ec:89:f6: 71:97:e7:1b:6b:26:bb:70:69:3a:37:6d:53:44:e3:7a:c2:9a: 8e:4e:b6:7a:3f:25:f2:62:c2:17:bd:81:e5:9d:6a:4e:09:f1: 92:94:f6:4e:82:f5:bd:b2:b8:49:18:79:4d:2e:89:34:03:62: 36:64:67:2b:af:36:17:39:04:69:78:78:2d:8a:b5:e0:98:c3: 31:cf:c3:77:46:05:2b:17:56:46:18:55:ff:ac:0a:b5:49:45: 79:b9:7e:3a:80:17:7d:0a:5c:d2:51:3a:d6:d8:5a:a8:15:ec: 78:49:87:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEZgoo27LEqnzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTFjODdiN2QtZGNlYi00YmU5LWI2MWMtODgzMTVkZDZiMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2epbQGs0HUhXq0+whlGhFsFK5kFEzl1l+aiC zQy7iG0AtdwVRqy+dUbPPvWBxfXsPrp0v0AQlkLwdJL3+G4+RfcAD0y8dKD4F1tK gi8jJu62gdMugOqg8A5CvEJm4YiW7Qk+dRC2eX3Xy8cMS/LJdWP2PSXYC7w2wx+c P4Q57/DNRRcW+FWCD0dotPN/xgQ4ahcww21WBXimo7ZgQ7doPaTgsgXZi8IXuiEL 4OAwCnx4qARoF+xMLj1s9+BjnUMUgXjLDndzuuwxtNCGUyHEzhfw5TZPbb4hZGG0 kpv0fe3eIvWFh29acrEIhFD0XxrNkKSZztwt2/c1iCUC12fZOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVUmtp4R/LgHjO8l2fbC4eOXuxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA2YTQxY2QtZGY5Ni0z NTFkLWI0MjItODkzMzdhMDJjM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOs6sT9Ki7Q0+uv5rDee62FQ3qSVdoZHDkzQ22WSkLxse/Sgtp4WdVp PLS0yJ0gsmVe6fi6Us+LLEwM25FMc0JiMxmvLw0oAGbMKMiXn391o947XiLs8/aQ KR3eVMX2mfM/iE3WWxmXQzJ07jo4H3rCvJxAk8XDcVn0SSYe6oH2pDvRCqcINuBI MOEYR+yJ9nGX5xtrJrtwaTo3bVNE43rCmo5Otno/JfJiwhe9geWdak4J8ZKU9k6C 9b2yuEkYeU0uiTQDYjZkZyuvNhc5BGl4eC2KteCYwzHPw3dGBSsXVkYYVf+sCrVJ RXm5fjqAF30KXNJROtbYWqgV7HhJh/o= -----END CERTIFICATE-----Generated at Fri Apr 17 14:12:41 2026 by rpki-client