$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa File: 9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa (raw, json) Hash identifier: aS4qLQT8I40H2GZ/Mp7wMTpJRN/47AU9vDF+s+WH4B4= Subject key identifier: 8E:38:75:76:B2:3F:8C:46:6B:8A:98:50:9F:32:5F:B3:95:D0:D8:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC41192184E0B62DE3C5E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.40.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:41:19:21:84:e0:b6:2d:e3:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1ac49a24-058f-43cb-ba69-8660a8fec3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:bb:bb:b6:4c:e8:7c:4a:eb:1c:d7:9b:da: ab:62:14:13:0c:27:1e:04:e1:9d:ba:05:b5:51:0b: 57:01:ee:d2:43:ad:f5:69:a7:bf:a9:62:ef:81:53: 8d:37:a2:01:17:1b:9f:b7:cf:7a:0c:de:69:9a:97: 31:81:a3:c1:2f:6e:b4:4e:16:d4:de:a0:3b:2a:07: 03:e6:c8:b6:ed:f9:b6:44:92:f3:19:ee:fe:ea:ac: 59:54:cd:d2:66:85:1e:61:3f:56:1e:dd:c5:3e:69: bf:17:67:fc:f2:f9:75:c0:50:0b:9a:0e:9c:d7:57: e7:80:78:36:a9:1a:6e:2c:75:93:0c:03:67:ce:e2: 3c:7d:bf:2a:63:fe:99:c5:c4:5a:c0:00:b6:53:bc: 60:db:1a:a0:6c:73:58:f1:bc:cc:71:f9:dc:f2:e3: 47:b9:e5:bb:1c:6d:ee:22:50:9b:67:14:ff:b5:0b: 75:97:34:ef:19:d4:a8:c0:ae:8e:19:20:41:16:fb: c0:8c:c9:10:06:62:58:bb:e7:10:fc:6a:ee:6b:5c: 28:c0:cb:c8:45:3a:7c:ac:a2:8a:ca:3d:d0:15:8c: 5e:66:19:73:be:48:c1:2c:d2:2a:f8:18:02:b1:ee: 55:0d:c8:c1:74:a5:45:8c:04:52:62:d3:80:a5:55: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:38:75:76:B2:3F:8C:46:6B:8A:98:50:9F:32:5F:B3:95:D0:D8:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ef:2b:dc:b7:d2:45:9d:45:24:a3:f6:e1:ba:53:ac:29:5e: 01:df:48:a6:31:09:fc:0b:73:4c:12:7b:05:b1:ec:83:19:58: ce:65:48:79:5d:ac:b5:2e:5a:bc:e8:33:86:24:18:6a:ea:aa: e8:cf:3b:1c:c9:0c:3f:db:c2:e8:44:43:42:09:73:1b:24:30: 38:96:a5:cb:09:52:66:ad:ba:4e:05:39:e9:2d:25:40:55:93: d4:8e:78:14:05:2a:24:cb:29:b1:e6:63:a9:4a:0a:c6:23:c0: 7b:82:19:eb:ae:f1:cf:8f:99:4c:90:b2:58:ae:9b:42:41:ea: b5:81:4f:e6:29:6a:0c:7b:ab:4d:83:05:1e:d8:07:99:ae:b1: 3f:75:73:7f:1b:54:2b:fd:3c:e7:4e:35:03:80:19:9d:7b:51: fd:78:0a:46:75:8d:3e:61:63:ef:f0:52:5b:93:9e:97:32:35: a5:f9:11:d3:3b:d6:17:a4:e7:0c:05:8e:a9:91:0c:80:34:2a: c8:04:17:72:12:6a:62:76:4f:f8:b3:bf:14:40:8f:e2:43:25: 43:6b:eb:80:53:8c:46:d5:2d:65:78:24:86:a5:92:26:ac:3c: 7e:05:45:97:dc:e4:7e:f3:16:b8:d8:ab:1c:33:46:14:61:fe: 37:c8:5f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEEZIYTgti3jxeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWFjNDlhMjQtMDU4Zi00M2NiLWJhNjktODY2MGE4ZmVjM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ67u7ZM6HxK6xzXm9qrYhQTDCceBOGdugW1 UQtXAe7SQ631aae/qWLvgVONN6IBFxuft896DN5pmpcxgaPBL260ThbU3qA7KgcD 5si27fm2RJLzGe7+6qxZVM3SZoUeYT9WHt3FPmm/F2f88vl1wFALmg6c11fngHg2 qRpuLHWTDANnzuI8fb8qY/6ZxcRawAC2U7xg2xqgbHNY8bzMcfnc8uNHueW7HG3u IlCbZxT/tQt1lzTvGdSowK6OGSBBFvvAjMkQBmJYu+cQ/Grua1wowMvIRTp8rKKK yj3QFYxeZhlzvkjBLNIq+BgCse5VDcjBdKVFjARSYtOApVV53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI44dXayP4xGa4qYUJ8yX7OV0NiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNkYWIzZTgtNDkzYS0z Y2ExLWI5YTgtZjRmMDJhYWM5OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvvK9y30kWdRSSj9uG6U6wpXgHfSKYxCfwLc0wSewWx7IMZWM5lSHld rLUuWrzoM4YkGGrqqujPOxzJDD/bwuhEQ0IJcxskMDiWpcsJUmatuk4FOektJUBV k9SOeBQFKiTLKbHmY6lKCsYjwHuCGeuu8c+PmUyQslium0JB6rWBT+Ypagx7q02D BR7YB5musT91c38bVCv9POdONQOAGZ17Uf14CkZ1jT5hY+/wUluTnpcyNaX5EdM7 1hek5wwFjqmRDIA0KsgEF3ISamJ2T/izvxRAj+JDJUNr64BTjEbVLWV4JIalkias PH4FRZfc5H7zFrjYqxwzRhRh/jfIX18= -----END CERTIFICATE-----Generated at Fri Apr 17 14:01:05 2026 by rpki-client