$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa File: 9f6af8af-cb0a-3795-84aa-124d2805c128.roa (raw, json) Hash identifier: 5AN5bT2Fw/zveZjnrxW9SUJ2D5vOgl87vWIMZLUsQWk= Subject key identifier: 2C:9A:AA:0D:EC:B1:06:F2:09:9C:79:6D:49:79:80:0F:6D:96:56:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC3EE07A10E771D7253000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.37.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:3e:e0:7a:10:e7:71:d7:25:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=050c05a7-8ab4-4646-baab-e7924cea3fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:d2:56:42:1c:b6:34:4e:19:6b:8a:33:81: 6d:49:cb:7b:88:a4:de:c8:49:70:48:e9:8f:e5:53: fa:c8:52:26:83:3e:c9:e3:05:63:48:02:8e:de:a0: 5f:43:c1:ef:0b:a7:47:02:10:e1:47:de:5f:e0:2f: eb:f4:a6:31:b7:5b:65:72:38:2a:66:04:06:79:9a: b0:31:ad:95:59:34:4f:e2:3b:92:00:b7:01:5e:4b: da:d3:89:ae:d1:5d:35:90:4e:f1:bb:f1:98:dd:07: 61:2d:54:34:41:fa:31:9c:7d:11:28:5e:62:5f:d0: cc:f0:66:17:97:60:03:d4:33:27:4a:a3:da:b3:ff: 6b:43:4b:9e:ba:fb:d4:5d:69:b4:6f:d2:c5:9b:c0: 2c:f1:e4:25:11:7e:d8:be:60:83:33:aa:ad:f3:f4: 0e:62:3d:dc:07:22:40:cc:c9:4b:56:8d:a1:8f:c7: 88:d6:85:7f:3d:76:74:89:f5:44:db:f2:45:0f:67: bf:2a:fa:5f:43:88:20:87:bb:8b:7d:57:8a:53:cd: e0:b7:4a:d0:3e:61:9a:de:b0:34:f0:e0:3c:86:80: 68:af:38:5c:a5:64:3d:38:be:46:c7:37:77:d6:e4: d2:d3:1e:77:af:b4:f8:fe:42:58:98:f8:53:9d:63: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9A:AA:0D:EC:B1:06:F2:09:9C:79:6D:49:79:80:0F:6D:96:56:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f6af8af-cb0a-3795-84aa-124d2805c128.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.37.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b8:69:73:4c:84:9b:20:b8:e1:30:38:28:46:fb:7a:fb:b6: 68:d0:6b:67:5f:e7:6e:11:9c:8a:5e:02:a8:4f:f8:fd:83:1a: 4f:ea:42:fe:4b:e3:a4:40:f1:27:0a:6d:da:53:b3:2c:b9:75: e3:72:19:68:06:35:44:bf:1e:3e:01:cb:20:60:92:ac:94:89: 0b:ed:87:e1:02:de:b4:6d:bd:cf:b7:e5:d3:8c:68:8e:18:a5: 75:e8:82:07:ae:41:7d:97:23:71:0a:35:38:a2:c9:22:8c:2a: a9:39:2f:bd:3c:36:8d:d6:aa:39:14:4b:de:2e:04:1c:ab:46: 98:3f:81:38:fa:22:d7:91:dc:c3:aa:4a:85:c6:0a:d6:55:0f: 89:f4:05:d7:63:22:f5:3f:e4:ba:c6:2d:2a:ac:b1:39:d3:9c: f0:ac:93:81:07:bc:8f:d3:38:85:ca:9e:d4:3e:a8:d9:c3:50: bc:4b:6e:b2:3f:20:4d:b9:4a:3d:be:99:04:e6:94:fc:c9:56: 90:80:a5:13:b8:09:94:66:58:50:a0:9f:d3:c3:11:a6:8c:7c: bd:f0:3b:64:9d:09:99:fe:41:28:dc:66:3b:7d:f1:3d:de:55: fc:60:66:dd:16:00:5d:12:3b:4d:fd:28:7b:67:7f:9b:ba:f0: ca:9e:8a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvD7gehDncdclMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDUwYzA1YTctOGFiNC00NjQ2LWJhYWItZTc5MjRjZWEzZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNvSVkIctjROGWuKM4FtSct7iKTeyElwSOmP 5VP6yFImgz7J4wVjSAKO3qBfQ8HvC6dHAhDhR95f4C/r9KYxt1tlcjgqZgQGeZqw Ma2VWTRP4juSALcBXkva04mu0V01kE7xu/GY3QdhLVQ0QfoxnH0RKF5iX9DM8GYX l2AD1DMnSqPas/9rQ0ueuvvUXWm0b9LFm8As8eQlEX7YvmCDM6qt8/QOYj3cByJA zMlLVo2hj8eI1oV/PXZ0ifVE2/JFD2e/KvpfQ4ggh7uLfVeKU83gt0rQPmGa3rA0 8OA8hoBorzhcpWQ9OL5Gxzd31uTS0x53r7T4/kJYmPhTnWMIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyaqg3ssQbyCZx5bUl5gA9tllYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY2YWY4YWYtY2IwYS0z Nzk1LTg0YWEtMTI0ZDI4MDVjMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALe4aXNMhJsguOEwOChG+3r7tmjQa2df524RnIpeAqhP+P2DGk/qQv5L 46RA8ScKbdpTsyy5deNyGWgGNUS/Hj4ByyBgkqyUiQvth+EC3rRtvc+35dOMaI4Y pXXoggeuQX2XI3EKNTiiySKMKqk5L708No3WqjkUS94uBByrRpg/gTj6IteR3MOq SoXGCtZVD4n0BddjIvU/5LrGLSqssTnTnPCsk4EHvI/TOIXKntQ+qNnDULxLbrI/ IE25Sj2+mQTmlPzJVpCApRO4CZRmWFCgn9PDEaaMfL3wO2SdCZn+QSjcZjt98T3e VfxgZt0WAF0SO039KHtnf5u68Mqeinc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:05 2026 by rpki-client