$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa File: a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa (raw, json) Hash identifier: WixLcaP0YEk/OwjKTrFQv2mVzkB0lZbvEYp9fhc621o= Subject key identifier: 95:1B:DF:6E:5E:C7:73:F4:E0:04:B9:FF:2A:1C:83:64:C3:D0:B1:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB1B12719B2BF0DF264180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.55.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:1b:12:71:9b:2b:f0:df:26:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cbc2072a-7ddb-4cc3-8687-96f99c22f79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1d:e9:a7:21:b1:47:4b:8b:fb:1a:9f:21:65: cd:58:fc:56:7e:82:cb:91:f6:6b:2b:55:79:78:a7: ef:7e:c8:41:ea:59:12:49:70:5a:04:3e:b2:3f:46: e9:e3:b1:38:37:3b:6a:80:25:85:86:87:f6:34:d0: 10:99:c3:30:71:f8:98:ba:84:61:cc:01:d8:4e:16: 98:35:1b:eb:00:90:47:f6:88:88:99:cd:8a:37:da: f9:5a:4e:58:88:4a:2f:43:ec:d8:66:9c:a4:0d:9b: 18:01:25:94:60:f5:7a:a4:44:7d:3a:03:f5:1d:37: 40:f9:f4:12:51:21:dc:c3:7b:42:27:df:bf:0e:05: f2:e6:a6:1e:72:19:1a:c3:19:eb:e1:0c:15:47:01: 89:d3:be:8b:3a:d8:0f:69:a7:4f:cb:1c:23:d5:47: f5:ef:5c:3c:b9:19:9b:67:40:01:64:87:58:9c:d1: 0a:4a:be:63:93:dc:cc:eb:22:94:1f:c0:dc:37:f5: df:f0:df:ad:80:7e:54:a5:63:dc:9a:05:90:8e:9b: 44:9c:78:22:6a:06:8c:53:32:8a:98:73:9c:7a:a9: 0a:07:60:8e:f6:79:44:dc:98:88:8c:69:be:c4:5a: 89:cd:bb:a3:54:13:8d:c6:b3:af:0a:1a:48:3b:4f: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:DF:6E:5E:C7:73:F4:E0:04:B9:FF:2A:1C:83:64:C3:D0:B1:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.55.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:93:93:5f:fa:47:db:c9:2b:f3:f4:e6:77:ad:5e:a9:74:7f: d4:8c:b5:5e:c3:f9:7b:5f:30:46:92:9e:06:84:6c:b7:1b:8e: e4:d3:57:69:f8:03:91:a4:c6:4a:fe:fb:45:87:80:3d:1b:22: e3:f4:f7:41:70:11:f0:d2:de:0a:b7:51:54:7a:7d:82:e4:c5: 08:a0:34:4a:90:88:c4:41:51:06:3d:cf:c5:49:e6:42:ef:f2: 1d:e2:fc:cf:92:7d:63:48:99:1e:c2:76:07:85:63:4c:ac:43: f6:12:cb:29:16:94:59:8e:22:dc:cf:7f:61:31:91:18:43:c1: b8:c6:29:e1:32:fc:45:6a:e0:56:6a:d9:ed:e7:13:5d:7c:51: c4:e8:15:34:f8:c1:4d:09:e9:06:30:4b:03:37:7f:fc:49:0f: 94:b4:cc:5d:fc:aa:73:62:6f:df:f8:1c:cb:64:34:49:d4:68: 26:ee:a6:bf:84:57:bf:e2:51:15:d1:3f:bd:76:d4:0a:bf:f6: 2e:45:0e:d7:d2:61:68:34:82:b7:76:24:b5:6b:29:bd:75:e9: c6:40:f3:84:18:66:59:83:5c:6f:25:bd:85:51:cd:23:73:76: 91:4e:15:c9:98:98:2b:b5:c8:91:ef:6c:82:4a:a2:76:b5:04: f5:f3:4b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxsScZsr8N8mQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2JjMjA3MmEtN2RkYi00Y2MzLTg2ODctOTZmOTljMjJmNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR3ppyGxR0uL+xqfIWXNWPxWfoLLkfZrK1V5 eKfvfshB6lkSSXBaBD6yP0bp47E4NztqgCWFhof2NNAQmcMwcfiYuoRhzAHYThaY NRvrAJBH9oiImc2KN9r5Wk5YiEovQ+zYZpykDZsYASWUYPV6pER9OgP1HTdA+fQS USHcw3tCJ9+/DgXy5qYechkawxnr4QwVRwGJ076LOtgPaadPyxwj1Uf171w8uRmb Z0ABZIdYnNEKSr5jk9zM6yKUH8DcN/Xf8N+tgH5UpWPcmgWQjptEnHgiagaMUzKK mHOceqkKB2CO9nlE3JiIjGm+xFqJzbujVBONxrOvChpIO0/lcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUb325ex3P04AS5/yocg2TD0LHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI0ZTRmOTQtNjJiOC0z MDRhLWI0YTUtZTUyZGM0MWUwMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Tk1/6R9vJK/P05netXql0f9SMtV7D+XtfMEaSngaEbLcbjuTTV2n4 A5Gkxkr++0WHgD0bIuP090FwEfDS3gq3UVR6fYLkxQigNEqQiMRBUQY9z8VJ5kLv 8h3i/M+SfWNImR7CdgeFY0ysQ/YSyykWlFmOItzPf2ExkRhDwbjGKeEy/EVq4FZq 2e3nE118UcToFTT4wU0J6QYwSwM3f/xJD5S0zF38qnNib9/4HMtkNEnUaCbupr+E V7/iURXRP7121Aq/9i5FDtfSYWg0grd2JLVrKb116cZA84QYZlmDXG8lvYVRzSNz dpFOFcmYmCu1yJHvbIJKona1BPXzSxk= -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:00 2026 by rpki-client