$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa File: a3c33f03-f08f-3e59-880a-9f571389cffd.roa (raw, json) Hash identifier: 4ncKpO37Nr2LQ5mevzIsB7se7yIV+7b4SxdEKWl4Gls= Subject key identifier: 19:07:B2:34:17:A0:D0:8D:A0:F6:AD:91:F1:ED:95:DC:01:DA:E9:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC39F52BECFDF9B8CCC4C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.32.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:39:f5:2b:ec:fd:f9:b8:cc:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=84a85f25-5b3f-4448-bd2f-5c9121adeca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:15:9a:9b:65:d2:f4:16:7b:2a:1d:db:e3: d0:e2:47:77:78:b6:c8:3b:b7:f7:3a:08:3d:1a:83: 65:db:14:40:6a:11:09:45:ab:fa:4d:fd:8e:52:27: 4a:16:ca:51:db:b4:16:a6:e2:ad:9c:d2:8c:27:d9: b9:a5:2e:cd:3d:49:1f:54:41:08:85:00:4e:d5:5f: 04:81:59:e6:a7:99:82:6d:95:81:d2:9d:e7:b0:a8: fa:b5:18:23:ef:11:79:03:98:14:06:2b:41:76:25: 81:cb:33:d7:28:9b:2b:c6:5c:f5:26:16:3a:a6:95: 8d:c5:69:00:3c:84:22:3a:6d:3f:e4:44:9f:bb:df: 3a:c9:8d:95:89:5e:8f:a0:ac:7c:a9:69:e3:99:5f: 4a:f4:b4:41:1a:4a:0a:f2:0b:4e:85:56:9e:59:a9: bb:78:18:f7:f7:ae:33:7c:5d:05:32:35:ae:95:2f: f7:5f:e6:1a:89:f3:65:ed:90:0b:11:b3:0d:bd:4a: 92:fe:05:8a:63:c4:de:c7:13:c3:fe:e0:47:40:1b: b4:b7:79:7a:e5:dc:a3:42:b8:7f:22:3e:08:af:e6: 9d:aa:12:8c:2e:a5:e4:93:15:c0:45:34:46:eb:a3: 17:ca:c3:da:5e:39:1d:f0:61:3d:64:a1:35:04:80: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:B2:34:17:A0:D0:8D:A0:F6:AD:91:F1:ED:95:DC:01:DA:E9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:27:cc:e5:1c:ad:7c:d8:01:05:34:b4:7a:c9:e5:f5:91:22: 3b:cf:54:e5:90:b9:9e:21:7e:84:de:5f:2f:5d:a6:af:b8:18: 55:32:a7:75:0c:7f:66:28:02:e4:7a:91:d2:6c:f7:a0:3a:ab: 0f:77:1e:b1:85:b6:13:2a:6d:6e:49:c6:29:18:f7:4f:9c:3c: e3:23:4a:6d:cf:2d:22:2c:89:9e:22:7a:d0:2c:b6:9d:68:9d: ce:d2:d6:8e:eb:3e:ea:7d:f0:57:df:b7:f7:10:8b:34:2e:7d: a1:1c:90:2e:da:f9:23:3f:1f:76:b9:08:44:db:e1:74:59:07: 49:d7:9b:33:7a:07:43:f8:c9:ba:35:82:79:bf:19:bc:db:7c: 3f:dd:26:2b:f8:2b:24:4e:f4:c5:9e:19:c7:3b:97:72:eb:e1: e5:61:38:ce:50:8b:92:38:f3:cb:c7:db:52:f0:ab:fa:9b:22: 73:fa:62:29:4a:0b:2b:ca:5a:29:a9:74:b6:51:c6:70:74:31: 33:8e:06:d6:40:93:c9:50:e6:31:d3:ae:76:7f:d1:5c:64:1b: 2e:36:1e:6e:e8:cb:91:b5:ec:2c:4c:aa:d1:a0:43:e5:31:04: c1:93:5f:ee:77:0e:ce:02:6e:43:7f:b4:eb:27:f4:c4:38:53: a0:47:e4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDn1K+z9+bjMxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODRhODVmMjUtNWIzZi00NDQ4LWJkMmYtNWM5MTIxYWRlY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosEVmptl0vQWeyod2+PQ4kd3eLbIO7f3Ogg9 GoNl2xRAahEJRav6Tf2OUidKFspR27QWpuKtnNKMJ9m5pS7NPUkfVEEIhQBO1V8E gVnmp5mCbZWB0p3nsKj6tRgj7xF5A5gUBitBdiWByzPXKJsrxlz1JhY6ppWNxWkA PIQiOm0/5ESfu986yY2ViV6PoKx8qWnjmV9K9LRBGkoK8gtOhVaeWam7eBj3964z fF0FMjWulS/3X+YaifNl7ZALEbMNvUqS/gWKY8TexxPD/uBHQBu0t3l65dyjQrh/ Ij4Ir+adqhKMLqXkkxXARTRG66MXysPaXjkd8GE9ZKE1BICjpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkHsjQXoNCNoPatkfHtldwB2unqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNjMzNmMDMtZjA4Zi0z ZTU5LTg4MGEtOWY1NzEzODljZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYnzOUcrXzYAQU0tHrJ5fWRIjvPVOWQuZ4hfoTeXy9dpq+4GFUyp3UM f2YoAuR6kdJs96A6qw93HrGFthMqbW5JxikY90+cPOMjSm3PLSIsiZ4ietAstp1o nc7S1o7rPup98Ffft/cQizQufaEckC7a+SM/H3a5CETb4XRZB0nXmzN6B0P4ybo1 gnm/GbzbfD/dJiv4KyRO9MWeGcc7l3Lr4eVhOM5Qi5I488vH21Lwq/qbInP6YilK CyvKWimpdLZRxnB0MTOOBtZAk8lQ5jHTrnZ/0VxkGy42Hm7oy5G17CxMqtGgQ+Ux BMGTX+53Ds4CbkN/tOsn9MQ4U6BH5B4= -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:59 2026 by rpki-client