$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa File: a70cb687-faed-31e5-a935-8278dec6f2f2.roa (raw, json) Hash identifier: JahwlS5TCqPNjOXAwsB3+Nd3EOWfT5zZu1E4v1mHFyM= Subject key identifier: B5:AF:2F:5C:FB:A3:14:FF:67:0F:94:95:45:1C:A5:8B:37:38:47:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DF4DB5A34BE8B947E8CEB2280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 33491 IP address blocks: 68.58.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:5a:34:be:8b:94:7e:8c:eb:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=5956590b-7b9f-4801-ba40-2da4b55c49dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:1c:f1:59:82:45:01:42:8d:b3:47:ea:5d: c7:49:bc:b5:17:aa:a8:2a:d9:34:05:dc:da:3f:41: 36:f6:3b:a8:66:7c:09:00:d6:35:5b:ac:b0:f5:cf: a5:46:33:26:16:e9:e4:4c:2a:79:a4:94:d5:80:af: c8:06:f3:96:34:1b:05:bc:b0:38:8c:18:7e:1b:57: 9a:8e:d8:4c:c7:0b:80:66:fa:29:1f:af:51:38:d4: af:18:6d:87:af:3a:60:05:3f:31:4a:9d:54:19:fd: 88:d0:6f:4a:66:84:4f:a3:e1:a8:82:9b:57:1c:d4: aa:29:17:03:a6:31:b2:8c:35:89:2b:84:95:a0:bf: 02:c9:24:b4:49:3f:24:57:20:62:89:37:0e:09:bf: 08:fc:08:37:2e:2b:7d:9c:ec:d5:12:a5:ed:6d:5b: 8a:af:0f:03:82:b5:84:4d:0d:96:ec:87:c6:f9:e4: 54:53:bc:2e:70:74:7e:50:c6:05:c6:06:ab:bc:c3: bc:b6:66:f3:15:c9:e2:42:c7:d0:26:19:80:a8:39: 40:90:21:fc:cc:c6:12:20:e8:65:96:1c:c7:65:eb: 0d:b7:42:61:8b:8e:86:3e:ee:26:74:47:92:35:1e: 22:77:c9:7f:07:a6:d2:48:ff:98:83:25:5c:41:f9: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:2F:5C:FB:A3:14:FF:67:0F:94:95:45:1C:A5:8B:37:38:47:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a70cb687-faed-31e5-a935-8278dec6f2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:25:38:ac:95:36:71:5c:80:79:d8:6d:1d:35:81:ce:b3:f2: bd:fe:11:f0:4b:08:f0:84:61:f0:ef:9c:fd:40:ac:8a:01:fe: a1:2f:b4:06:5c:ab:0c:fa:d2:bc:7d:8d:b6:db:06:96:57:5d: 02:bc:41:93:f1:d1:ae:f4:a1:84:a6:e9:c5:e4:a2:ba:ce:2a: a2:f0:4b:77:e2:af:72:db:85:2e:2f:99:a5:2b:86:1d:ce:24: 0d:74:7a:e2:b0:af:d7:8d:e5:46:23:5e:72:48:11:3c:f3:4d: 4c:65:14:9b:e0:27:18:3a:41:84:c1:c0:f4:ab:e9:ca:d6:33: f6:dc:da:45:56:73:36:dc:c6:6e:ac:c9:50:64:ff:d3:d1:f9: 68:fb:dc:83:9c:41:2c:3e:1e:a4:dd:d5:04:26:c4:ac:52:e0: d2:a9:ab:66:d3:71:29:08:33:63:68:f8:84:e1:27:8e:5d:b5: ac:f0:58:33:ae:8f:bf:e4:7b:8c:70:f9:e2:7c:77:47:94:ed: 6c:14:33:5e:af:41:d6:cf:03:a7:e6:70:23:05:68:ae:a4:94: d5:c8:d5:6a:2a:34:e5:cf:3d:bd:81:2d:3f:ff:2c:90:5d:3c: a8:b6:81:84:25:f1:47:9c:6a:c5:c8:fa:62:dd:03:a5:1b:02: 84:19:bc:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3021o0vouUfozrIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NTk1NjU5MGItN2I5Zi00ODAxLWJhNDAtMmRhNGI1NWM0OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZcc8VmCRQFCjbNH6l3HSby1F6qoKtk0Bdza P0E29juoZnwJANY1W6yw9c+lRjMmFunkTCp5pJTVgK/IBvOWNBsFvLA4jBh+G1ea jthMxwuAZvopH69RONSvGG2HrzpgBT8xSp1UGf2I0G9KZoRPo+GogptXHNSqKRcD pjGyjDWJK4SVoL8CySS0ST8kVyBiiTcOCb8I/Ag3Lit9nOzVEqXtbVuKrw8DgrWE TQ2W7IfG+eRUU7wucHR+UMYFxgarvMO8tmbzFcniQsfQJhmAqDlAkCH8zMYSIOhl lhzHZesNt0Jhi46GPu4mdEeSNR4id8l/B6bSSP+YgyVcQfkSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWvL1z7oxT/Zw+UlUUcpYs3OEfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTcwY2I2ODctZmFlZC0z MWU1LWE5MzUtODI3OGRlYzZmMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALklOKyVNnFcgHnYbR01gc6z8r3+EfBLCPCEYfDvnP1ArIoB/qEvtAZc qwz60rx9jbbbBpZXXQK8QZPx0a70oYSm6cXkorrOKqLwS3fir3LbhS4vmaUrhh3O JA10euKwr9eN5UYjXnJIETzzTUxlFJvgJxg6QYTBwPSr6crWM/bc2kVWczbcxm6s yVBk/9PR+Wj73IOcQSw+HqTd1QQmxKxS4NKpq2bTcSkIM2No+IThJ45dtazwWDOu j7/ke4xw+eJ8d0eU7WwUM16vQdbPA6fmcCMFaK6klNXI1WoqNOXPPb2BLT//LJBd PKi2gYQl8UecasXI+mLdA6UbAoQZvI8= -----END CERTIFICATE-----Generated at Sat Jun 13 19:14:51 2026 by rpki-client