$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7844b70-9399-3dcd-886a-b6e4357ec895.roa File: a7844b70-9399-3dcd-886a-b6e4357ec895.roa (raw, json) Hash identifier: 83WOJxS5IoWct5/on96R3Hn3SGStemg8LbDU1VEDStg= Subject key identifier: 39:4A:03:20:4E:57:94:AE:17:97:17:E5:7B:0C:7B:52:F4:AC:00:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC41FBC22BF88CB958D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7844b70-9399-3dcd-886a-b6e4357ec895.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.40.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:41:fb:c2:2b:f8:8c:b9:58:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d9e683b0-6bbb-4d19-b515-440293978665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:a2:ac:38:03:0c:4c:1d:db:32:a1:bf:0d: ee:49:73:d2:58:27:e8:3d:08:7c:67:c6:5f:dd:5d: 27:b2:6e:de:f2:d7:b8:ca:06:ee:4a:95:69:0b:1d: e2:9b:9d:28:00:c8:7c:65:f1:ca:60:63:ff:51:0e: 20:50:72:38:66:4b:a4:c0:8e:af:9d:4f:de:5d:97: 1e:00:c6:d8:41:be:c8:64:1c:fa:91:03:fc:1c:33: af:e4:21:13:1b:0a:25:22:7b:b9:38:ec:9b:9a:6c: 65:b1:4b:89:0f:89:af:b1:57:73:8f:af:e5:25:b1: b4:9d:0e:05:30:58:cd:67:f2:2e:fd:8d:54:9e:9e: 6f:a5:1b:4e:48:8a:ce:89:46:c6:95:de:97:28:5b: ce:b9:42:68:c6:1d:8f:9c:a5:ff:28:3f:4f:4b:7d: ac:3a:eb:de:ce:46:49:57:b7:69:c7:c1:19:0c:35: 98:95:0a:0f:ed:80:2a:3d:2f:3d:e6:e2:c0:df:8b: d5:06:04:c5:f4:8e:42:a3:bd:70:ab:22:03:a3:a4: e4:d0:ea:ac:0c:87:5f:59:30:9f:f4:5a:4b:69:44: 7c:3a:90:67:ed:02:a0:fe:24:e6:5e:c0:e1:eb:35: a7:a4:41:88:e6:84:7b:e3:db:0e:3b:c3:9d:55:67: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:03:20:4E:57:94:AE:17:97:17:E5:7B:0C:7B:52:F4:AC:00:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7844b70-9399-3dcd-886a-b6e4357ec895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.40.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:73:ee:d0:97:87:e9:59:2d:59:ac:65:25:33:cb:e3:5d:f4: cb:04:c6:25:1a:fe:07:f8:81:45:00:6a:48:1a:d7:54:41:bd: 44:db:08:ec:3d:32:0f:ce:7b:e0:db:86:76:57:2c:a5:94:90: 91:96:16:16:08:cc:6f:c6:5f:f5:d9:13:b2:53:67:55:ed:93: b0:e4:49:7a:28:8e:ab:6c:7c:b9:0a:17:a3:a7:4c:93:fe:a7: d4:e2:87:9a:c6:59:59:2a:8b:f2:4e:5b:b1:5e:97:ba:fe:38: f3:de:09:3e:72:0b:73:1d:e6:00:be:d9:9f:88:40:28:2c:b8: 19:87:11:f9:ee:06:1e:a1:56:76:91:43:9a:5b:47:59:55:ab: 77:25:55:a8:25:a7:9e:fd:6a:67:f8:b1:6a:0b:a6:08:50:00: 4a:75:42:9f:6e:bb:5b:d2:53:95:86:78:25:2e:44:2a:d6:c5: 14:f8:ec:0e:c3:c7:36:0c:17:e5:b6:38:bb:cd:2f:a9:4c:92: f5:78:04:81:bb:0c:db:f7:d5:91:fe:3f:5e:ae:c1:4c:1e:cf: 15:fb:97:21:df:7e:e2:89:69:fb:f4:02:fc:0b:b5:9e:40:d1: 21:84:e1:03:6a:31:9c:16:6e:6d:db:d7:04:a4:c6:a0:08:ca: e0:22:7e:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEH7wiv4jLlY1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDllNjgzYjAtNmJiYi00ZDE5LWI1MTUtNDQwMjkzOTc4NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zeirDgDDEwd2zKhvw3uSXPSWCfoPQh8Z8Zf 3V0nsm7e8te4ygbuSpVpCx3im50oAMh8ZfHKYGP/UQ4gUHI4ZkukwI6vnU/eXZce AMbYQb7IZBz6kQP8HDOv5CETGwolInu5OOybmmxlsUuJD4mvsVdzj6/lJbG0nQ4F MFjNZ/Iu/Y1Unp5vpRtOSIrOiUbGld6XKFvOuUJoxh2PnKX/KD9PS32sOuvezkZJ V7dpx8EZDDWYlQoP7YAqPS895uLA34vVBgTF9I5Co71wqyIDo6Tk0OqsDIdfWTCf 9FpLaUR8OpBn7QKg/iTmXsDh6zWnpEGI5oR749sOO8OdVWeFcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlKAyBOV5SuF5cX5XsMe1L0rAAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc4NDRiNzAtOTM5OS0z ZGNkLTg4NmEtYjZlNDM1N2VjODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJz7tCXh+lZLVmsZSUzy+Nd9MsExiUa/gf4gUUAakga11RBvUTbCOw9 Mg/Oe+DbhnZXLKWUkJGWFhYIzG/GX/XZE7JTZ1Xtk7DkSXoojqtsfLkKF6OnTJP+ p9Tih5rGWVkqi/JOW7Fel7r+OPPeCT5yC3Md5gC+2Z+IQCgsuBmHEfnuBh6hVnaR Q5pbR1lVq3clVaglp579amf4sWoLpghQAEp1Qp9uu1vSU5WGeCUuRCrWxRT47A7D xzYMF+W2OLvNL6lMkvV4BIG7DNv31ZH+P16uwUwezxX7lyHffuKJafv0AvwLtZ5A 0SGE4QNqMZwWbm3b1wSkxqAIyuAifmY= -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:55 2026 by rpki-client