$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4a5544a-de96-3f59-a501-42e2178040f2.roa File: b4a5544a-de96-3f59-a501-42e2178040f2.roa (raw, json) Hash identifier: BwtMyrTcYXeqGo6B4UQc6imwWnWP3TvbeS9HFpo8ho8= Subject key identifier: 14:43:1D:E8:A5:81:0D:9E:1E:2F:C0:D5:CF:22:2D:E2:37:63:63:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB101FBB28C1094BCC3DB0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4a5544a-de96-3f59-a501-42e2178040f2.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.41.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:10:1f:bb:28:c1:09:4b:cc:3d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4de82788-e845-4a7f-a39a-fb26fe0e4ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:7e:92:de:b6:ab:fe:bd:d5:6f:fb:15:68: 3c:2e:44:38:ba:9b:12:27:7c:dc:04:f3:01:47:3e: 64:e9:21:e4:b9:d5:e8:3d:89:76:e6:df:c6:92:da: 18:6a:5f:01:78:06:d7:c3:ef:8f:88:6a:01:95:9c: 64:07:50:fe:93:f9:46:32:bc:84:84:1c:b3:3a:28: a6:54:0b:e5:81:85:6c:21:0d:5f:88:08:b1:4c:ab: 94:6e:6e:2b:51:c8:11:e5:2f:f9:1e:54:61:7a:62: c4:14:3b:9f:c9:49:69:58:35:f8:47:d7:2c:9a:bf: d1:41:13:48:f7:23:aa:53:4b:a3:4f:65:86:3c:bf: fd:9a:f6:bb:c1:ef:e6:69:1c:5d:a5:0d:eb:87:e0: a6:a2:ce:00:8b:0a:ed:2e:b3:92:42:1c:2e:97:44: e5:56:67:a7:d8:20:5c:20:a8:1c:dc:71:4a:93:b7: 7c:84:32:5d:7a:c1:cf:aa:ce:30:9c:6c:95:dc:bb: 5a:99:ac:03:94:36:c1:6d:e6:6d:8f:a7:f3:1d:5f: 67:96:bd:31:ef:47:d8:8e:78:77:4f:83:3f:21:53: d5:ca:63:4e:e5:7e:c5:db:20:f8:2f:bd:3d:cc:7c: ec:46:e0:b7:f4:1c:6b:59:5c:e4:4d:49:d7:34:28: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:43:1D:E8:A5:81:0D:9E:1E:2F:C0:D5:CF:22:2D:E2:37:63:63:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4a5544a-de96-3f59-a501-42e2178040f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4b:e1:ab:74:76:47:0f:63:d3:34:c4:8a:37:3e:fe:fb:75: 87:f3:eb:47:79:18:15:df:68:24:46:d2:23:03:19:80:ba:93: 42:0a:76:a2:ee:a9:6f:1e:0d:e7:93:c0:c1:56:5f:04:a7:62: 5f:d1:a6:18:2e:e3:dc:a7:82:9b:91:a0:ce:94:ce:bb:48:5a: 73:03:b3:af:13:80:c1:5e:eb:df:63:6f:5e:ce:66:1f:3e:47: 3f:58:ac:4b:aa:b9:69:09:e8:67:f0:09:5a:82:7a:59:4e:d8: d3:cc:5a:ce:2e:67:eb:28:63:d4:73:b1:fb:84:50:4f:ee:43: 51:ec:00:c9:48:3b:6f:e9:1e:6a:bd:95:80:9f:db:17:e8:02: 59:e2:8a:d2:46:15:9c:a1:54:f3:dc:82:f8:ba:9e:c4:60:a9: c9:53:42:82:b9:42:6b:58:82:7f:37:80:bf:bb:ed:19:3c:aa: a5:93:04:e2:8a:70:87:4c:bd:d3:1b:39:2b:2f:a2:6e:0e:d4: 4d:0e:ac:d5:b6:33:25:d9:d8:ee:ff:60:2a:a9:04:84:1e:39: 26:1c:be:f4:ed:33:ef:c6:83:62:06:fc:20:03:af:be:fc:47: c8:cf:11:c7:14:b2:c3:f3:e7:3e:ee:90:9d:9b:73:97:1e:8f: 71:79:93:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxAfuyjBCUvMPbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGRlODI3ODgtZTg0NS00YTdmLWEzOWEtZmIyNmZlMGU0ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwR+kt62q/691W/7FWg8LkQ4upsSJ3zcBPMB Rz5k6SHkudXoPYl25t/GktoYal8BeAbXw++PiGoBlZxkB1D+k/lGMryEhByzOiim VAvlgYVsIQ1fiAixTKuUbm4rUcgR5S/5HlRhemLEFDufyUlpWDX4R9csmr/RQRNI 9yOqU0ujT2WGPL/9mva7we/maRxdpQ3rh+Cmos4AiwrtLrOSQhwul0TlVmen2CBc IKgc3HFKk7d8hDJdesHPqs4wnGyV3LtamawDlDbBbeZtj6fzHV9nlr0x70fYjnh3 T4M/IVPVymNO5X7F2yD4L709zHzsRuC39BxrWVzkTUnXNCgNhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRDHeilgQ2eHi/A1c8iLeI3Y2OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRhNTU0NGEtZGU5Ni0z ZjU5LWE1MDEtNDJlMjE3ODA0MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpL4at0dkcPY9M0xIo3Pv77dYfz60d5GBXfaCRG0iMDGYC6k0IKdqLu qW8eDeeTwMFWXwSnYl/Rphgu49yngpuRoM6UzrtIWnMDs68TgMFe699jb17OZh8+ Rz9YrEuquWkJ6GfwCVqCellO2NPMWs4uZ+soY9RzsfuEUE/uQ1HsAMlIO2/pHmq9 lYCf2xfoAlniitJGFZyhVPPcgvi6nsRgqclTQoK5QmtYgn83gL+77Rk8qqWTBOKK cIdMvdMbOSsvom4O1E0OrNW2MyXZ2O7/YCqpBIQeOSYcvvTtM+/Gg2IG/CADr778 R8jPEccUssPz5z7ukJ2bc5cej3F5k74= -----END CERTIFICATE-----Generated at Fri Apr 17 10:22:36 2026 by rpki-client