$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa File: c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa (raw, json) Hash identifier: EIS6gyHxKfZi9l/4FMCyiBI+bHhyPEtdVejkOCYFQhE= Subject key identifier: EE:4E:92:37:18:78:FE:1C:E4:DD:1B:C2:CB:53:D0:DF:89:73:38:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC4391C7E7DF4CF2C829C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.41.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:43:91:c7:e7:df:4c:f2:c8:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5a7c795e-754f-40e6-858e-8d42e8c6dee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:52:11:9b:8e:5c:da:39:2d:37:46:93:a9: 84:77:e9:ea:67:fa:52:96:e1:d4:b3:75:9f:bf:56: e1:a6:7b:cc:b7:e8:3a:43:bd:7d:44:c3:2e:c5:30: ee:01:bc:cd:4b:4c:30:04:cc:3a:d8:7a:69:e4:d7: ae:cc:57:b0:c4:71:70:af:91:19:73:f4:7e:0e:c3: cb:1c:d1:9b:5e:11:56:44:52:a4:56:fa:d3:45:94: 94:32:0a:c0:0b:6d:fe:bb:ed:6f:56:bf:1c:06:b6: 96:e2:bb:dc:25:d1:29:21:99:c6:2c:9b:be:9c:4c: 35:14:cc:c2:68:8b:c5:c4:1c:a5:18:c8:6b:76:c8: 14:7a:f8:0e:44:04:ac:a6:8b:61:9a:82:cb:f7:e1: 7a:09:18:26:d8:4f:b1:14:ce:af:07:aa:5e:24:8f: 0a:0a:8c:5a:8d:e7:3d:93:0e:e9:3e:9b:d3:7d:84: 4a:6b:b1:0e:8c:f9:57:49:2d:9b:5b:1f:a6:97:1d: dd:c5:62:79:ba:26:1f:50:9e:90:1a:5f:ee:88:45: c3:3c:09:88:40:90:da:af:ed:69:0a:e1:85:43:94: 74:22:16:44:07:d1:f8:8d:83:5b:6b:ac:93:bd:d6: 92:af:47:c4:36:aa:74:94:7c:0b:d1:01:09:cd:1a: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4E:92:37:18:78:FE:1C:E4:DD:1B:C2:CB:53:D0:DF:89:73:38:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.41.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ec:64:c8:3f:80:79:60:d1:a5:8d:32:b8:6d:33:ee:4d:26: 8b:34:e1:f1:e2:c9:18:4e:96:4d:f1:9d:d8:74:36:80:34:4e: 62:df:8d:9f:b8:de:a1:2c:ed:09:04:80:10:e4:34:67:e0:dc: 57:be:0b:88:46:19:af:74:c1:d9:33:2f:2c:99:da:7a:c7:18: 79:5f:9a:2c:1e:75:73:e1:48:97:04:c8:92:b5:6b:2d:6b:34: ae:7c:9f:a9:79:bd:20:47:6e:53:11:7b:e4:77:db:17:3f:70: 11:f7:cc:fa:14:0f:28:a6:cb:bf:0e:f7:40:2a:bf:25:75:51: ac:6e:9a:e0:3f:82:b5:28:05:72:49:db:f4:d9:d6:89:e7:4b: ca:69:77:16:f4:b3:bc:8b:a2:94:f8:5f:71:ba:a8:ba:d2:2e: 90:c9:58:ab:a1:8f:39:47:4a:3c:81:a4:51:48:dc:12:3e:b8: de:0c:1c:c0:ad:43:0b:b2:c9:b8:23:a7:16:d3:e0:63:d8:ca: 4b:b6:34:dc:a8:2a:da:8a:09:1f:9c:04:84:25:98:45:68:3e: fa:0d:6a:b8:f8:62:b8:bc:61:73:eb:bf:08:a1:db:30:82:57: 03:ae:bd:4c:64:9f:2f:36:94:c0:5a:01:3f:e3:c1:4b:49:0e: 90:66:00:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEORx+ffTPLIKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NWE3Yzc5NWUtNzU0Zi00MGU2LTg1OGUtOGQ0MmU4YzZkZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsxSEZuOXNo5LTdGk6mEd+nqZ/pSluHUs3Wf v1bhpnvMt+g6Q719RMMuxTDuAbzNS0wwBMw62Hpp5NeuzFewxHFwr5EZc/R+DsPL HNGbXhFWRFKkVvrTRZSUMgrAC23+u+1vVr8cBraW4rvcJdEpIZnGLJu+nEw1FMzC aIvFxBylGMhrdsgUevgORASspothmoLL9+F6CRgm2E+xFM6vB6peJI8KCoxajec9 kw7pPpvTfYRKa7EOjPlXSS2bWx+mlx3dxWJ5uiYfUJ6QGl/uiEXDPAmIQJDar+1p CuGFQ5R0IhZEB9H4jYNba6yTvdaSr0fENqp0lHwL0QEJzRrXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5OkjcYeP4c5N0bwstT0N+JczipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzBhM2U2MmQtMWNkZi0z ZjQ1LWJlMmItMzE3ZWM4MmUxZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7sZMg/gHlg0aWNMrhtM+5NJos04fHiyRhOlk3xndh0NoA0TmLfjZ+4 3qEs7QkEgBDkNGfg3Fe+C4hGGa90wdkzLyyZ2nrHGHlfmiwedXPhSJcEyJK1ay1r NK58n6l5vSBHblMRe+R32xc/cBH3zPoUDyimy78O90AqvyV1UaxumuA/grUoBXJJ 2/TZ1onnS8ppdxb0s7yLopT4X3G6qLrSLpDJWKuhjzlHSjyBpFFI3BI+uN4MHMCt QwuyybgjpxbT4GPYyku2NNyoKtqKCR+cBIQlmEVoPvoNarj4Yri8YXPrvwih2zCC VwOuvUxkny82lMBaAT/jwUtJDpBmAOE= -----END CERTIFICATE-----Generated at Fri Apr 17 10:07:05 2026 by rpki-client