$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9f9a545-b1d0-332f-ae72-6a8347029f45.roa File: c9f9a545-b1d0-332f-ae72-6a8347029f45.roa (raw, json) Hash identifier: Ga1RxBibmELOIIXDFI9t9Lz/eE826KORY93iUO8yiGs= Subject key identifier: 57:70:C4:00:C8:CC:8E:29:61:41:5B:FE:8A:03:61:74:32:82:09:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC500669C16F27C30ADF20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9f9a545-b1d0-332f-ae72-6a8347029f45.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.58.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:50:06:69:c1:6f:27:c3:0a:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1cd1c526-98dc-43d3-a787-e953f4e055c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:64:5b:a2:3b:76:2a:2d:04:49:76:0a:9b: a8:23:18:d7:00:62:50:db:f5:c8:54:b9:6b:ca:08: 09:04:ac:52:ae:ef:75:7b:30:a2:8a:e9:de:b6:f4: 88:21:8b:ee:3f:55:cb:69:e6:6e:34:64:6e:60:3e: 82:51:69:53:da:13:08:ef:d0:37:96:54:f1:17:a4: ce:89:98:30:af:96:fd:19:c0:49:a4:ca:25:86:e9: 41:c9:c9:a5:ec:63:24:10:aa:62:18:4e:f8:16:02: fa:80:5a:c9:8c:50:03:fa:4d:79:0e:aa:62:78:ba: f8:39:ff:07:aa:3f:ba:99:17:b5:d3:6a:86:01:0d: 5c:0b:55:59:8d:27:81:d8:7a:66:d5:e0:22:9b:06: 18:be:dc:a1:2b:16:de:ca:d1:28:ed:a5:b0:42:ca: 4b:95:f0:06:a6:05:51:a3:da:eb:1e:a7:5e:c9:d6: 8e:aa:8d:b0:da:0b:f7:ff:1d:f2:f5:2e:ea:df:d4: 88:cc:62:17:4b:93:f5:42:58:29:67:75:2a:29:d1: 61:ad:46:a7:6d:69:b5:a1:ce:b9:9c:7c:7a:a8:17: 59:e7:b5:52:dd:0a:a1:38:01:fc:5a:2e:f3:c8:63: fd:d4:d0:bf:d9:10:7c:51:ae:67:40:a0:f1:35:0f: 6c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:70:C4:00:C8:CC:8E:29:61:41:5B:FE:8A:03:61:74:32:82:09:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9f9a545-b1d0-332f-ae72-6a8347029f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:67:bd:ac:7e:be:de:fe:ea:b9:10:cc:ff:ca:92:49:cf:33: 7e:7b:49:b5:dc:f2:14:be:37:b1:98:a7:46:5f:65:af:98:97: f0:b5:60:cc:9b:bb:4b:9a:a3:29:bc:4b:13:48:63:43:b3:e3: dc:cc:c7:3b:79:3f:73:3d:27:7a:7c:c0:21:75:7c:2c:84:1b: 94:b7:f8:34:f3:a7:4a:db:fd:e7:cc:5a:0b:7b:b0:c4:bb:23: 48:6b:ee:4b:c3:0b:f2:94:15:08:b4:a9:35:03:78:df:08:43: c1:8e:15:6d:39:c2:ca:95:b4:d1:12:0b:a8:9f:de:69:d5:1d: 03:f6:4d:4c:30:50:eb:5d:1b:35:72:cb:cd:a1:f7:1e:ad:c5: a0:c3:82:ef:8a:30:14:00:80:7a:d1:5a:81:11:01:43:2f:25: 14:6a:d0:66:e4:46:b8:eb:e0:c4:2d:2a:9e:ad:16:c7:5e:a4: dd:c2:f9:58:a8:92:77:30:b0:3c:db:3f:c8:45:c0:54:c7:26: 45:33:33:a1:85:ca:98:0a:7d:af:2e:8a:8b:54:b7:4d:88:ee: a9:a3:de:e9:04:7f:82:7f:7f:2a:b0:62:96:c1:94:32:08:48: c4:cb:9c:f2:da:5d:f0:b6:cf:04:2a:bc:17:a5:88:bd:d1:e4: cf:d1:52:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFAGacFvJ8MK3yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWNkMWM1MjYtOThkYy00M2QzLWE3ODctZTk1M2Y0ZTA1NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6xkW6I7diotBEl2CpuoIxjXAGJQ2/XIVLlr yggJBKxSru91ezCiiunetvSIIYvuP1XLaeZuNGRuYD6CUWlT2hMI79A3llTxF6TO iZgwr5b9GcBJpMolhulBycml7GMkEKpiGE74FgL6gFrJjFAD+k15DqpieLr4Of8H qj+6mRe102qGAQ1cC1VZjSeB2Hpm1eAimwYYvtyhKxbeytEo7aWwQspLlfAGpgVR o9rrHqdeydaOqo2w2gv3/x3y9S7q39SIzGIXS5P1QlgpZ3UqKdFhrUanbWm1oc65 nHx6qBdZ57VS3QqhOAH8Wi7zyGP91NC/2RB8Ua5nQKDxNQ9sjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdwxADIzI4pYUFb/ooDYXQyggnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzlmOWE1NDUtYjFkMC0z MzJmLWFlNzItNmE4MzQ3MDI5ZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxnvax+vt7+6rkQzP/KkknPM357SbXc8hS+N7GYp0ZfZa+Yl/C1YMyb u0uaoym8SxNIY0Oz49zMxzt5P3M9J3p8wCF1fCyEG5S3+DTzp0rb/efMWgt7sMS7 I0hr7kvDC/KUFQi0qTUDeN8IQ8GOFW05wsqVtNESC6if3mnVHQP2TUwwUOtdGzVy y82h9x6txaDDgu+KMBQAgHrRWoERAUMvJRRq0GbkRrjr4MQtKp6tFsdepN3C+Vio kncwsDzbP8hFwFTHJkUzM6GFypgKfa8uiotUt02I7qmj3ukEf4J/fyqwYpbBlDII SMTLnPLaXfC2zwQqvBeliL3R5M/RUic= -----END CERTIFICATE-----Generated at Fri Apr 17 01:44:00 2026 by rpki-client