$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa File: caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa (raw, json) Hash identifier: CWem6ugEe4zw0V2omeyVFD05NAq7fFz1GmbacrZLVZg= Subject key identifier: D1:2F:A9:A7:54:73:BA:55:6F:2E:3A:50:1A:10:25:BA:D8:F8:B2:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC39331F1CAE2600EDE9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.32.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:39:33:1f:1c:ae:26:00:ed:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=211e62ea-a90f-4ae9-aa4c-601229595639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:c6:a1:74:f7:7a:ac:fc:b6:80:85:f4:37: 09:c6:85:28:f3:3f:f8:bb:5a:33:35:59:ce:34:58: a0:f9:77:c2:e0:94:d3:82:cc:c1:be:45:9d:e5:60: 9f:d3:0a:f7:8e:68:7c:77:78:cc:65:0f:80:11:3c: 50:9d:37:f8:7d:e2:19:77:3e:f7:14:c4:84:bf:43: c4:b0:e5:77:27:ab:27:64:ea:4c:92:77:f2:f5:c5: f7:1e:7c:4a:28:9a:d3:bc:71:08:b6:35:b0:84:70: 5b:e2:ae:cd:2e:98:3e:c4:7a:7c:d4:5a:c2:37:1e: 83:30:bd:58:9e:2e:75:b2:10:78:47:e8:15:61:af: 0d:c2:98:c6:9c:16:d2:5d:23:b4:0e:f0:be:74:c3: 0d:f6:34:02:7e:23:45:5a:53:79:3e:cf:aa:41:0e: 91:cd:5f:a7:dd:1f:fd:e6:7e:59:4a:ff:b3:c4:a8: 4f:c3:5b:77:d7:10:75:48:3f:8e:1a:81:74:73:08: 6f:fa:88:5d:8e:1b:dc:b7:4c:e7:c5:0a:3d:39:22: e2:a0:8f:06:d6:0d:85:80:ca:96:c3:05:2a:8a:76: 2d:e9:36:72:e4:92:8d:e7:09:06:aa:5d:0c:f3:97: 4a:a4:fb:08:40:91:24:0c:b1:38:7b:b5:3c:5e:1f: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:A9:A7:54:73:BA:55:6F:2E:3A:50:1A:10:25:BA:D8:F8:B2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.32.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f5:c5:7c:15:53:d3:6c:9f:6c:8b:9a:02:1a:3e:40:6b:0e: b1:78:3f:23:8b:36:d0:b9:88:6f:fe:93:2c:b1:f9:96:58:5a: be:f0:37:aa:0a:4e:36:8f:aa:42:bb:4b:1d:df:06:a7:ea:df: 3e:d5:9e:ce:21:d5:9b:dc:97:94:4e:18:a4:1e:ec:73:86:d2: 6e:08:78:1e:d6:98:fe:21:71:0f:72:84:14:3b:18:43:ef:ba: e8:c1:fe:37:f0:d0:34:49:76:a5:a6:5f:3f:05:05:d1:4c:44: 59:76:67:e1:93:6d:69:ad:c1:50:71:c0:80:27:64:75:2a:d7: fb:c9:d6:86:04:96:b0:60:c6:82:34:f1:7c:a2:64:55:97:94: 3e:87:eb:58:96:21:8f:76:ed:d3:93:60:02:74:06:10:36:68: ce:53:71:da:8d:3b:09:36:08:f3:b7:aa:66:63:f3:ee:18:44: 13:68:e0:a0:44:ee:37:57:e7:02:12:e6:a6:5a:83:38:43:4d: 6f:af:b2:f4:51:e0:71:63:07:67:ca:9a:64:cc:b0:53:af:8c: 91:c2:33:3f:8c:64:6f:cd:23:61:cf:3b:f2:c1:de:27:5e:74: 44:88:b3:0e:8f:af:24:92:11:b0:43:38:9e:db:1c:20:44:d3: c6:98:f3:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDkzHxyuJgDt6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjExZTYyZWEtYTkwZi00YWU5LWFhNGMtNjAxMjI5NTk1NjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEXGoXT3eqz8toCF9DcJxoUo8z/4u1ozNVnO NFig+XfC4JTTgszBvkWd5WCf0wr3jmh8d3jMZQ+AETxQnTf4feIZdz73FMSEv0PE sOV3J6snZOpMknfy9cX3HnxKKJrTvHEItjWwhHBb4q7NLpg+xHp81FrCNx6DML1Y ni51shB4R+gVYa8NwpjGnBbSXSO0DvC+dMMN9jQCfiNFWlN5Ps+qQQ6RzV+n3R/9 5n5ZSv+zxKhPw1t31xB1SD+OGoF0cwhv+ohdjhvct0znxQo9OSLioI8G1g2FgMqW wwUqinYt6TZy5JKN5wkGql0M85dKpPsIQJEkDLE4e7U8Xh9eXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEvqadUc7pVby46UBoQJbrY+LI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FhYTA3NzAtMmU0My0z MDgzLWE2YjktZTJhZTA0MTc1ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL1xXwVU9Nsn2yLmgIaPkBrDrF4PyOLNtC5iG/+kyyx+ZZYWr7wN6oK TjaPqkK7Sx3fBqfq3z7Vns4h1Zvcl5ROGKQe7HOG0m4IeB7WmP4hcQ9yhBQ7GEPv uujB/jfw0DRJdqWmXz8FBdFMRFl2Z+GTbWmtwVBxwIAnZHUq1/vJ1oYElrBgxoI0 8XyiZFWXlD6H61iWIY927dOTYAJ0BhA2aM5TcdqNOwk2CPO3qmZj8+4YRBNo4KBE 7jdX5wIS5qZagzhDTW+vsvRR4HFjB2fKmmTMsFOvjJHCMz+MZG/NI2HPO/LB3ide dESIsw6PrySSEbBDOJ7bHCBE08aY83Q= -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:12 2026 by rpki-client