$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa File: dfdb6820-06eb-3782-b934-97cafc7afa7c.roa (raw, json) Hash identifier: oZaPvYz6av9ccJT6yoknrhR2IluFTKIZq3ZylEQ89qs= Subject key identifier: C7:C2:58:EE:1F:9C:F6:D7:49:C5:2A:54:8C:E0:9E:4A:1E:9F:E1:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB0AC210902D1F1CBC3A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 68.36.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:0a:c2:10:90:2d:1f:1c:bc:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0f444b60-e081-4f76-b09d-e56396892b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:6e:13:7a:08:f9:d7:da:6d:72:98:62:07: e0:b4:60:89:9a:4e:91:c0:0d:05:13:15:ec:b9:f1: 0a:f9:59:07:05:96:0c:31:71:88:9a:4d:6a:fc:d6: 84:6d:6a:d4:84:49:c3:95:8f:93:a6:77:76:0e:1b: b7:83:af:b3:97:55:12:8f:b9:15:00:3a:84:f2:04: a9:6a:89:ac:7c:f7:5b:ad:41:65:0b:e6:a3:c4:1f: ee:ea:86:2f:c3:76:09:19:1e:69:94:09:11:d8:18: 85:97:cd:18:39:3a:af:cd:31:fd:ec:27:4d:74:e7: 09:74:c8:64:95:39:5f:43:29:73:15:b6:9d:93:88: b2:f4:f6:71:58:5f:5f:62:aa:ad:ac:33:c9:d6:b0: 67:6b:c5:0b:3d:e1:83:a9:49:2e:34:4a:79:89:3a: a5:2c:79:6c:dd:ba:08:b5:6f:67:50:8f:ba:f2:41: 08:5b:72:11:d0:73:69:45:e6:9f:bf:f9:23:8f:f7: 6e:04:96:d4:57:b8:75:db:06:c3:c6:56:4b:5d:00: 4c:35:45:a4:8a:34:69:43:72:48:ca:88:36:e5:b7: 5e:60:90:27:05:a3:9a:06:fd:48:3f:2a:1b:59:6a: a1:5e:54:71:19:41:0c:93:e5:3e:c4:b2:47:aa:f1: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:58:EE:1F:9C:F6:D7:49:C5:2A:54:8C:E0:9E:4A:1E:9F:E1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdb6820-06eb-3782-b934-97cafc7afa7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:5d:87:49:4a:db:71:4d:fe:dc:69:ea:5f:e0:37:13:22:e5: 2a:a6:92:eb:88:06:6f:3e:e4:15:95:6c:34:dd:9a:de:4c:c5: 63:a7:2a:b8:5c:bb:96:13:ee:22:8a:8d:6d:eb:0e:cc:7e:17: ed:00:79:0b:4e:01:4c:a8:b3:45:9e:f8:e1:82:9f:27:1c:f4: 07:09:82:36:d6:91:22:a8:44:b7:76:46:c8:b4:7d:2c:ec:f2: 5d:c3:38:17:29:f2:91:b0:9e:6a:b2:d3:7e:c9:06:3a:76:8c: c6:6a:7d:36:da:8b:4c:a1:e9:72:90:4d:8b:16:5f:a2:df:2b: 9d:e6:e2:9d:99:05:05:91:4f:62:95:c6:78:7e:94:53:9f:0f: c2:71:49:43:54:2a:b1:f8:df:2f:4d:49:24:4d:04:6c:f3:fd: 45:c3:97:81:8e:b7:c5:e5:fe:a8:76:0b:46:c3:bb:c4:a4:a4: 15:47:db:41:d4:4d:f7:c4:ad:56:ef:08:00:06:fe:f9:69:a5: 16:8f:e4:36:43:85:4e:f2:3d:60:96:9d:0f:cf:7b:fd:12:fb: 98:e6:4d:2d:4c:f5:da:7a:94:33:23:db:5b:ac:e8:9f:b1:18: f5:e7:13:c5:f7:0c:6f:63:8f:f8:e8:a8:56:7f:d2:0a:bd:e4: 07:42:68:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuwrCEJAtHxy8OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGY0NDRiNjAtZTA4MS00Zjc2LWIwOWQtZTU2Mzk2ODkyYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ZuE3oI+dfabXKYYgfgtGCJmk6RwA0FExXs ufEK+VkHBZYMMXGImk1q/NaEbWrUhEnDlY+Tpnd2Dhu3g6+zl1USj7kVADqE8gSp aomsfPdbrUFlC+ajxB/u6oYvw3YJGR5plAkR2BiFl80YOTqvzTH97CdNdOcJdMhk lTlfQylzFbadk4iy9PZxWF9fYqqtrDPJ1rBna8ULPeGDqUkuNEp5iTqlLHls3boI tW9nUI+68kEIW3IR0HNpReafv/kjj/duBJbUV7h12wbDxlZLXQBMNUWkijRpQ3JI yog25bdeYJAnBaOaBv1IPyobWWqhXlRxGUEMk+U+xLJHqvH1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfCWO4fnPbXScUqVIzgnkoen+H0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkYjY4MjAtMDZlYi0z NzgyLWI5MzQtOTdjYWZjN2FmYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9dh0lK23FN/txp6l/gNxMi5SqmkuuIBm8+5BWVbDTdmt5MxWOnKrhc u5YT7iKKjW3rDsx+F+0AeQtOAUyos0We+OGCnycc9AcJgjbWkSKoRLd2Rsi0fSzs 8l3DOBcp8pGwnmqy037JBjp2jMZqfTbai0yh6XKQTYsWX6LfK53m4p2ZBQWRT2KV xnh+lFOfD8JxSUNUKrH43y9NSSRNBGzz/UXDl4GOt8Xl/qh2C0bDu8SkpBVH20HU TffErVbvCAAG/vlppRaP5DZDhU7yPWCWnQ/Pe/0S+5jmTS1M9dp6lDMj21us6J+x GPXnE8X3DG9jj/joqFZ/0gq95AdCaGU= -----END CERTIFICATE-----Generated at Fri Apr 17 10:47:27 2026 by rpki-client