$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3076e61-c758-3076-84d4-7d256a5a2d87.roa File: e3076e61-c758-3076-84d4-7d256a5a2d87.roa (raw, json) Hash identifier: IeYj7/OFrD8waM0s21zsN8xGALn97PbGWZ+vSJEEr8U= Subject key identifier: 77:2B:75:AA:C9:CA:F4:43:67:88:2D:7B:4D:5E:DB:E9:06:79:97:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D81009A8B99BE8D4F3F0FA080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3076e61-c758-3076-84d4-7d256a5a2d87.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 33659 IP address blocks: 68.84.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:9a:8b:99:be:8d:4f:3f:0f:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=a3da3a0a-3141-4f54-9d31-95438d402b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:9d:67:98:09:ef:08:20:ed:20:10:87:66: 84:ad:df:69:3d:a5:f3:f0:18:3b:66:6e:7c:e2:38: 3b:fd:a4:13:c9:c1:5f:19:c9:f4:c5:39:9d:94:7e: 67:f1:66:59:79:83:d5:de:17:c6:73:8a:d2:b6:1c: d1:4b:b0:a6:73:26:d7:91:ab:2c:44:0b:00:bb:45: c7:40:8a:5a:42:80:99:8f:87:bc:5c:72:9e:bb:94: 88:eb:cc:07:60:43:0c:00:f1:f1:8f:9f:9d:6f:9c: 26:55:cf:1b:fe:d4:85:88:28:b4:13:a2:3d:dc:a2: 58:02:74:3f:a5:fb:94:61:e1:fb:39:d0:61:4b:2c: b5:35:aa:4f:e8:5f:7f:a9:2f:f2:e1:62:18:98:76: 33:18:45:8e:38:89:0a:fb:b2:67:9b:c4:b8:85:09: 41:19:25:d7:da:a0:cf:5e:76:55:92:a7:af:dc:eb: 1a:92:0a:80:1c:2e:05:f5:90:2d:c0:15:71:49:c3: 41:a3:ce:5a:6d:4e:1d:c7:49:c9:b1:03:f0:17:1c: b0:74:2b:d3:16:a5:70:9e:32:e2:fb:f2:55:b4:98: 4c:2d:a1:24:c4:ed:36:7e:f1:74:fc:c5:07:13:43: dd:a4:f6:ae:d2:87:b8:bd:6b:71:02:a6:85:3f:c6: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2B:75:AA:C9:CA:F4:43:67:88:2D:7B:4D:5E:DB:E9:06:79:97:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3076e61-c758-3076-84d4-7d256a5a2d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:9c:da:e2:26:b3:20:1d:1e:b9:e5:6b:28:24:fd:35:55:12: dd:b8:ff:e7:e1:ac:08:83:5a:2b:9e:1a:9b:24:47:b8:77:84: 03:32:f3:b8:74:a6:e4:30:de:be:2b:04:a0:88:a3:41:8b:29: 6b:5a:4b:2e:81:fa:8a:f7:3a:05:b8:8b:48:ba:0b:a5:e0:05: a0:fa:e3:49:a7:70:90:4d:16:c4:27:d5:a7:90:60:4a:7b:09: c5:94:42:50:17:9a:62:9b:13:d8:d9:fb:59:04:6f:75:03:c7: d8:45:07:0d:1e:c5:e6:82:d6:81:8c:c7:8d:d2:ff:1d:1d:c6: 7a:40:09:4b:7f:a0:cf:79:6a:1d:5d:d1:d7:75:6e:81:b5:23: a5:c3:fb:26:94:84:1e:64:8d:09:78:8b:f2:69:87:e1:73:cd: e0:dc:43:6a:72:d1:bf:60:33:64:c7:4a:31:3c:b5:87:81:5a: a0:fd:f3:b7:99:6f:65:f7:37:78:e0:38:aa:b2:4d:da:0f:97: 21:f5:a8:c3:4f:59:05:f7:f3:dc:d3:6b:92:60:3a:81:05:a2: c4:23:b5:d5:fa:d6:47:1b:69:0a:c1:ee:ed:c8:be:af:25:63: ed:0f:47:e9:7e:f2:96:e3:12:7c:86:26:62:16:72:8c:68:5a: 51:0b:e4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAJqLmb6NTz8PoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YTNkYTNhMGEtMzE0MS00ZjU0LTlkMzEtOTU0MzhkNDAyYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHudZ5gJ7wgg7SAQh2aErd9pPaXz8Bg7Zm58 4jg7/aQTycFfGcn0xTmdlH5n8WZZeYPV3hfGc4rSthzRS7CmcybXkassRAsAu0XH QIpaQoCZj4e8XHKeu5SI68wHYEMMAPHxj5+db5wmVc8b/tSFiCi0E6I93KJYAnQ/ pfuUYeH7OdBhSyy1NapP6F9/qS/y4WIYmHYzGEWOOIkK+7Jnm8S4hQlBGSXX2qDP XnZVkqev3OsakgqAHC4F9ZAtwBVxScNBo85abU4dx0nJsQPwFxywdCvTFqVwnjLi +/JVtJhMLaEkxO02fvF0/MUHE0PdpPau0oe4vWtxAqaFP8bYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcrdarJyvRDZ4gte01e2+kGeZd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTMwNzZlNjEtYzc1OC0z MDc2LTg0ZDQtN2QyNTZhNWEyZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRFTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmc2uImsyAdHrnlaygk/TVVEt24/+fhrAiDWiueGpskR7h3hAMy87h0 puQw3r4rBKCIo0GLKWtaSy6B+or3OgW4i0i6C6XgBaD640mncJBNFsQn1aeQYEp7 CcWUQlAXmmKbE9jZ+1kEb3UDx9hFBw0exeaC1oGMx43S/x0dxnpACUt/oM95ah1d 0dd1boG1I6XD+yaUhB5kjQl4i/Jph+FzzeDcQ2py0b9gM2THSjE8tYeBWqD987eZ b2X3N3jgOKqyTdoPlyH1qMNPWQX389zTa5JgOoEFosQjtdX61kcbaQrB7u3Ivq8l Y+0PR+l+8pbjEnyGJmIWcoxoWlEL5GQ= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:22 2026 by rpki-client