$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa File: cb124f99-25af-3ef5-a396-091c35660f3f.roa (raw, json) Hash identifier: hS+aU2rIfnYSKhZq2Dpn8HR6u+0WOQ1u3GRFTITSaZI= Subject key identifier: B9:5D:E9:65:F1:86:6B:98:83:01:5D:1A:52:0C:68:D9:C4:87:44:5D Certificate issuer: /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Certificate serial: 010D0C9F4328584D789FCB9C46B628F7A6C6BA80 Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa Signing time: Sat 11 Apr 2026 13:00:31 +0000 ROA not before: Sat 11 Apr 2026 13:00:31 +0000 ROA not after: Fri 10 Jul 2026 13:00:31 +0000 asID: 5650 IP address blocks: 68.232.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:78:9f:cb:9c:46:b6:28:f7:a6:c6:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b Validity Not Before: Apr 11 13:00:31 2026 GMT Not After : Jul 10 13:00:31 2026 GMT Subject: CN=7f150e34-f925-4e46-a82b-034bf901d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:be:c2:8f:ea:1a:44:7c:2b:f7:b0:64:3c: 45:0f:75:bb:94:98:16:ab:7d:d3:7a:43:b5:4f:6a: cd:69:00:66:05:11:6a:78:2d:13:60:9e:ee:60:b5: cb:27:c3:8a:90:91:5d:7e:9c:f8:53:74:fc:13:ec: 2f:bb:00:1f:56:c3:a8:47:d7:03:a3:0a:c8:6a:5f: 91:ab:c0:a1:f4:85:1e:f4:c6:60:f5:b1:4d:22:9d: e7:43:72:25:0c:d8:bc:54:25:38:89:8f:92:28:0b: 77:44:05:93:d9:87:58:de:af:9d:e8:4c:a6:7a:49: 52:9f:b2:06:60:4e:0f:43:a3:c5:a4:80:a0:04:b9: ec:26:ab:4e:e6:5f:c8:d2:65:8e:81:08:ca:de:43: 9c:73:19:fd:ce:14:2d:20:10:b5:05:1d:1a:d8:ed: 81:e1:68:80:8d:3a:22:03:65:bd:fb:8d:09:3d:8f: 08:91:07:9e:79:c0:31:2c:64:60:4d:3c:3e:83:f2: 49:49:6f:1a:99:f1:89:98:ac:2e:48:b7:6b:f4:fc: bb:a3:fd:7a:da:25:76:a3:41:12:74:87:18:17:7e: 04:7d:aa:97:b5:56:8b:b5:fe:d3:51:84:da:46:c8: 0f:dd:ad:72:0b:a3:ed:d8:11:36:b6:f2:85:7f:b6: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5D:E9:65:F1:86:6B:98:83:01:5D:1A:52:0C:68:D9:C4:87:44:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/cb124f99-25af-3ef5-a396-091c35660f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl X509v3 Authority Key Identifier: keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer sbgp-ipAddrBlock: critical IPv4: 68.232.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9c:00:2c:80:b1:95:cb:db:4c:dc:be:37:0e:58:bf:3f:36: ff:09:9d:d5:3b:7b:a0:40:9e:07:aa:5c:a6:75:7f:15:bf:b1: f4:ea:d7:8c:9a:40:5a:2f:08:40:68:4a:b9:58:23:2a:66:c2: d8:73:f2:72:59:e0:74:d9:97:ff:27:f7:1c:90:b5:cb:b5:30: 36:fc:3a:6a:fa:a8:cb:cc:ce:ad:a3:07:fe:62:39:99:ac:2d: a6:a0:86:9c:35:44:62:26:c7:bc:b1:b9:ac:cf:c1:2e:c3:06: 87:9e:54:39:c2:9d:a3:ad:af:79:f9:51:c1:e6:7f:0d:07:64: fb:a7:75:30:ad:f6:7b:79:00:6d:a2:08:ef:77:02:7d:f7:e2: 9e:2a:48:14:ca:6a:ff:75:c7:34:70:b4:15:fe:a1:4f:ad:5e: 11:ed:df:91:d3:79:c4:d9:bc:b1:88:d0:bd:90:b9:e0:a3:42: a5:fa:2b:d3:d9:40:cb:8a:c9:9a:43:8e:99:da:96:34:73:8a: 81:f6:50:4f:a7:91:74:e3:f4:4e:a4:34:b3:80:ac:52:db:00: 61:bb:a6:5b:4b:22:f2:4c:d7:2b:e9:86:a6:f2:ea:94:84:ee: 0f:60:e6:ed:08:50:76:a5:0f:f7:13:c8:83:45:67:9e:9f:ac: e2:4f:6f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n8ucRrYo96bGuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI3ODA0NWYtODIxZi00Y2U0LTk1ZTktYzA2ZGVjOGEx YTdiMB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk N2YxNTBlMzQtZjkyNS00ZTQ2LWE4MmItMDM0YmY5MDFkMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGu+wo/qGkR8K/ewZDxFD3W7lJgWq33TekO1 T2rNaQBmBRFqeC0TYJ7uYLXLJ8OKkJFdfpz4U3T8E+wvuwAfVsOoR9cDowrIal+R q8Ch9IUe9MZg9bFNIp3nQ3IlDNi8VCU4iY+SKAt3RAWT2YdY3q+d6EymeklSn7IG YE4PQ6PFpICgBLnsJqtO5l/I0mWOgQjK3kOccxn9zhQtIBC1BR0a2O2B4WiAjToi A2W9+40JPY8IkQeeecAxLGRgTTw+g/JJSW8amfGJmKwuSLdr9Py7o/162iV2o0ES dIcYF34EfaqXtVaLtf7TUYTaRsgP3a1yC6Pt2BE2tvKFf7a+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLld6WXxhmuYgwFdGlIMaNnEh0RdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4 MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZkZWM4YTFhN2IvY2IxMjRmOTktMjVhZi0z ZWY1LWEzOTYtMDkxYzM1NjYwZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGI3ODA0NWYtODIxZi00Y2U0LTk1 ZTktYzA2ZGVjOGExYTdiLzRiNzgwNDVmLTgyMWYtNGNlNC05NWU5LWMwNmRlYzhh MWE3Yi5jcmwwHwYDVR0jBBgwFoAUMEpb9U4yCX8ZpybnCWh/reNjqhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80Yjc4MDQ1Zi04MjFmLTRjZTQtOTVlOS1jMDZk ZWM4YTFhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6cACyAsZXL20zcvjcOWL8/Nv8JndU7e6BAngeqXKZ1fxW/sfTq14ya QFovCEBoSrlYIypmwthz8nJZ4HTZl/8n9xyQtcu1MDb8Omr6qMvMzq2jB/5iOZms Laaghpw1RGImx7yxuazPwS7DBoeeVDnCnaOtr3n5UcHmfw0HZPundTCt9nt5AG2i CO93An334p4qSBTKav91xzRwtBX+oU+tXhHt35HTecTZvLGI0L2QueCjQqX6K9PZ QMuKyZpDjpnaljRzioH2UE+nkXTj9E6kNLOArFLbAGG7pltLIvJM1yvphqby6pSE 7g9g5u0IUHalD/cTyINFZ56frOJPb/8= -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:22 2026 by rpki-client