$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222a549a-4de9-3d97-ae58-12382b768285.roa File: 222a549a-4de9-3d97-ae58-12382b768285.roa (raw, json) Hash identifier: lzvDE6U8dHmYJFLUmmyRDBM/eUNrURntu6LGvTMpMXE= Subject key identifier: 12:13:77:83:F8:8E:3A:CE:38:5C:D2:83:CA:49:6D:9B:73:81:AC:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF796D36D721F86AC138200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222a549a-4de9-3d97-ae58-12382b768285.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.59.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:96:d3:6d:72:1f:86:ac:13:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d95a5a1d-09be-49d8-8676-95f181dd72fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f0:c5:ac:41:47:40:35:81:43:02:83:da:05: 43:78:88:dc:6f:5b:3e:99:9a:9d:69:86:b5:17:ee: ca:e5:ee:5f:fe:9d:77:50:8b:d1:db:90:f4:11:f8: ea:bd:3f:6d:1c:c7:1b:6e:bc:e3:09:4b:5f:0a:b6: 3c:a6:03:71:06:8a:b7:ab:7e:4c:73:0f:7f:18:ef: 52:47:f1:c7:08:cd:90:d7:7f:b7:bf:c0:e5:bc:49: df:24:85:0a:f1:f4:f6:f4:34:7d:94:15:5f:84:a5: f6:7b:6a:14:5c:3b:5d:d9:57:a3:dc:e3:76:78:76: d2:95:5e:2b:7a:b4:14:46:d6:aa:26:92:36:8d:b5: e2:ca:2b:b9:45:49:df:f3:a6:4c:ba:8b:77:4e:62: 0e:19:fe:60:59:86:c3:8c:50:6c:46:c3:8a:59:76: e9:1d:77:5b:20:04:bf:c4:8f:c2:97:b2:60:fe:74: 7c:eb:0d:26:c4:66:a2:8c:93:3a:6b:3a:1e:49:7d: 92:51:1c:be:6c:a9:55:d3:4e:18:ac:90:3c:90:53: c9:46:5f:e9:a1:ee:16:ad:cc:28:f4:1f:71:95:de: 24:e2:88:f6:e9:da:d5:46:40:95:1b:09:e0:d3:07: db:5f:10:9c:c2:57:9a:d9:48:97:aa:af:ee:a9:5c: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:77:83:F8:8E:3A:CE:38:5C:D2:83:CA:49:6D:9B:73:81:AC:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222a549a-4de9-3d97-ae58-12382b768285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4e:8f:63:de:40:8e:58:9f:e2:c4:35:82:a5:7b:c5:16:f1: 5a:4c:f4:ed:ad:57:e1:e3:22:1b:e5:9c:11:4d:ed:ec:24:36: c1:15:32:30:9c:8f:a3:dc:ee:70:05:ae:c2:39:78:4f:b5:71: af:d8:df:1e:32:df:92:9e:b3:48:c0:c5:4a:79:1e:22:74:ee: 04:c8:d7:b1:ce:09:36:cb:d3:85:81:5a:0e:74:17:32:1c:9d: 0a:f5:81:3d:a0:93:bb:b3:ac:39:2d:55:25:d5:b4:33:4e:47: f6:b0:d4:84:ee:ef:cf:57:f5:84:78:21:96:41:f5:e2:0c:76: 44:27:a9:4b:93:a9:32:72:44:73:77:4c:bf:fe:09:dc:69:4a: 5a:61:88:9a:a3:de:11:fe:4f:62:20:62:cf:ff:14:a6:84:b2: 1e:47:35:1d:f4:64:53:46:da:a8:23:9a:56:74:7d:c1:1c:e6: 96:9f:43:83:86:2b:68:81:2d:c0:88:1c:b4:f4:89:df:34:1a: 3a:8a:b7:01:70:8d:34:28:ad:31:f2:d6:57:af:c7:6f:7d:b2: 6c:4a:c9:58:e2:0f:9a:7b:36:31:cb:ee:c6:8f:e9:0e:16:7f: 3f:5c:48:c4:4f:d2:45:71:93:e4:78:45:95:09:0b:c4:d5:a9: ac:29:ef:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O95bTbXIfhqwTggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDk1YTVhMWQtMDliZS00OWQ4LTg2NzYtOTVmMTgxZGQ3MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vDFrEFHQDWBQwKD2gVDeIjcb1s+mZqdaYa1 F+7K5e5f/p13UIvR25D0EfjqvT9tHMcbbrzjCUtfCrY8pgNxBoq3q35Mcw9/GO9S R/HHCM2Q13+3v8DlvEnfJIUK8fT29DR9lBVfhKX2e2oUXDtd2Vej3ON2eHbSlV4r erQURtaqJpI2jbXiyiu5RUnf86ZMuot3TmIOGf5gWYbDjFBsRsOKWXbpHXdbIAS/ xI/Cl7Jg/nR86w0mxGaijJM6azoeSX2SURy+bKlV004YrJA8kFPJRl/poe4Wrcwo 9B9xld4k4oj26drVRkCVGwng0wfbXxCcwlea2UiXqq/uqVyMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBITd4P4jjrOOFzSg8pJbZtzgazbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIyYTU0OWEtNGRlOS0z ZDk3LWFlNTgtMTIzODJiNzY4Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVOj2PeQI5Yn+LENYKle8UW8VpM9O2tV+HjIhvlnBFN7ewkNsEVMjCc j6Pc7nAFrsI5eE+1ca/Y3x4y35Kes0jAxUp5HiJ07gTI17HOCTbL04WBWg50FzIc nQr1gT2gk7uzrDktVSXVtDNOR/aw1ITu789X9YR4IZZB9eIMdkQnqUuTqTJyRHN3 TL/+CdxpSlphiJqj3hH+T2IgYs//FKaEsh5HNR30ZFNG2qgjmlZ0fcEc5pafQ4OG K2iBLcCIHLT0id80GjqKtwFwjTQorTHy1levx299smxKyVjiD5p7NjHL7saP6Q4W fz9cSMRP0kVxk+R4RZUJC8TVqawp754= -----END CERTIFICATE-----Generated at Tue Apr 21 19:33:14 2026 by rpki-client