$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa File: 34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa (raw, json) Hash identifier: tqIX+jMHfgZFdnRhHndRArjc90Ac8kCOqcf5CJD/7Cg= Subject key identifier: AF:E8:20:DE:34:5B:78:6B:8A:CD:F1:DD:71:30:90:F1:C5:52:CE:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79604E3B86BEAB80FF000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.58.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:96:04:e3:b8:6b:ea:b8:0f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b0bf8922-a001-4a64-a9bd-0f1eb2725435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:cd:82:b0:40:09:ed:0d:c7:4d:f6:a0:a3: 3b:ae:da:c2:2f:be:1f:e1:aa:f0:d1:fd:81:ab:35: 22:a3:ae:0d:10:cc:f1:f1:fa:a3:83:65:82:ae:c7: 59:92:a4:26:ba:2a:a7:93:db:12:a6:cf:bf:68:74: 13:12:09:19:75:bc:f1:af:f9:2d:11:bd:63:92:2c: 61:a9:7b:b1:32:80:8b:d4:ae:96:21:a4:f5:bc:83: 47:49:ec:5b:0b:a3:1f:da:37:76:69:a2:8a:a2:6e: 4e:ad:6e:44:ae:76:24:1b:67:4b:7f:92:97:97:49: 89:5a:84:8a:16:cb:dc:b5:05:0b:c8:1c:ff:51:6f: 9c:e3:b3:40:11:d2:4d:39:83:79:a6:98:a4:8c:da: 08:e5:e3:c6:cb:33:6a:ef:ad:6e:7f:fd:0e:af:d2: 57:b1:34:81:f7:68:34:90:51:23:fc:50:6a:50:40: d1:66:ee:e5:72:5e:25:77:62:3f:91:25:da:e2:05: 7d:fd:22:9c:8f:47:bb:72:b6:86:19:5d:a3:dc:5d: 0e:a9:17:03:12:81:91:4f:fd:58:2e:fd:a0:fa:98: 8a:f5:72:4d:68:dc:f1:48:42:f5:68:ae:fb:66:7e: b0:19:ca:6d:df:ca:41:cf:e3:7c:41:53:4c:ed:0a: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:20:DE:34:5B:78:6B:8A:CD:F1:DD:71:30:90:F1:C5:52:CE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34d1c796-f3d0-31a2-8d08-d565d84e62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.58.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b2:49:b6:97:fb:a1:88:2d:35:60:36:ab:30:ce:c0:ca:d9: 8c:db:59:00:6d:ba:a3:ac:7b:20:25:ec:60:1e:61:49:eb:9c: 81:e2:7e:4f:fd:50:b8:cd:38:f0:e5:7c:12:e1:62:ae:92:6b: 6a:55:f3:11:0f:d6:9e:0d:c1:6b:a5:f4:b1:fd:80:c8:39:43: 31:b9:a4:ee:22:8d:22:9e:6d:55:80:fa:b5:85:11:5f:8d:27: 8e:b5:5b:32:ba:29:48:50:47:ae:01:4d:ae:03:d6:35:62:34: eb:7b:2c:df:ca:c7:f7:cd:1f:6f:05:62:39:f1:bc:ec:c1:6e: 69:f8:af:52:78:0b:e6:6a:6f:13:14:26:de:9c:ac:56:77:d0: 21:07:7c:78:41:ce:ec:7e:f5:af:f1:e5:b2:68:cf:50:8f:2a: 56:6a:db:0f:2e:6c:a1:21:76:75:70:9b:62:15:3e:0f:82:5c: ba:8c:b6:ab:89:86:d9:01:19:c1:82:94:81:af:c4:89:db:9f: e5:a6:ec:f4:89:f2:57:18:04:e2:3c:54:bb:48:f4:40:b7:a4: ca:9f:6a:c5:36:44:f1:cb:40:c7:d4:3f:ba:0a:1f:31:f1:16: 29:b7:ae:ed:f7:4e:3f:b4:be:ce:ad:f5:0c:eb:84:e6:6a:bb: ff:d6:d3:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O95YE47hr6rgP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjBiZjg5MjItYTAwMS00YTY0LWE5YmQtMGYxZWIyNzI1NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka7NgrBACe0Nx032oKM7rtrCL74f4arw0f2B qzUio64NEMzx8fqjg2WCrsdZkqQmuiqnk9sSps+/aHQTEgkZdbzxr/ktEb1jkixh qXuxMoCL1K6WIaT1vINHSexbC6Mf2jd2aaKKom5OrW5ErnYkG2dLf5KXl0mJWoSK FsvctQULyBz/UW+c47NAEdJNOYN5ppikjNoI5ePGyzNq761uf/0Or9JXsTSB92g0 kFEj/FBqUEDRZu7lcl4ld2I/kSXa4gV9/SKcj0e7craGGV2j3F0OqRcDEoGRT/1Y Lv2g+piK9XJNaNzxSEL1aK77Zn6wGcpt38pBz+N8QVNM7QrKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/oIN40W3hris3x3XEwkPHFUs57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRkMWM3OTYtZjNkMC0z MWEyLThkMDgtZDU2NWQ4NGU2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqySbaX+6GILTVgNqswzsDK2YzbWQBtuqOseyAl7GAeYUnrnIHifk/9 ULjNOPDlfBLhYq6Sa2pV8xEP1p4NwWul9LH9gMg5QzG5pO4ijSKebVWA+rWFEV+N J461WzK6KUhQR64BTa4D1jViNOt7LN/Kx/fNH28FYjnxvOzBbmn4r1J4C+ZqbxMU Jt6crFZ30CEHfHhBzux+9a/x5bJoz1CPKlZq2w8ubKEhdnVwm2IVPg+CXLqMtquJ htkBGcGClIGvxInbn+Wm7PSJ8lcYBOI8VLtI9EC3pMqfasU2RPHLQMfUP7oKHzHx Fim3ru33Tj+0vs6t9QzrhOZqu//W03k= -----END CERTIFICATE-----Generated at Tue Apr 21 19:32:11 2026 by rpki-client