$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d7f867a-af5d-3037-9106-b945c512d591.roa File: 3d7f867a-af5d-3037-9106-b945c512d591.roa (raw, json) Hash identifier: X58o1W+lUG36fh4TBVvEQxUK+cIyRnxIZMIjZYSCI08= Subject key identifier: F1:54:05:55:C5:85:AC:D8:19:B2:75:27:4A:A8:89:FA:85:39:1C:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF62D9F124C161666144800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d7f867a-af5d-3037-9106-b945c512d591.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.57.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:2d:9f:12:4c:16:16:66:14:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=eee31e01-afb2-4f00-bf34-74c191f5ecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:59:49:6d:e8:83:e2:fa:09:1f:7c:a8:f0: 6a:84:98:9c:ff:02:9d:56:89:92:a1:1a:32:cd:ad: fd:1b:94:4c:7d:1c:5d:18:36:f6:60:05:b3:4e:94: 2c:b2:e4:a9:5b:b4:93:b9:35:ba:e2:6e:be:9a:c5: e3:4e:b9:03:6a:bd:53:42:d4:8e:97:9e:5e:9d:9f: 98:04:e0:9d:bd:01:b1:02:85:65:c9:71:26:d0:9a: 7f:bf:c3:20:1d:a0:a7:c1:ba:93:2f:a6:5f:41:50: ac:5f:ee:bc:33:58:4e:a9:49:b4:ec:25:d0:e3:9d: d7:52:70:e2:b5:36:90:c8:3a:7b:6b:03:04:11:0c: 9e:8c:fd:52:73:ac:26:08:34:e7:27:92:6c:6f:c9: 5e:40:51:bd:ed:2e:03:22:19:b6:e6:0b:0e:28:09: 69:fe:67:56:26:68:ef:ed:17:73:a2:bd:ac:68:d1: a2:62:57:4b:ca:ee:68:3b:e0:45:ad:3a:d1:32:52: a9:69:47:1d:e1:d9:58:35:a6:69:22:82:12:6a:90: a6:0e:66:91:d5:07:38:90:90:1b:90:13:c4:dd:95: e3:f5:f1:41:70:18:d2:17:54:92:de:6c:dc:9f:a0: 76:32:53:b8:d6:f9:3e:52:e7:36:e8:e7:7a:27:ce: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:05:55:C5:85:AC:D8:19:B2:75:27:4A:A8:89:FA:85:39:1C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d7f867a-af5d-3037-9106-b945c512d591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:34:c5:ec:f6:e0:f6:9b:69:f1:d8:f4:2d:77:96:d0:48:72: ea:fd:a9:6d:0c:18:9b:74:de:d1:f0:7f:a3:3a:ba:97:eb:fa: 62:98:47:25:11:f8:88:c4:e4:1a:4e:7e:a1:de:92:a4:9e:de: fb:ee:fd:bf:a1:14:ae:e6:3f:c7:0d:0a:1e:07:2e:f7:62:8e: 93:a9:c0:88:de:a9:e1:ec:02:03:ea:8c:2a:ef:7b:d1:32:b7: bb:d5:5f:21:3f:3a:70:d3:29:0a:44:80:33:c3:aa:82:aa:ae: 6b:0c:f3:2d:bf:41:13:dc:1f:44:7b:3e:43:11:99:27:fe:e7: 54:41:05:6f:80:a9:b8:bc:83:21:9a:c9:63:dd:72:e0:3a:45: 5c:9f:7c:5d:66:10:51:90:7c:2c:53:88:b5:50:f8:64:43:e0: 65:cd:57:8d:8f:0e:ff:98:39:d8:5e:d8:98:7f:b8:f7:12:91: bd:76:09:5d:b5:9d:1b:83:3b:cf:0d:49:30:4a:85:03:d1:0b: 6f:12:4e:c9:29:04:42:26:a6:6e:ea:e6:ee:e3:6a:0a:04:5c: 44:a7:25:c7:2a:4b:13:45:15:47:6d:90:bf:ea:5f:0f:e7:e3: c7:b1:e1:db:7c:e8:99:c9:29:e3:4b:fb:cb:8b:b7:4f:fc:c8: 3a:a7:c3:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9i2fEkwWFmYUSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWVlMzFlMDEtYWZiMi00ZjAwLWJmMzQtNzRjMTkxZjVlY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTtZSW3og+L6CR98qPBqhJic/wKdVomSoRoy za39G5RMfRxdGDb2YAWzTpQssuSpW7STuTW64m6+msXjTrkDar1TQtSOl55enZ+Y BOCdvQGxAoVlyXEm0Jp/v8MgHaCnwbqTL6ZfQVCsX+68M1hOqUm07CXQ453XUnDi tTaQyDp7awMEEQyejP1Sc6wmCDTnJ5Jsb8leQFG97S4DIhm25gsOKAlp/mdWJmjv 7Rdzor2saNGiYldLyu5oO+BFrTrRMlKpaUcd4dlYNaZpIoISapCmDmaR1Qc4kJAb kBPE3ZXj9fFBcBjSF1SS3mzcn6B2MlO41vk+Uuc26Od6J85qTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFUBVXFhazYGbJ1J0qoifqFORwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q3Zjg2N2EtYWY1ZC0z MDM3LTkxMDYtYjk0NWM1MTJkNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg0xez24PabafHY9C13ltBIcur9qW0MGJt03tHwf6M6upfr+mKYRyUR +IjE5BpOfqHekqSe3vvu/b+hFK7mP8cNCh4HLvdijpOpwIjeqeHsAgPqjCrve9Ey t7vVXyE/OnDTKQpEgDPDqoKqrmsM8y2/QRPcH0R7PkMRmSf+51RBBW+Aqbi8gyGa yWPdcuA6RVyffF1mEFGQfCxTiLVQ+GRD4GXNV42PDv+YOdhe2Jh/uPcSkb12CV21 nRuDO88NSTBKhQPRC28STskpBEImpm7q5u7jagoEXESnJccqSxNFFUdtkL/qXw/n 48ex4dt86JnJKeNL+8uLt0/8yDqnwzM= -----END CERTIFICATE-----Generated at Tue Apr 21 19:32:53 2026 by rpki-client