$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa File: 7640b249-70f3-3015-be53-a50b00076e99.roa (raw, json) Hash identifier: MC+X1aCLIvQm3vbiSCKYRSsRBIFK20t40xGAn+fHEJ0= Subject key identifier: E1:B0:68:89:99:35:BF:AD:6F:2F:A6:F1:1A:7A:44:3D:3D:5D:D4:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF78945F682E1E87535CE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.38.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:89:45:f6:82:e1:e8:75:35:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b0891299-612c-492d-a1fa-86a3b3cacbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:58:95:20:4a:09:68:f6:32:d5:08:81:95: 17:e5:5d:8f:9b:6a:cd:96:72:45:1e:c8:40:2c:d2: ff:7c:bb:06:92:25:fe:d4:01:e6:16:0c:69:f6:54: 2e:ea:a3:b4:f6:4e:39:13:83:03:c9:a7:db:8a:23: 10:28:b8:93:b4:04:da:f1:8e:3b:ab:81:70:a2:88: 52:c9:0b:11:77:b8:e4:7e:e6:ef:6e:c5:0d:a0:a6: 37:56:48:cb:79:7a:75:e9:36:1f:5a:ce:f8:7d:8a: d2:e6:f0:df:ba:d6:66:4f:af:e3:d3:af:6f:c6:36: 71:3b:4b:22:fa:3c:9e:b9:ea:a3:91:39:fb:b1:f3: 6d:91:58:02:ad:ad:e0:bd:23:27:31:39:13:ed:ef: c0:c3:9b:fe:98:42:86:62:22:41:04:32:a7:14:56: 13:76:3f:7c:a9:e9:e2:7f:3d:8f:e6:4a:5a:90:dc: 31:82:4f:20:e1:5c:f2:c3:ea:a9:5d:7e:91:7b:63: 67:da:5e:af:24:17:14:22:ec:9f:f5:e4:b3:a0:4a: e4:51:b5:95:1d:90:f3:93:ea:57:b9:55:4b:35:e7: bb:ab:08:74:d0:0d:18:dc:7c:6e:51:4a:e8:07:fc: 22:83:7c:fa:11:e1:8f:bd:cc:cb:46:2c:fe:87:04: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:68:89:99:35:BF:AD:6F:2F:A6:F1:1A:7A:44:3D:3D:5D:D4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:39:62:55:3e:32:7c:21:63:18:bc:a1:18:13:2d:bf:f4:9f: e6:87:35:11:01:62:17:b2:f0:a2:c4:6d:86:85:90:c7:80:26: fd:f0:01:a6:12:d8:b2:86:c4:70:cb:3a:27:16:8e:37:df:23: 41:94:ec:c0:dd:dd:1f:8f:85:6b:04:d2:96:c8:61:ee:8d:f0: e9:bb:ea:bf:e2:7c:93:b0:69:99:8d:01:8a:3a:07:7c:43:b1: 96:6c:73:f7:b0:5b:02:cf:1f:e8:8c:df:15:29:53:7d:a8:09: e3:98:e0:81:2b:fc:65:e5:03:54:44:54:92:c2:ea:b3:c8:1f: 17:84:69:5a:52:29:94:31:5c:7f:3e:89:60:81:a0:26:5f:1b: 07:e8:97:98:52:fd:11:b3:30:eb:70:c2:82:30:66:be:58:db: 38:67:bd:12:2e:24:26:ae:a0:da:ed:68:b8:12:26:da:b6:8d: 74:cb:23:5d:56:11:1a:d7:b0:fc:af:80:f3:ed:9a:d0:c9:4c: b5:f1:44:d5:88:8e:dc:72:d7:a7:48:8a:d9:bf:7b:5d:d9:eb: 09:85:27:00:08:ff:e0:4e:ca:83:16:d7:0a:ac:18:e9:06:21: 57:51:0f:14:f7:85:4c:57:5b:cf:90:69:bf:6f:0c:9f:91:a7: 4d:4f:87:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94lF9oLh6HU1zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjA4OTEyOTktNjEyYy00OTJkLWExZmEtODZhM2IzY2FjYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobFYlSBKCWj2MtUIgZUX5V2Pm2rNlnJFHshA LNL/fLsGkiX+1AHmFgxp9lQu6qO09k45E4MDyafbiiMQKLiTtATa8Y47q4FwoohS yQsRd7jkfubvbsUNoKY3VkjLeXp16TYfWs74fYrS5vDfutZmT6/j069vxjZxO0si +jyeueqjkTn7sfNtkVgCra3gvSMnMTkT7e/Aw5v+mEKGYiJBBDKnFFYTdj98qeni fz2P5kpakNwxgk8g4Vzyw+qpXX6Re2Nn2l6vJBcUIuyf9eSzoErkUbWVHZDzk+pX uVVLNee7qwh00A0Y3HxuUUroB/wig3z6EeGPvczLRiz+hwQpsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGwaImZNb+tby+m8Rp6RD09XdQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY0MGIyNDktNzBmMy0z MDE1LWJlNTMtYTUwYjAwMDc2ZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo5YlU+MnwhYxi8oRgTLb/0n+aHNREBYhey8KLEbYaFkMeAJv3wAaYS 2LKGxHDLOicWjjffI0GU7MDd3R+PhWsE0pbIYe6N8Om76r/ifJOwaZmNAYo6B3xD sZZsc/ewWwLPH+iM3xUpU32oCeOY4IEr/GXlA1REVJLC6rPIHxeEaVpSKZQxXH8+ iWCBoCZfGwfol5hS/RGzMOtwwoIwZr5Y2zhnvRIuJCauoNrtaLgSJtq2jXTLI11W ERrXsPyvgPPtmtDJTLXxRNWIjtxy16dIitm/e13Z6wmFJwAI/+BOyoMW1wqsGOkG IVdRDxT3hUxXW8+Qab9vDJ+Rp01Phxs= -----END CERTIFICATE-----Generated at Tue Apr 21 22:08:04 2026 by rpki-client