$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa File: 89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa (raw, json) Hash identifier: Ko5sZ2d1zrQmytO2HqTwhnuSACzrDmLcKRcc/8vj0XE= Subject key identifier: 1F:F2:02:59:86:93:DC:9E:70:5F:D1:7E:C5:45:95:03:BD:A7:93:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF747C1E2D93F5C7E14CE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 69.136.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:47:c1:e2:d9:3f:5c:7e:14:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=315a7e98-87b4-49a0-bb02-b1f2e7425dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:2f:b4:bd:bf:2c:e8:58:0a:e8:1f:47:e8: 22:fc:29:41:0e:97:14:21:f0:f2:46:3a:83:5e:d6: c3:29:1c:21:d6:68:e3:0e:ba:e9:8f:7f:e5:17:13: c2:35:b8:42:32:1c:29:5a:a8:2e:44:79:18:01:49: 6e:93:34:8d:46:3f:00:9f:c7:da:1d:9e:29:e5:cb: 97:8a:ca:75:72:16:61:b8:e7:bd:6e:eb:1f:db:1f: 92:ea:cd:55:6b:95:6f:f2:64:1e:d6:5a:41:ec:3a: 5c:7e:9a:c6:07:06:4c:22:53:dd:be:c4:59:82:ab: bf:05:20:ed:d6:80:73:cd:c3:10:5e:01:5c:f7:79: f4:95:a7:93:c3:54:57:5b:80:00:f5:c4:59:37:1c: 24:05:a5:9f:f9:96:6c:2c:33:69:b1:04:a4:22:f9: d2:2e:a1:20:91:da:1b:7f:7c:93:3f:5d:6b:33:67: 2b:65:2d:9b:9a:31:26:20:8a:4f:cb:f9:ce:a7:77: 51:69:25:c3:fb:93:2d:eb:2f:52:85:32:44:d1:2f: a1:3d:1f:cc:d6:85:f8:89:43:fe:e4:88:5c:25:ec: 05:00:5c:b4:00:97:f0:86:14:4c:1f:d6:2e:71:40: f8:f3:0b:cd:9f:6e:2b:17:4d:80:b4:fd:3a:4b:74: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F2:02:59:86:93:DC:9E:70:5F:D1:7E:C5:45:95:03:BD:A7:93:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c0533e-12d0-3298-aa8c-3fd57e0d2b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.136.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5c:72:1e:bf:19:f2:c0:69:c1:6c:5f:48:a9:0b:a6:78:6b: b8:47:c0:c4:26:38:71:97:e4:6d:fa:84:25:85:62:be:a6:35: 3d:94:98:07:4a:17:3b:89:dc:64:8b:54:c6:7e:15:e3:6e:8f: 61:4c:c6:82:2b:71:c4:13:19:9c:33:40:c0:1b:32:47:85:b0: c1:3b:1a:12:17:b6:8b:a1:8f:74:79:9b:20:e4:49:a1:f3:b6: c5:32:73:40:4b:0d:26:82:29:d6:ef:8b:94:25:c7:7f:99:a4: ac:5f:1d:ac:57:b1:8a:f3:35:a7:1f:e5:be:f6:29:4f:a9:4b: ed:d9:21:dd:f8:3e:b3:f2:d4:bb:5e:c7:d7:fe:59:7e:4f:06: 3b:e3:71:5e:88:86:8b:bf:58:bb:0f:9e:b1:4a:23:53:d6:de: 37:48:35:e9:fd:4c:b4:13:46:5b:be:26:ef:15:2e:a8:f3:7d: 3c:4f:c2:09:dd:e8:67:3f:1e:72:51:5a:79:85:13:19:52:54: 42:cc:18:bc:73:e9:fd:0d:2a:34:ec:c7:f6:44:58:cd:2a:17: 0c:0e:0a:08:fc:bc:a0:4d:9e:93:35:54:14:eb:3c:3e:e7:be: 40:29:63:e3:6c:e0:6b:8c:e4:b8:df:f2:0b:a3:fd:6e:7c:58: 6e:ce:ba:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O90fB4tk/XH4UzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MzE1YTdlOTgtODdiNC00OWEwLWJiMDItYjFmMmU3NDI1ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyAvtL2/LOhYCugfR+gi/ClBDpcUIfDyRjqD XtbDKRwh1mjjDrrpj3/lFxPCNbhCMhwpWqguRHkYAUlukzSNRj8An8faHZ4p5cuX isp1chZhuOe9busf2x+S6s1Va5Vv8mQe1lpB7DpcfprGBwZMIlPdvsRZgqu/BSDt 1oBzzcMQXgFc93n0laeTw1RXW4AA9cRZNxwkBaWf+ZZsLDNpsQSkIvnSLqEgkdob f3yTP11rM2crZS2bmjEmIIpPy/nOp3dRaSXD+5Mt6y9ShTJE0S+hPR/M1oX4iUP+ 5IhcJewFAFy0AJfwhhRMH9YucUD48wvNn24rF02AtP06S3RolQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/yAlmGk9yecF/RfsVFlQO9p5N3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODljMDUzM2UtMTJkMC0z Mjk4LWFhOGMtM2ZkNTdlMGQyYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRYhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5cch6/GfLAacFsX0ipC6Z4a7hHwMQmOHGX5G36hCWFYr6mNT2UmAdK FzuJ3GSLVMZ+FeNuj2FMxoIrccQTGZwzQMAbMkeFsME7GhIXtouhj3R5myDkSaHz tsUyc0BLDSaCKdbvi5Qlx3+ZpKxfHaxXsYrzNacf5b72KU+pS+3ZId34PrPy1Lte x9f+WX5PBjvjcV6Ihou/WLsPnrFKI1PW3jdINen9TLQTRlu+Ju8VLqjzfTxPwgnd 6Gc/HnJRWnmFExlSVELMGLxz6f0NKjTsx/ZEWM0qFwwOCgj8vKBNnpM1VBTrPD7n vkApY+Ns4GuM5Ljf8guj/W58WG7OuuQ= -----END CERTIFICATE-----Generated at Tue Apr 21 20:27:11 2026 by rpki-client