$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9acc27f4-0492-3350-a5c2-64d949e795de.roa File: 9acc27f4-0492-3350-a5c2-64d949e795de.roa (raw, json) Hash identifier: g9WpoajjnF9nJUgRnqxSfDXYCGq2xZcMWpFr3ZENtDA= Subject key identifier: 79:AB:2F:32:F9:0A:29:EE:82:B6:76:98:61:8B:60:95:EA:B4:69:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF78E57C20CB75DA6A0C000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9acc27f4-0492-3350-a5c2-64d949e795de.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.45.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:8e:57:c2:0c:b7:5d:a6:a0:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3f213f7e-07a4-427b-a017-36f656fbe43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:3b:19:12:34:f4:1d:da:74:3c:56:1c:5d: ec:88:b9:3c:37:4e:ef:6e:cd:b6:34:53:dd:51:9f: 1a:a3:9a:22:63:df:19:11:9f:35:8a:5b:09:6f:28: f4:ef:49:35:53:fd:ea:a0:68:c3:e5:1c:7a:55:17: 1b:af:ea:64:11:d4:3c:0f:85:ef:a7:ed:81:0e:13: b5:8a:0d:38:61:30:c1:da:81:58:04:cb:69:48:7b: 51:3c:11:ec:56:8a:3b:c0:8b:27:0a:f5:d2:e4:0e: 58:81:b9:f5:3e:f9:d7:e3:44:26:f0:5e:4a:ff:a2: 17:68:18:44:a3:d8:4d:36:3f:d6:82:62:a6:93:05: 53:12:c3:88:d9:fc:c0:dc:c8:d9:74:b6:4f:cf:4b: 2e:31:00:f2:5f:53:29:17:90:b6:c2:dd:90:d0:c7: 43:27:d7:30:88:9a:40:7e:ed:c2:86:bd:c9:97:e8: 16:77:d6:b7:d6:6c:e7:63:f5:ac:e2:0d:dd:cd:26: cb:eb:e2:cb:41:20:3d:93:fe:92:35:c4:16:7b:59: eb:00:ff:18:e6:b7:bd:e2:98:04:8a:05:0d:a5:72: 09:16:37:55:b9:af:4e:7c:3f:ef:e9:9f:61:f2:66: ce:3e:6f:d8:dd:e2:53:f9:93:a8:b6:6f:01:ba:20: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AB:2F:32:F9:0A:29:EE:82:B6:76:98:61:8B:60:95:EA:B4:69:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9acc27f4-0492-3350-a5c2-64d949e795de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:53:ba:6f:18:72:2b:88:e3:49:54:9f:89:7d:b2:40:12:46: 26:46:80:c6:81:86:62:54:12:7c:7b:78:09:09:d5:5c:50:de: 21:4b:74:e0:87:34:e3:2b:59:fd:25:e5:28:ac:5b:eb:51:48: 95:8b:d4:87:87:4f:b3:d2:a7:2a:75:1d:10:f7:3c:8e:28:31: a3:1c:81:78:15:a7:cb:92:52:be:cf:e4:08:cc:0f:b1:99:0f: ff:8e:06:9e:ab:f8:18:45:c2:66:c8:12:a8:87:06:ec:b3:a9: 1e:98:10:8c:b8:1f:18:82:35:4e:b6:6a:56:0f:e8:c1:57:77: 5a:1a:40:51:9e:87:59:e2:9c:a8:a6:05:2f:8a:01:3a:07:92: 2b:14:2a:b9:1d:45:ca:b5:78:b8:ae:d5:69:0d:cc:67:27:c6: 17:a7:6a:9c:a1:26:de:81:92:20:7b:82:e1:3b:71:3f:28:5d: 5f:5d:06:68:73:d5:66:94:18:5b:c1:3e:45:02:d6:70:cf:5d: 2b:39:fb:5a:c3:1d:dc:96:1d:ec:81:d1:c4:9f:a0:0a:f1:ca: a0:87:7a:5c:01:f1:9d:54:cb:61:af:28:c2:13:b1:fc:0e:3b: 28:f3:84:91:24:17:a8:ff:f6:70:04:4e:2a:34:be:4e:1a:61: 45:0e:cb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O945Xwgy3XaagwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk M2YyMTNmN2UtMDdhNC00MjdiLWEwMTctMzZmNjU2ZmJlNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uE7GRI09B3adDxWHF3siLk8N07vbs22NFPd UZ8ao5oiY98ZEZ81ilsJbyj070k1U/3qoGjD5Rx6VRcbr+pkEdQ8D4Xvp+2BDhO1 ig04YTDB2oFYBMtpSHtRPBHsVoo7wIsnCvXS5A5Ygbn1PvnX40Qm8F5K/6IXaBhE o9hNNj/WgmKmkwVTEsOI2fzA3MjZdLZPz0suMQDyX1MpF5C2wt2Q0MdDJ9cwiJpA fu3Chr3Jl+gWd9a31mznY/Ws4g3dzSbL6+LLQSA9k/6SNcQWe1nrAP8Y5re94pgE igUNpXIJFjdVua9OfD/v6Z9h8mbOPm/Y3eJT+ZOotm8BuiB85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmrLzL5CinugrZ2mGGLYJXqtGljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFjYzI3ZjQtMDQ5Mi0z MzUwLWE1YzItNjRkOTQ5ZTc5NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANTum8YciuI40lUn4l9skASRiZGgMaBhmJUEnx7eAkJ1VxQ3iFLdOCH NOMrWf0l5SisW+tRSJWL1IeHT7PSpyp1HRD3PI4oMaMcgXgVp8uSUr7P5AjMD7GZ D/+OBp6r+BhFwmbIEqiHBuyzqR6YEIy4HxiCNU62alYP6MFXd1oaQFGeh1ninKim BS+KAToHkisUKrkdRcq1eLiu1WkNzGcnxhenapyhJt6BkiB7guE7cT8oXV9dBmhz 1WaUGFvBPkUC1nDPXSs5+1rDHdyWHeyB0cSfoArxyqCHelwB8Z1Uy2GvKMITsfwO OyjzhJEkF6j/9nAETio0vk4aYUUOy9U= -----END CERTIFICATE-----Generated at Tue Apr 21 23:05:06 2026 by rpki-client