$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da8dd4c-3273-3cf5-af75-bc121f800240.roa File: 9da8dd4c-3273-3cf5-af75-bc121f800240.roa (raw, json) Hash identifier: lqzrEBRoiBWSCODdv6SNMUOzXh6VUko8ouprpg77nxU= Subject key identifier: 45:6A:46:8A:0E:F1:40:AA:02:06:8E:94:2B:88:D9:3F:12:E8:A8:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF78E4B4AC3ED34397A1780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da8dd4c-3273-3cf5-af75-bc121f800240.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.45.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:8e:4b:4a:c3:ed:34:39:7a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=704ca76a-f4c6-4b48-be16-5127c53ee618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:4e:5c:31:8a:75:41:8c:39:57:94:1e:26: 13:8b:84:5f:f8:d8:fc:06:f1:2e:af:6d:17:05:0f: cc:15:1c:14:33:f7:bf:6b:42:87:9b:dd:c4:54:64: 6e:15:2f:c5:6b:6d:b3:78:7c:7f:0d:39:9b:58:a7: 92:a8:77:a7:66:e5:44:7e:27:33:68:69:d3:f2:52: 33:8a:93:57:11:61:88:3d:d7:25:78:8d:36:c6:f4: 92:ba:b6:be:29:bd:34:d3:cf:a5:8a:c4:a0:39:04: cd:b4:7f:f1:84:f8:00:96:2c:0a:85:17:08:af:06: 73:81:0f:e9:7e:ec:91:30:ad:13:f2:d3:5d:f4:b5: 89:23:f5:93:b9:4e:fc:c3:90:bd:21:6d:b3:1b:0a: 92:c4:d3:85:02:4f:ad:0f:30:31:d3:0a:8f:f4:55: be:de:49:84:a8:4b:63:ae:04:a6:18:87:41:42:f8: 43:24:a6:ef:b6:81:86:0c:9a:f0:46:c5:4c:70:81: 25:2a:b6:ff:4c:29:df:a0:21:5b:11:74:a7:4f:02: c4:60:03:dd:d4:9a:8a:00:f4:8c:3a:7f:7d:2f:b3: 78:22:81:47:cd:cd:32:c3:93:91:53:28:bb:d1:01: 93:98:cb:f4:df:e6:57:28:20:2c:a7:13:d6:a1:68: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:46:8A:0E:F1:40:AA:02:06:8E:94:2B:88:D9:3F:12:E8:A8:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9da8dd4c-3273-3cf5-af75-bc121f800240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.45.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:cd:ce:4a:65:0c:50:70:0f:61:54:15:2c:af:22:b8:7e:d3: 26:a1:4d:df:9f:78:eb:6b:49:98:30:76:ab:de:08:92:e3:60: a5:c5:72:64:e0:44:ca:2d:7b:b7:0d:0f:63:e7:a6:84:f3:59: 28:82:8f:3c:16:03:a7:51:11:db:7c:cb:cf:74:c0:f8:72:0d: 34:72:66:cc:d8:ca:55:07:44:8c:f3:b7:c1:87:a4:3a:b9:b9: 38:fe:19:3a:49:5a:15:8f:fb:96:5f:bd:f2:0d:75:b1:ba:c2: d1:fe:2c:fb:f6:fc:37:19:cb:f3:b1:c2:99:2e:ef:e8:ef:07: c5:f4:52:42:9b:fd:29:3c:80:95:31:4b:a1:1c:e0:ad:f1:61: bb:6b:4f:70:6a:3e:01:42:35:66:6b:64:18:34:c7:50:38:bf: 07:04:e3:5f:59:eb:6c:d9:cd:78:cd:14:4d:32:fc:31:e4:5a: c3:fe:dc:5f:fa:ad:53:cc:32:f4:5a:19:d7:98:ef:e1:99:45: d0:3b:4a:58:b9:a5:1a:4a:47:ee:07:c3:91:b5:fa:36:68:fa: 61:55:a6:68:83:2d:9a:f4:a9:33:fe:ac:b3:bb:14:b7:69:fa: 86:9f:66:e0:2f:a9:54:e1:7e:af:d4:22:0d:15:b8:ac:22:57: 08:b7:eb:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O945LSsPtNDl6F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzA0Y2E3NmEtZjRjNi00YjQ4LWJlMTYtNTEyN2M1M2VlNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpBOXDGKdUGMOVeUHiYTi4Rf+Nj8BvEur20X BQ/MFRwUM/e/a0KHm93EVGRuFS/Fa22zeHx/DTmbWKeSqHenZuVEficzaGnT8lIz ipNXEWGIPdcleI02xvSSura+Kb0008+lisSgOQTNtH/xhPgAliwKhRcIrwZzgQ/p fuyRMK0T8tNd9LWJI/WTuU78w5C9IW2zGwqSxNOFAk+tDzAx0wqP9FW+3kmEqEtj rgSmGIdBQvhDJKbvtoGGDJrwRsVMcIElKrb/TCnfoCFbEXSnTwLEYAPd1JqKAPSM On99L7N4IoFHzc0yw5ORUyi70QGTmMv03+ZXKCAspxPWoWjrFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVqRooO8UCqAgaOlCuI2T8S6Kg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRhOGRkNGMtMzI3My0z Y2Y1LWFmNzUtYmMxMjFmODAwMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnNzkplDFBwD2FUFSyvIrh+0yahTd+feOtrSZgwdqveCJLjYKXFcmTg RMote7cND2PnpoTzWSiCjzwWA6dREdt8y890wPhyDTRyZszYylUHRIzzt8GHpDq5 uTj+GTpJWhWP+5ZfvfINdbG6wtH+LPv2/DcZy/Oxwpku7+jvB8X0UkKb/Sk8gJUx S6Ec4K3xYbtrT3BqPgFCNWZrZBg0x1A4vwcE419Z62zZzXjNFE0y/DHkWsP+3F/6 rVPMMvRaGdeY7+GZRdA7Sli5pRpKR+4Hw5G1+jZo+mFVpmiDLZr0qTP+rLO7FLdp +oafZuAvqVThfq/UIg0VuKwiVwi366o= -----END CERTIFICATE-----Generated at Tue Apr 21 23:23:35 2026 by rpki-client