$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2950323-278a-3e72-a780-5daf7854149d.roa File: a2950323-278a-3e72-a780-5daf7854149d.roa (raw, json) Hash identifier: fBBZC+rWZ/Su3Z+N5J6odPSoxwp09x/akrL0EHX6ZP4= Subject key identifier: 34:00:29:9F:DB:7D:E6:FC:09:1F:AB:4B:B2:22:7E:11:B0:77:CC:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6246B17F37B34195A1600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2950323-278a-3e72-a780-5daf7854149d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.44.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:24:6b:17:f3:7b:34:19:5a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a8252197-94da-4f6d-997a-809d2082db61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:9e:93:64:1f:db:c7:e6:92:61:77:ea:ec: 51:99:f3:c0:c3:26:24:eb:40:4c:da:cd:0e:72:2b: e0:c4:02:64:f9:67:bf:ea:f3:47:0b:4a:dd:6c:22: d6:bb:65:a9:67:b9:88:19:5b:d4:dc:6d:93:dd:22: e6:7d:c2:7d:bb:c1:c8:e4:e6:7b:f1:47:47:f6:c0: 76:ba:8d:ac:f7:8e:c8:f0:07:1d:e4:fa:6a:2b:7d: 2e:10:02:cf:d5:84:1d:f2:f1:b2:3a:09:14:5b:79: 34:1d:58:98:3e:2b:77:88:f2:63:73:38:65:08:85: ae:c5:ed:ab:9a:0b:f6:2c:eb:06:42:9a:93:95:f4: e6:2b:d5:b0:f5:cd:6c:2e:c0:b3:14:9c:67:af:96: 42:e2:14:04:f4:80:4b:0a:5a:a2:5b:ab:65:fc:89: 1a:f8:f4:6a:4c:ae:66:eb:87:93:2b:8d:58:19:95: bf:39:ad:19:ee:e3:48:02:cd:3f:a6:19:94:e1:02: 9a:34:91:ed:ce:35:bd:bd:6e:24:31:5b:87:25:90: bd:42:51:36:48:38:36:80:14:b8:d7:71:ee:65:78: de:f6:41:1f:17:2c:d3:60:d4:7c:fd:90:87:28:51: 98:97:92:96:9a:9c:23:a9:cb:82:6d:e1:48:28:1b: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:29:9F:DB:7D:E6:FC:09:1F:AB:4B:B2:22:7E:11:B0:77:CC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2950323-278a-3e72-a780-5daf7854149d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a2:4f:cb:52:96:31:e6:b1:bb:07:bf:28:68:4d:0c:69:14: 04:94:d4:5a:63:c0:a6:64:b9:36:aa:b5:91:50:5e:db:c2:dd: 75:c6:ca:01:e6:a9:de:16:4a:67:72:31:de:0b:87:c0:23:f8: 8f:a0:ea:8e:0c:ff:56:15:ad:1b:37:c7:5f:43:d7:c8:8b:57: 89:01:2c:95:d4:93:89:4e:66:31:de:47:92:12:27:a2:55:18: fe:be:48:fe:c5:5b:2e:7d:78:da:05:bd:43:9f:49:8b:e4:14: a3:0f:13:55:43:e9:60:b6:9f:6c:76:cf:bf:f3:f4:a2:77:da: 61:f7:c8:fe:17:45:3a:fd:e4:6c:73:90:c2:4f:fc:44:8c:38: b1:dd:b7:52:c2:31:b2:18:95:af:5a:a6:0f:24:d1:75:08:02: ad:85:3e:62:1f:f5:a3:bb:36:8b:3b:37:4f:b1:70:ec:fb:94: 96:f4:b1:7b:f4:71:ff:bf:71:d5:6f:01:d8:c6:98:13:e1:57: a3:ff:53:a4:df:0c:24:e4:a0:0a:30:c5:69:fc:ea:7e:4f:35: 3d:c0:5c:48:59:6a:3c:33:58:98:c5:42:7f:d4:c5:a1:a6:9f: f1:68:03:42:74:96:cc:fd:1e:66:0a:20:f4:a1:99:2a:6d:92: a0:8c:ff:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9iRrF/N7NBlaFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTgyNTIxOTctOTRkYS00ZjZkLTk5N2EtODA5ZDIwODJkYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljKek2Qf28fmkmF36uxRmfPAwyYk60BM2s0O civgxAJk+We/6vNHC0rdbCLWu2WpZ7mIGVvU3G2T3SLmfcJ9u8HI5OZ78UdH9sB2 uo2s947I8Acd5PpqK30uEALP1YQd8vGyOgkUW3k0HViYPit3iPJjczhlCIWuxe2r mgv2LOsGQpqTlfTmK9Ww9c1sLsCzFJxnr5ZC4hQE9IBLClqiW6tl/Ika+PRqTK5m 64eTK41YGZW/Oa0Z7uNIAs0/phmU4QKaNJHtzjW9vW4kMVuHJZC9QlE2SDg2gBS4 13HuZXje9kEfFyzTYNR8/ZCHKFGYl5KWmpwjqcuCbeFIKBsiWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQAKZ/bfeb8CR+rS7IifhGwd8xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI5NTAzMjMtMjc4YS0z ZTcyLWE3ODAtNWRhZjc4NTQxNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqiT8tSljHmsbsHvyhoTQxpFASU1FpjwKZkuTaqtZFQXtvC3XXGygHm qd4WSmdyMd4Lh8Aj+I+g6o4M/1YVrRs3x19D18iLV4kBLJXUk4lOZjHeR5ISJ6JV GP6+SP7FWy59eNoFvUOfSYvkFKMPE1VD6WC2n2x2z7/z9KJ32mH3yP4XRTr95Gxz kMJP/ESMOLHdt1LCMbIYla9apg8k0XUIAq2FPmIf9aO7Nos7N0+xcOz7lJb0sXv0 cf+/cdVvAdjGmBPhV6P/U6TfDCTkoAowxWn86n5PNT3AXEhZajwzWJjFQn/UxaGm n/FoA0J0lsz9HmYKIPShmSptkqCM/9w= -----END CERTIFICATE-----Generated at Tue Apr 21 20:52:51 2026 by rpki-client