$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43e88b1-c514-3aa0-b0a6-dc2610647086.roa File: a43e88b1-c514-3aa0-b0a6-dc2610647086.roa (raw, json) Hash identifier: ZfCkmNc1Ixxnq29JnVm2bWpePxSjMkE3oy8Eh3d+1+w= Subject key identifier: 6C:8C:FA:00:8D:F2:D0:AD:FE:24:9E:0C:63:BC:92:40:D0:9E:7F:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E35FFD77E3D26211F9C9E4518 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43e88b1-c514-3aa0-b0a6-dc2610647086.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33668 IP address blocks: 68.36.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:d7:7e:3d:26:21:1f:9c:9e:45:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=6f252920-fd21-46a5-8bae-f1fa71cc46cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:3f:03:bb:20:d1:f2:89:bd:cc:eb:8a:53: d7:01:49:ae:f6:91:3d:78:c5:de:ee:da:5e:91:9e: 2e:4b:0d:a7:53:fd:d0:e4:09:d9:fb:99:cf:0e:06: 21:0c:62:58:a4:7d:4c:ff:06:80:36:eb:64:1b:62: cd:a3:c2:5b:29:72:26:4e:10:01:28:49:46:fa:c0: c2:59:fc:db:6b:5a:94:14:0d:aa:13:e5:92:03:bf: ee:27:df:9f:99:65:e7:63:65:6e:12:80:18:b7:22: d2:c2:3c:d9:9f:63:92:58:69:8f:c1:27:40:39:02: bb:a3:7d:74:7a:33:54:87:7c:7f:eb:79:ff:6c:25: ad:f1:4b:50:eb:33:21:ca:bb:08:eb:48:ee:52:70: 70:c1:3b:cb:b1:03:fc:c2:87:31:8d:11:92:c8:6d: 45:21:da:22:db:2c:d0:42:60:84:e4:64:0f:c8:24: dc:a5:38:d3:9c:10:9b:bd:34:ae:b4:fc:74:a2:31: 96:aa:39:dc:ee:53:bf:03:9d:ba:c9:60:a1:5b:94: ba:39:7f:64:bd:29:85:7b:a5:62:69:89:96:e6:8f: 37:db:ae:62:8d:3f:02:02:e5:6b:af:8d:33:77:7e: db:3a:46:c8:05:0b:57:02:49:9b:4b:cc:ce:06:f9: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8C:FA:00:8D:F2:D0:AD:FE:24:9E:0C:63:BC:92:40:D0:9E:7F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a43e88b1-c514-3aa0-b0a6-dc2610647086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.36.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bb:83:cd:82:14:72:0e:7f:63:bf:fe:2b:8d:d9:f0:9f:26: c1:ef:67:9b:4e:99:c4:33:e8:4c:7b:82:b7:19:3c:31:ad:cd: a1:3a:86:92:7b:87:1e:f4:1d:fe:34:b2:80:58:10:0e:64:6d: d6:75:25:87:1c:71:a5:43:81:39:90:d9:4f:be:a9:60:e9:2d: dc:5e:84:40:7a:4a:e7:d9:01:57:df:86:76:10:cb:db:4f:95: 6f:d0:10:7d:d6:e0:fb:2a:d2:d7:d4:6c:4d:54:3a:1c:f3:96: 4b:7e:8b:4f:04:9d:ec:60:97:79:0a:ee:bc:64:c2:fd:b9:f3: dc:21:46:f1:e1:2f:9f:ef:93:d3:4e:05:67:41:90:0c:b7:c6: a7:93:67:f7:c7:25:00:db:2e:97:0b:90:5a:b2:49:8f:bf:e1: dd:9b:1b:3e:77:77:1a:8d:34:51:20:b3:c4:37:96:38:ed:20: e6:00:fc:29:96:a3:ad:ee:e7:04:ba:e8:81:a4:e1:bb:28:fa: ad:fd:a8:3a:be:4f:24:ab:44:03:4b:81:a2:21:fb:e4:fb:83: 28:00:a1:76:56:5d:59:84:c4:c5:c2:81:61:6b:6b:8d:e4:b0: 59:c0:97:26:c8:39:08:41:85:54:39:a1:4e:f8:35:d8:f7:d2: cb:af:74:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/9d+PSYhH5yeRRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NmYyNTI5MjAtZmQyMS00NmE1LThiYWUtZjFmYTcxY2M0NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa0/A7sg0fKJvczrilPXAUmu9pE9eMXe7tpe kZ4uSw2nU/3Q5AnZ+5nPDgYhDGJYpH1M/waANutkG2LNo8JbKXImThABKElG+sDC Wfzba1qUFA2qE+WSA7/uJ9+fmWXnY2VuEoAYtyLSwjzZn2OSWGmPwSdAOQK7o310 ejNUh3x/63n/bCWt8UtQ6zMhyrsI60juUnBwwTvLsQP8wocxjRGSyG1FIdoi2yzQ QmCE5GQPyCTcpTjTnBCbvTSutPx0ojGWqjnc7lO/A526yWChW5S6OX9kvSmFe6Vi aYmW5o83265ijT8CAuVrr40zd37bOkbIBQtXAkmbS8zOBvld/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyM+gCN8tCt/iSeDGO8kkDQnn9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQzZTg4YjEtYzUxNC0z YWEwLWIwYTYtZGMyNjEwNjQ3MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC7g82CFHIOf2O//iuN2fCfJsHvZ5tOmcQz6Ex7grcZPDGtzaE6hpJ7 hx70Hf40soBYEA5kbdZ1JYcccaVDgTmQ2U++qWDpLdxehEB6SufZAVffhnYQy9tP lW/QEH3W4Psq0tfUbE1UOhzzlkt+i08Enexgl3kK7rxkwv2589whRvHhL5/vk9NO BWdBkAy3xqeTZ/fHJQDbLpcLkFqySY+/4d2bGz53dxqNNFEgs8Q3ljjtIOYA/CmW o63u5wS66IGk4bso+q39qDq+TySrRANLgaIh++T7gygAoXZWXVmExMXCgWFra43k sFnAlybIOQhBhVQ5oU74Ndj30suvdAo= -----END CERTIFICATE-----Generated at Sat Jul 18 04:34:16 2026 by rpki-client