$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa File: a9b6561c-f315-37aa-9d85-6580d7f444e5.roa (raw, json) Hash identifier: RbqY8negno020LBoYnYwYp8FJI0tMdnxyD5+Hf3qaf0= Subject key identifier: 21:C7:25:75:8C:F2:D2:20:2B:48:E0:68:9A:B8:20:47:A9:47:7D:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE8632CA18FE165CE0E154A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33651 IP address blocks: 68.85.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:32:ca:18:fe:16:5c:e0:e1:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=c2f9bea2-bd9c-4c58-bfbf-5f9bd1104d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:eb:05:5a:7d:38:a3:31:ef:a1:ca:16:da: aa:a3:2b:56:8b:66:d5:c7:1e:a6:35:40:a1:a6:56: 4f:57:ec:14:c3:3f:60:f8:3c:a5:5c:58:7b:f0:06: 96:1c:15:3e:d1:6b:8c:fe:83:b1:83:64:d7:b3:8e: f0:68:b7:ef:e6:0f:13:93:de:76:36:74:a4:da:c5: 43:08:71:9f:33:6d:65:26:c8:6b:4d:91:e8:7d:0b: e1:91:81:60:c9:55:db:7f:32:b0:53:45:d6:cc:06: ab:11:a7:58:42:09:53:01:96:b7:b3:d2:14:3e:7b: b0:fc:08:7a:e2:e6:b6:b5:3a:99:3a:fa:0d:ac:66: c6:4b:e8:96:86:a4:66:52:23:76:d7:fc:9d:dd:5f: 32:65:b1:b5:a0:3e:2d:7c:a0:8f:65:e6:1c:60:d7: a8:4d:56:dc:37:32:a2:a6:35:20:db:62:93:c8:30: dd:d0:ea:78:cb:10:a0:df:b8:6c:57:74:4c:3d:b1: 18:e1:24:17:7a:e3:d4:dc:64:0a:f9:07:2c:fc:ac: 68:46:62:7b:50:0c:a9:36:a2:3d:2f:38:be:1a:f0: f9:32:c5:ae:c3:71:4d:d0:9e:95:01:ba:53:d7:ea: 07:fd:07:00:45:7b:da:b2:97:79:5a:ad:f0:c5:cf: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C7:25:75:8C:F2:D2:20:2B:48:E0:68:9A:B8:20:47:A9:47:7D:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.85.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2a:95:7a:c9:ec:9e:55:0c:7a:e3:d6:1f:1f:d2:18:61:9c: 0a:ff:c3:17:b3:2a:ef:66:43:a6:c8:aa:2e:72:d2:d9:c8:af: e1:2f:87:c4:eb:25:24:98:4c:b2:85:22:46:af:96:cf:9a:42: 00:c0:29:05:4a:ab:66:5a:46:9e:84:2c:d3:24:6c:38:f9:ce: 8d:0d:7b:9a:6c:23:19:a2:9c:21:1d:d2:d0:66:e4:e6:1f:d3: 85:10:9d:06:17:6a:84:7f:37:38:e5:38:ce:d2:38:20:42:58: 29:3e:de:d5:1c:7c:3a:2b:eb:c8:59:45:a8:0d:bb:68:4f:41: 41:08:ba:70:50:79:f2:fc:ae:df:2e:ff:0e:ef:f1:1d:d7:79: 53:0d:de:4d:01:66:73:04:68:7e:07:44:f9:29:25:4c:96:0e: ec:e3:80:97:b6:4a:59:1c:83:73:6a:e5:c0:ca:2a:60:ad:43: 9e:ea:2e:d3:ab:3e:37:dd:9d:89:b6:ea:b5:42:f7:93:18:f6: 43:97:72:06:14:ba:ba:7b:7e:45:ea:0b:fb:40:d8:b7:dd:0d: c3:c3:57:c3:27:8a:dd:fa:58:c5:f7:87:41:0a:e3:4e:63:04: 8a:0c:3d:d0:91:70:24:d2:77:1a:ca:13:fc:4b:25:a8:49:9c: be:c7:00:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehjLKGP4WXODhVKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YzJmOWJlYTItYmQ5Yy00YzU4LWJmYmYtNWY5YmQxMTA0ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBLrBVp9OKMx76HKFtqqoytWi2bVxx6mNUCh plZPV+wUwz9g+DylXFh78AaWHBU+0WuM/oOxg2TXs47waLfv5g8Tk952NnSk2sVD CHGfM21lJshrTZHofQvhkYFgyVXbfzKwU0XWzAarEadYQglTAZa3s9IUPnuw/Ah6 4ua2tTqZOvoNrGbGS+iWhqRmUiN21/yd3V8yZbG1oD4tfKCPZeYcYNeoTVbcNzKi pjUg22KTyDDd0Op4yxCg37hsV3RMPbEY4SQXeuPU3GQK+Qcs/KxoRmJ7UAypNqI9 Lzi+GvD5MsWuw3FN0J6VAbpT1+oH/QcARXvaspd5Wq3wxc9fwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHHJXWM8tIgK0jgaJq4IEepR331MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTliNjU2MWMtZjMxNS0z N2FhLTlkODUtNjU4MGQ3ZjQ0NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAqlXrJ7J5VDHrj1h8f0hhhnAr/wxezKu9mQ6bIqi5y0tnIr+Evh8Tr JSSYTLKFIkavls+aQgDAKQVKq2ZaRp6ELNMkbDj5zo0Ne5psIxminCEd0tBm5OYf 04UQnQYXaoR/NzjlOM7SOCBCWCk+3tUcfDor68hZRagNu2hPQUEIunBQefL8rt8u /w7v8R3XeVMN3k0BZnMEaH4HRPkpJUyWDuzjgJe2Slkcg3Nq5cDKKmCtQ57qLtOr PjfdnYm26rVC95MY9kOXcgYUurp7fkXqC/tA2LfdDcPDV8Mnit36WMX3h0EK405j BIoMPdCRcCTSdxrKE/xLJahJnL7HAJ0= -----END CERTIFICATE-----Generated at Sat Jun 6 15:58:16 2026 by rpki-client