$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa File: cf0c6387-f3ca-3929-8b29-266b032ba697.roa (raw, json) Hash identifier: bnX39cUMuPjqXSpNlSERvTDCE/JJyYWpZm3DD9ZoL5I= Subject key identifier: 1E:58:77:49:53:D2:1A:62:C9:F6:A5:94:22:75:0D:31:53:92:93:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF62EF5A24CE26BEFAF55D6 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.59.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:2e:f5:a2:4c:e2:6b:ef:af:55:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d4978ebe-fb49-4b44-8f99-25d234478a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:b4:a6:a1:cf:f5:0c:85:eb:ec:99:c8:a2: 0b:b9:93:9d:8e:fe:d6:9b:2f:8b:bd:9b:c2:0f:fb: 3e:59:39:23:da:94:9f:a4:ab:fe:1d:cd:12:bf:50: df:4a:05:65:85:d2:75:00:e9:b8:20:77:1e:93:92: e1:3c:34:5b:63:4c:cc:e1:04:21:61:21:07:78:0c: 64:a6:18:a6:c0:6e:84:f2:e4:74:45:fb:1f:94:5e: 8f:86:7b:81:56:43:60:0b:32:9c:75:9f:05:f0:84: ef:8e:c2:75:6f:5c:03:96:20:98:88:b2:e6:ff:1d: 32:b6:84:cc:ad:69:d9:4e:aa:fb:86:40:80:06:6b: d2:98:2e:0f:d6:19:4b:9c:39:12:cf:59:f6:7f:f5: 49:8c:2a:e9:ff:5c:b7:29:5f:78:b6:47:9a:c2:08: 09:6c:0a:64:17:ef:09:4d:dd:ca:32:96:0f:59:2e: f7:50:a2:b2:e9:c0:ed:fe:64:73:1c:84:80:83:f5: e3:7e:83:4d:e2:d6:a3:a0:63:31:4e:22:8b:a2:4f: f0:f5:02:82:5d:d3:05:5c:99:53:b0:c4:6d:54:32: 1c:26:2d:6b:27:d7:44:eb:50:1f:55:27:2e:68:e7: 23:fd:fb:d5:59:95:e5:9e:67:05:3f:66:d9:ea:08: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:58:77:49:53:D2:1A:62:C9:F6:A5:94:22:75:0D:31:53:92:93:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0c6387-f3ca-3929-8b29-266b032ba697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.59.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6a:44:a4:f0:e9:f2:10:1e:bd:7a:87:96:aa:e1:38:c0:2f: d8:20:e2:7d:1c:2c:d2:b6:8e:bd:3f:40:1c:f8:6a:b9:cd:36: 26:71:05:f5:5d:de:cc:80:7a:89:e8:68:3a:0f:96:db:8a:65: cb:3c:01:bc:7b:2e:45:65:a8:ca:87:23:00:9b:13:04:cd:6b: ce:47:64:bb:a2:02:8d:8c:54:6c:4c:1e:40:ce:49:92:6b:f2: dc:38:45:1d:d9:9c:cd:5f:c2:d4:6e:49:02:28:db:f9:9b:13: fd:51:d3:16:d9:43:d5:d8:89:0b:4f:94:87:17:2b:df:82:94: bf:da:08:9b:da:4b:77:f4:6e:3a:3e:81:bb:f8:ae:41:50:d2: b6:d8:58:25:19:2a:cc:6b:01:0b:c7:aa:db:c3:9d:c2:b6:3a: 31:88:41:58:45:8e:72:8d:d3:28:f6:bf:de:4f:79:4a:af:51: c9:9d:57:43:aa:29:78:0f:38:87:b3:e4:0f:e6:cc:76:4d:82: 72:a7:c3:76:08:b8:b3:d3:4e:9e:24:cf:bb:93:94:7e:2f:5f: 58:9d:ba:04:0b:bb:8b:f1:d7:54:19:88:17:a2:6d:51:4b:eb: 93:60:97:fc:f1:b3:6c:e7:e0:8c:b9:97:51:6f:13:7e:ed:61: 33:99:2a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9i71okzia++vVdYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDQ5NzhlYmUtZmI0OS00YjQ0LThmOTktMjVkMjM0NDc4YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPG0pqHP9QyF6+yZyKILuZOdjv7Wmy+LvZvC D/s+WTkj2pSfpKv+Hc0Sv1DfSgVlhdJ1AOm4IHcek5LhPDRbY0zM4QQhYSEHeAxk phimwG6E8uR0RfsflF6PhnuBVkNgCzKcdZ8F8ITvjsJ1b1wDliCYiLLm/x0ytoTM rWnZTqr7hkCABmvSmC4P1hlLnDkSz1n2f/VJjCrp/1y3KV94tkeawggJbApkF+8J Td3KMpYPWS73UKKy6cDt/mRzHISAg/XjfoNN4tajoGMxTiKLok/w9QKCXdMFXJlT sMRtVDIcJi1rJ9dE61AfVScuaOcj/fvVWZXlnmcFP2bZ6gh2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5Yd0lT0hpiyfallCJ1DTFTkpNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YwYzYzODctZjNjYS0z OTI5LThiMjktMjY2YjAzMmJhNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRDuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpqRKTw6fIQHr16h5aq4TjAL9gg4n0cLNK2jr0/QBz4arnNNiZxBfVd 3syAeonoaDoPltuKZcs8Abx7LkVlqMqHIwCbEwTNa85HZLuiAo2MVGxMHkDOSZJr 8tw4RR3ZnM1fwtRuSQIo2/mbE/1R0xbZQ9XYiQtPlIcXK9+ClL/aCJvaS3f0bjo+ gbv4rkFQ0rbYWCUZKsxrAQvHqtvDncK2OjGIQVhFjnKN0yj2v95PeUqvUcmdV0Oq KXgPOIez5A/mzHZNgnKnw3YIuLPTTp4kz7uTlH4vX1idugQLu4vx11QZiBeibVFL 65Ngl/zxs2zn4Iy5l1FvE37tYTOZKmo= -----END CERTIFICATE-----Generated at Tue Apr 21 23:32:35 2026 by rpki-client