$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32d2db2-ffe9-3050-8252-2c3886a7e59e.roa File: d32d2db2-ffe9-3050-8252-2c3886a7e59e.roa (raw, json) Hash identifier: m/Hi4ExPD/dx6pbX8QjR7cag3vWScE+hY8L3vQiQLzM= Subject key identifier: A5:FC:99:8B:27:01:04:CA:63:93:19:7B:4B:71:69:58:FF:5A:8A:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6228A35F89C07B60E636E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32d2db2-ffe9-3050-8252-2c3886a7e59e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.44.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:22:8a:35:f8:9c:07:b6:0e:63:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=880fa55d-58ae-439f-921d-022c8d20f734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:56:c4:97:ec:44:90:b2:dc:b0:c9:d6:1c: e1:59:b3:df:71:91:05:4b:9a:7e:1a:12:a6:95:ad: d0:bf:0d:c1:37:b5:a3:be:1c:cc:af:30:bd:14:7b: d0:25:8d:98:41:7a:35:bb:23:4a:e7:a1:67:ec:2f: df:88:d7:c6:7b:44:26:b1:7b:79:a5:ee:03:cc:3c: 9e:c9:c7:8a:9c:7f:8d:64:6d:77:83:03:3c:dc:c9: 58:08:7f:dd:ee:fb:df:49:21:fd:7c:47:0d:f3:b6: 20:2f:49:9e:a8:39:27:e1:b0:67:c8:91:aa:a3:68: a5:24:42:50:c2:0f:2f:e8:7e:5e:61:44:7d:e5:4b: a3:58:1b:1d:3c:b8:44:e7:99:f5:1b:53:1c:f7:f1: 30:14:95:67:e9:4a:ef:d1:92:8d:f6:0e:86:42:7d: 8a:6c:4b:b7:d5:31:b4:5c:34:e0:ac:ec:c6:eb:5a: 92:3e:9f:9f:cc:a5:a5:a2:78:0a:9f:09:1c:9c:48: 1f:6b:29:ff:0d:f2:28:72:e3:7c:c4:79:0a:05:e1: 07:2e:8a:7d:ee:39:73:cc:7c:0a:c2:2c:ed:63:2e: 31:84:05:72:52:64:ba:33:5c:db:8f:09:fc:a6:9a: 57:fc:0b:26:0c:1c:a7:85:50:e5:3d:03:8f:8f:c5: 97:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:99:8B:27:01:04:CA:63:93:19:7B:4B:71:69:58:FF:5A:8A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d32d2db2-ffe9-3050-8252-2c3886a7e59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.44.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c2:c8:57:65:be:07:19:d5:65:38:e3:29:61:71:77:fe:a8: bc:4d:a0:26:bd:ba:6f:6d:24:c3:6a:42:c1:16:e3:87:50:2d: a9:35:4e:9a:84:59:49:55:32:8d:a7:18:fb:40:fb:3e:b1:77: 0a:56:33:a7:40:59:54:6c:36:b5:27:6c:67:01:62:07:8b:42: 9b:ed:52:d9:c6:e1:68:47:bd:36:0f:72:07:39:aa:53:bc:ad: 68:58:35:d5:3f:33:bc:d0:84:56:a4:b4:51:09:6f:86:3d:27: c4:c6:8b:81:37:33:07:7c:8c:62:a3:57:f7:9d:4d:0f:b6:f7: 40:48:b0:ce:c0:e2:19:d8:85:6c:0c:22:60:e0:b1:9c:69:17: 6d:36:1f:bb:2f:6d:d1:9f:6c:8d:a8:3e:77:33:ab:da:1b:f0: 06:67:0e:de:3f:27:c7:4e:5f:b3:25:d1:e6:2b:83:7c:60:52: 28:06:94:69:2e:50:a0:cf:3d:4f:77:37:d3:11:35:80:ce:90: 47:5f:11:bb:6f:32:a7:be:b5:8a:81:ec:e4:ed:37:0e:18:8a: 64:8f:2a:52:84:d3:30:bc:fd:7f:8f:3e:3f:fb:5f:bd:69:f3: 16:e1:c1:12:f6:ab:c9:02:c0:fd:03:a4:0e:cb:f6:c8:4b:d0: 82:8d:e4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9iKKNficB7YOY24wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODgwZmE1NWQtNThhZS00MzlmLTkyMWQtMDIyYzhkMjBmNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUlWxJfsRJCy3LDJ1hzhWbPfcZEFS5p+GhKm la3Qvw3BN7WjvhzMrzC9FHvQJY2YQXo1uyNK56Fn7C/fiNfGe0QmsXt5pe4DzDye yceKnH+NZG13gwM83MlYCH/d7vvfSSH9fEcN87YgL0meqDkn4bBnyJGqo2ilJEJQ wg8v6H5eYUR95UujWBsdPLhE55n1G1Mc9/EwFJVn6Urv0ZKN9g6GQn2KbEu31TG0 XDTgrOzG61qSPp+fzKWlongKnwkcnEgfayn/DfIocuN8xHkKBeEHLop97jlzzHwK wiztYy4xhAVyUmS6M1zbjwn8pppX/AsmDBynhVDlPQOPj8WXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX8mYsnAQTKY5MZe0txaVj/WorqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMyZDJkYjItZmZlOS0z MDUwLTgyNTItMmMzODg2YTdlNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITCyFdlvgcZ1WU44ylhcXf+qLxNoCa9um9tJMNqQsEW44dQLak1TpqE WUlVMo2nGPtA+z6xdwpWM6dAWVRsNrUnbGcBYgeLQpvtUtnG4WhHvTYPcgc5qlO8 rWhYNdU/M7zQhFaktFEJb4Y9J8TGi4E3Mwd8jGKjV/edTQ+290BIsM7A4hnYhWwM ImDgsZxpF202H7svbdGfbI2oPnczq9ob8AZnDt4/J8dOX7Ml0eYrg3xgUigGlGku UKDPPU93N9MRNYDOkEdfEbtvMqe+tYqB7OTtNw4YimSPKlKE0zC8/X+PPj/7X71p 8xbhwRL2q8kCwP0DpA7L9shL0IKN5Ms= -----END CERTIFICATE-----Generated at Tue Apr 21 19:14:50 2026 by rpki-client