$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d847695b-7628-3ea2-9e23-a40aeafa226f.roa File: d847695b-7628-3ea2-9e23-a40aeafa226f.roa (raw, json) Hash identifier: a0cNeSfvjYbEFX1GqOG1l8CFzKRf18o0G7Ru9nhQIkI= Subject key identifier: AE:8F:F3:2B:9C:A1:73:54:64:D4:08:CD:9E:9B:2D:86:6E:09:53:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF61D8D9265DF43DE2A8C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d847695b-7628-3ea2-9e23-a40aeafa226f.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.38.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:1d:8d:92:65:df:43:de:2a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=652da6ac-a3ec-45d4-af4f-dbb60cb2b0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:36:d9:d0:7d:0d:17:4b:da:3d:3c:14:1d: 92:c0:10:89:39:ee:a1:ec:fd:87:66:79:65:bf:d7: 77:45:d0:05:ad:2d:60:e1:c8:17:25:10:9e:7e:00: 70:4e:48:41:f4:e2:61:ff:22:39:cb:01:9b:f2:86: 87:64:60:5c:04:de:be:7a:2b:f4:b2:0c:04:be:7c: 0d:24:30:fd:c1:d1:ea:80:b9:de:ba:32:4d:45:6c: 31:38:b4:4e:a7:12:ae:29:c5:ad:e9:c5:4d:65:1f: 2d:02:a0:9b:cc:1f:c3:f4:b7:bc:8d:bc:11:ca:75: ea:d5:24:18:9d:15:6d:14:4e:9a:24:80:50:83:48: 9b:7a:4f:d3:68:ae:d4:f0:38:7b:d3:1b:38:ad:68: 41:cb:bc:9d:52:e1:73:5d:f1:bb:0a:32:44:c8:5f: 06:52:44:46:d6:ee:a2:f6:c5:83:eb:e0:f1:60:8e: d0:28:ad:18:3c:6d:62:6d:7c:6d:41:4e:7a:64:44: 93:85:2d:75:8a:26:1c:c0:91:aa:9c:3b:bb:bd:67: f6:8c:15:04:09:d1:3e:d8:e9:dc:29:f7:5a:6e:ed: f7:7b:e7:aa:c1:58:09:34:72:b7:59:47:c9:3f:ea: 03:f6:69:61:0d:5f:37:2c:b6:d8:64:12:42:7f:e3: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8F:F3:2B:9C:A1:73:54:64:D4:08:CD:9E:9B:2D:86:6E:09:53:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d847695b-7628-3ea2-9e23-a40aeafa226f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a0:fd:ce:34:32:dd:fb:e0:b9:22:02:72:2b:0e:c2:95:58: b4:a6:81:10:11:48:58:a4:1a:8f:47:e7:4e:49:50:db:19:3c: 4f:44:d7:ab:04:ef:b5:fe:24:f7:d1:9b:96:71:96:35:c9:03: bd:5e:85:ce:0e:a5:4d:b3:89:46:6b:6d:8f:fa:c8:8e:1a:d3: 98:8d:20:69:80:0b:04:fd:95:8f:c1:f7:c1:fe:40:d4:73:d0: 23:c7:3c:77:fe:a3:8e:8a:35:79:c7:84:d7:2b:cd:48:48:de: 39:b9:11:11:b8:a3:45:44:a2:9f:8a:8d:0b:f9:2e:0e:fc:c5: 47:f2:43:6f:ef:fa:59:26:a9:95:3a:0b:fc:df:bb:44:89:19: 8b:13:b6:e9:be:91:56:80:b3:72:85:d8:6e:dc:83:4c:8d:02: 35:2e:52:43:ba:4d:2c:fe:27:a2:52:1c:fe:5f:cb:de:9c:1a: 19:4a:f2:f0:8e:3d:34:36:09:e6:38:e9:4a:ba:18:30:ac:57: ca:81:cb:5b:d2:4a:77:9a:03:df:98:e2:18:c9:3e:d9:bb:c5: 53:f9:7a:73:02:9c:d4:51:4a:44:51:95:1e:6c:1d:81:80:09: 49:eb:b8:8b:a1:c4:5e:7a:9b:69:f2:44:1d:d0:47:81:70:f0: f2:c9:27:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9h2NkmXfQ94qjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjUyZGE2YWMtYTNlYy00NWQ0LWFmNGYtZGJiNjBjYjJiMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidc22dB9DRdL2j08FB2SwBCJOe6h7P2HZnll v9d3RdAFrS1g4cgXJRCefgBwTkhB9OJh/yI5ywGb8oaHZGBcBN6+eiv0sgwEvnwN JDD9wdHqgLneujJNRWwxOLROpxKuKcWt6cVNZR8tAqCbzB/D9Le8jbwRynXq1SQY nRVtFE6aJIBQg0ibek/TaK7U8Dh70xs4rWhBy7ydUuFzXfG7CjJEyF8GUkRG1u6i 9sWD6+DxYI7QKK0YPG1ibXxtQU56ZESThS11iiYcwJGqnDu7vWf2jBUECdE+2Onc Kfdabu33e+eqwVgJNHK3WUfJP+oD9mlhDV83LLbYZBJCf+NFuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6P8yucoXNUZNQIzZ6bLYZuCVNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg0NzY5NWItNzYyOC0z ZWEyLTllMjMtYTQwYWVhZmEyMjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCZ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+g/c40Mt374LkiAnIrDsKVWLSmgRARSFikGo9H505JUNsZPE9E16sE 77X+JPfRm5ZxljXJA71ehc4OpU2ziUZrbY/6yI4a05iNIGmACwT9lY/B98H+QNRz 0CPHPHf+o46KNXnHhNcrzUhI3jm5ERG4o0VEop+KjQv5Lg78xUfyQ2/v+lkmqZU6 C/zfu0SJGYsTtum+kVaAs3KF2G7cg0yNAjUuUkO6TSz+J6JSHP5fy96cGhlK8vCO PTQ2CeY46Uq6GDCsV8qBy1vSSneaA9+Y4hjJPtm7xVP5enMCnNRRSkRRlR5sHYGA CUnruIuhxF56m2nyRB3QR4Fw8PLJJw8= -----END CERTIFICATE-----Generated at Tue Apr 21 19:22:53 2026 by rpki-client