$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa File: dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa (raw, json) Hash identifier: jwJ9bHf6qwiIDmp+7LguT2loU0D0H6tS09u3m2D7eWg= Subject key identifier: 86:84:2D:74:7D:17:8A:91:AA:F5:41:47:62:3B:88:92:AA:6C:69:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF61DAFBCC00281DF27F040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.38.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:1d:af:bc:c0:02:81:df:27:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8ff5d618-b3b4-4864-bda7-b3d622f563a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:8e:3a:d0:22:f4:e9:18:17:0a:40:36:4f: ac:63:02:22:7b:d2:44:7f:d8:38:04:5d:49:0e:ee: 4c:f2:8f:b5:6e:97:f6:ac:05:57:f6:5c:7f:e3:66: 61:28:6e:8b:10:ba:ff:49:d1:7a:d4:35:fb:7a:c1: 15:d5:bd:3b:84:1f:eb:71:cd:ee:f3:77:e5:08:10: ef:f1:ba:8d:13:b3:6a:a6:10:09:3b:f2:1e:5b:00: d8:06:b8:ac:04:2d:15:4d:7f:46:d7:23:7d:06:8b: 0e:bf:71:ec:de:1b:fc:5e:7e:16:aa:8e:bf:4f:83: ee:9e:78:18:96:9d:ef:04:9c:35:14:72:15:e0:f2: b9:56:17:9d:94:1c:25:a3:8b:78:f4:a2:33:7a:3e: 7a:85:f6:2a:42:41:0e:5f:97:e7:1f:21:c2:08:a5: 70:3f:e4:d0:08:49:f1:8e:53:35:fa:cc:2b:f0:15: a8:ed:06:be:e2:08:c8:b2:78:ec:e5:b7:e9:2c:21: ec:02:58:87:52:33:a8:1e:39:49:c8:62:0e:66:9f: 10:d6:17:e2:6a:47:d9:ab:e5:8a:6f:30:68:97:11: cd:47:97:1d:bd:a6:e9:22:2a:60:7e:f3:d5:e8:5f: fd:f0:13:60:c2:d2:86:85:c0:7d:b2:8e:99:91:52: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:84:2D:74:7D:17:8A:91:AA:F5:41:47:62:3B:88:92:AA:6C:69:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfe26e43-7fe3-33bd-a08c-b8a50952ef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:51:0f:67:65:94:b0:fe:32:30:ea:87:91:8a:07:b5:09:d0: 0a:29:ea:72:ef:15:6f:29:06:05:35:19:3e:f6:dc:37:36:04: 32:86:01:42:bd:3f:93:e3:f2:ac:77:83:fc:3d:26:a2:80:1f: bd:c3:a9:a8:d2:4c:03:d8:b0:d0:5c:f8:be:74:8b:b0:13:00: 79:ca:ba:24:09:32:0d:fd:bc:9b:e3:18:75:f4:c2:a3:bb:c6: d6:dd:6c:7a:a3:ec:b7:e9:95:44:62:a9:3f:d9:3a:0f:47:67: 03:64:11:7c:67:c5:f5:15:92:ec:bf:b2:fb:c4:f1:69:aa:0f: 6b:d4:43:ce:62:1b:08:0d:30:2d:a2:c4:8d:6a:e3:d5:19:e4: 28:aa:3e:0c:03:d6:00:03:df:c1:27:12:3a:ce:f1:63:4c:43: df:0d:0e:c8:7c:95:27:37:6e:4f:c1:41:9f:ca:fb:4b:a0:70: 78:6c:ba:c9:5d:11:d2:55:a7:ef:43:77:af:e0:ef:90:31:46: c2:32:73:75:31:a4:2b:be:a1:c0:10:18:b2:06:ad:90:63:8c: 5f:03:21:68:0b:85:c7:2f:c1:35:21:c5:82:0e:d1:33:fa:02: 9d:5d:ee:ab:9b:14:77:f5:07:2b:07:d1:73:5a:0e:42:1e:68: 44:c7:ca:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9h2vvMACgd8n8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGZmNWQ2MTgtYjNiNC00ODY0LWJkYTctYjNkNjIyZjU2M2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGqOOtAi9OkYFwpANk+sYwIie9JEf9g4BF1J Du5M8o+1bpf2rAVX9lx/42ZhKG6LELr/SdF61DX7esEV1b07hB/rcc3u83flCBDv 8bqNE7NqphAJO/IeWwDYBrisBC0VTX9G1yN9BosOv3Hs3hv8Xn4Wqo6/T4PunngY lp3vBJw1FHIV4PK5VhedlBwlo4t49KIzej56hfYqQkEOX5fnHyHCCKVwP+TQCEnx jlM1+swr8BWo7Qa+4gjIsnjs5bfpLCHsAliHUjOoHjlJyGIOZp8Q1hfiakfZq+WK bzBolxHNR5cdvabpIipgfvPV6F/98BNgwtKGhcB9so6ZkVIvYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaELXR9F4qRqvVBR2I7iJKqbGnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZlMjZlNDMtN2ZlMy0z M2JkLWEwOGMtYjhhNTA5NTJlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlRD2dllLD+MjDqh5GKB7UJ0Aop6nLvFW8pBgU1GT723Dc2BDKGAUK9 P5Pj8qx3g/w9JqKAH73DqajSTAPYsNBc+L50i7ATAHnKuiQJMg39vJvjGHX0wqO7 xtbdbHqj7LfplURiqT/ZOg9HZwNkEXxnxfUVkuy/svvE8WmqD2vUQ85iGwgNMC2i xI1q49UZ5CiqPgwD1gAD38EnEjrO8WNMQ98NDsh8lSc3bk/BQZ/K+0ugcHhsusld EdJVp+9Dd6/g75AxRsIyc3UxpCu+ocAQGLIGrZBjjF8DIWgLhccvwTUhxYIO0TP6 Ap1d7qubFHf1BysH0XNaDkIeaETHyjk= -----END CERTIFICATE-----Generated at Tue Apr 21 22:55:04 2026 by rpki-client