$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9facca-b067-3abd-bdc2-ac3a1cbb7c3e.roa File: ea9facca-b067-3abd-bdc2-ac3a1cbb7c3e.roa (raw, json) Hash identifier: My+Q9oHItPxoyJoQrg1h4vSYDaLaOyjoXBurTM/+80Q= Subject key identifier: F2:CB:64:E9:1E:9F:16:1A:30:A2:FA:1D:EA:2E:81:D6:E5:51:99:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF78923D46B434F71744400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9facca-b067-3abd-bdc2-ac3a1cbb7c3e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.38.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:89:23:d4:6b:43:4f:71:74:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=713ba774-926e-4065-a48f-48f106884f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:20:89:1e:df:12:bc:3c:ba:8d:78:eb:29: ae:66:ef:38:b2:40:53:b5:2f:a9:94:2f:53:e7:d1: c7:c2:af:b5:26:50:19:e8:c4:91:6d:99:bc:fb:e7: 04:59:b6:6d:f6:8e:ea:9e:a7:39:ba:d3:73:32:3c: 70:2e:d4:d4:a6:a3:84:34:57:fe:ab:4c:2d:59:5d: b3:7e:11:d2:64:9f:b1:4e:4e:6b:87:05:ba:4c:87: 6b:1f:de:ed:2a:69:7c:29:2c:60:3c:99:26:65:a2: 4b:84:b1:e8:5f:c7:b8:34:36:9a:61:d3:b8:d7:e6: c2:aa:d2:57:19:a8:33:1a:5b:e6:2d:b7:30:aa:e9: 49:c1:01:d0:8f:4d:96:6a:cf:eb:b3:8d:c2:07:12: 8b:7f:d8:05:29:7e:4e:71:17:a3:43:5a:33:b0:5c: 61:c4:31:02:81:e0:08:b2:e5:e4:62:20:9d:62:1d: 50:fa:ac:fa:0f:19:13:52:fb:79:ae:37:7c:a6:00: aa:0b:6b:f3:8e:c8:1b:90:46:2f:8b:9c:d0:4a:1d: 45:20:fa:9e:a0:58:2c:cb:6e:05:01:d8:50:1a:45: 50:ec:c8:ef:40:69:f4:d8:9c:5d:3c:01:89:0b:7c: 91:6c:67:36:35:24:8d:9c:1f:34:23:58:83:64:f2: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:64:E9:1E:9F:16:1A:30:A2:FA:1D:EA:2E:81:D6:E5:51:99:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea9facca-b067-3abd-bdc2-ac3a1cbb7c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:39:08:ba:c1:65:59:e4:01:86:06:2d:15:72:a6:f7:97:ee: 0a:4e:20:62:df:0a:fb:81:f9:1b:00:30:11:cc:2c:d6:58:4c: 20:2c:a1:32:de:ac:15:34:c8:9c:db:f9:70:92:0f:a5:0d:b6: e1:7a:a8:c6:08:9a:41:22:6e:88:fe:f9:2a:51:0b:bf:83:74: f2:4d:bf:4f:96:c8:5a:37:5f:c9:ca:27:12:a9:1a:7f:40:eb: 06:8a:a5:ad:75:8e:b0:3f:37:4f:16:8e:bc:30:d4:10:89:7a: 8e:ee:78:0a:b3:e9:fb:0c:4b:7b:58:12:2a:76:67:8a:76:ac: 5c:be:b5:45:ff:04:73:8a:8e:0f:10:7f:de:37:2e:73:87:93: a4:18:30:12:5f:0d:0f:be:6e:18:a5:80:b4:9c:f3:63:92:11: 88:86:56:89:1b:59:9f:34:d0:b0:7b:c8:a2:8f:ac:3c:73:4d: 35:31:0f:2d:0d:7d:40:6e:0b:16:94:01:df:6e:15:78:07:da: fc:f9:d7:67:b7:9f:12:4c:a6:e5:d2:19:ad:d1:b1:90:2b:05: c9:8f:44:3f:58:b7:4d:ad:7e:51:5e:79:78:44:24:6f:42:78: bd:99:54:4e:3b:29:66:34:24:2c:63:b4:64:b5:62:1a:79:2d: d9:f3:6f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94kj1GtDT3F0RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzEzYmE3NzQtOTI2ZS00MDY1LWE0OGYtNDhmMTA2ODg0ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7sgiR7fErw8uo146ymuZu84skBTtS+plC9T 59HHwq+1JlAZ6MSRbZm8++cEWbZt9o7qnqc5utNzMjxwLtTUpqOENFf+q0wtWV2z fhHSZJ+xTk5rhwW6TIdrH97tKml8KSxgPJkmZaJLhLHoX8e4NDaaYdO41+bCqtJX GagzGlvmLbcwqulJwQHQj02Was/rs43CBxKLf9gFKX5OcRejQ1ozsFxhxDECgeAI suXkYiCdYh1Q+qz6DxkTUvt5rjd8pgCqC2vzjsgbkEYvi5zQSh1FIPqeoFgsy24F AdhQGkVQ7MjvQGn02JxdPAGJC3yRbGc2NSSNnB80I1iDZPLZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLLZOkenxYaMKL6HeougdblUZmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWE5ZmFjY2EtYjA2Ny0z YWJkLWJkYzItYWMzYTFjYmI3YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo5CLrBZVnkAYYGLRVypveX7gpOIGLfCvuB+RsAMBHMLNZYTCAsoTLe rBU0yJzb+XCSD6UNtuF6qMYImkEiboj++SpRC7+DdPJNv0+WyFo3X8nKJxKpGn9A 6waKpa11jrA/N08Wjrww1BCJeo7ueAqz6fsMS3tYEip2Z4p2rFy+tUX/BHOKjg8Q f943LnOHk6QYMBJfDQ++bhilgLSc82OSEYiGVokbWZ800LB7yKKPrDxzTTUxDy0N fUBuCxaUAd9uFXgH2vz512e3nxJMpuXSGa3RsZArBcmPRD9Yt02tflFeeXhEJG9C eL2ZVE47KWY0JCxjtGS1Yhp5Ldnzb/s= -----END CERTIFICATE-----Generated at Tue Apr 21 21:35:57 2026 by rpki-client