$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa File: f40c09ad-d1e9-364f-a755-0a4872030459.roa (raw, json) Hash identifier: uJzx8ZT3byo+p5yZRbGtdtDLgNyVSLZnPtfNHsmihls= Subject key identifier: D1:E3:4D:AE:21:70:40:69:A6:6C:D9:A5:67:4A:9C:A7:1C:68:82:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF62007D6DC94F5B2AFCB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.39.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:20:07:d6:dc:94:f5:b2:af:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=224d7361-eea7-4d15-ae84-c6136f80deeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:e9:ca:a4:ce:2a:0f:5b:87:21:b5:99:66: ee:88:8a:ab:6d:30:77:2a:07:66:d3:4f:94:09:b7: 63:38:dc:73:17:2b:1c:01:72:41:04:ef:b7:6b:9c: cd:3c:c2:01:ed:2f:73:c4:24:4f:ed:c0:50:f4:52: 5b:41:20:54:e9:28:02:4f:99:0d:ea:dd:42:82:5b: 78:65:c9:6b:49:28:b1:43:9c:a0:5a:f0:19:3e:cd: fa:73:00:5e:90:8f:c4:c0:c8:dc:72:c6:04:99:41: 40:3a:27:1a:2f:ae:08:ba:89:b1:ff:dd:87:46:cc: 03:6d:8f:be:59:5b:70:57:9a:2c:c4:4e:b4:9d:af: fe:70:8d:86:c5:7b:ff:3f:1c:67:e1:1d:bc:4a:16: bd:13:f5:d9:c1:53:42:e7:e0:00:c1:fe:be:a7:c1: 85:23:ca:48:0a:67:15:82:77:c1:c8:af:ac:7a:3e: 30:e9:0e:98:d7:18:be:9e:d2:35:a6:4a:ff:ab:3b: f0:ee:6c:ad:10:31:c3:f7:32:44:c2:82:04:59:24: 11:9d:c7:19:23:00:70:05:26:21:6c:79:b7:73:62: d9:06:bb:2f:3b:31:c3:74:74:cb:b2:a8:62:26:27: 02:00:aa:6d:e3:14:8b:59:dd:be:00:e4:0a:09:73: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:4D:AE:21:70:40:69:A6:6C:D9:A5:67:4A:9C:A7:1C:68:82:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f40c09ad-d1e9-364f-a755-0a4872030459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.39.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:f3:86:01:66:dd:9d:28:a7:69:9d:da:85:57:37:15:cf: 2d:45:1f:44:1d:5f:48:d1:0e:b8:fc:49:c7:82:71:3d:e9:90: 64:91:fe:7e:1b:c2:4e:ce:89:c0:14:67:72:00:de:1b:ac:e0: cc:80:50:ee:62:ad:07:b9:35:74:54:dc:44:48:a5:6f:13:24: f1:f4:4d:28:77:33:13:11:ef:b7:69:9b:14:c1:4a:ec:8c:45: 1e:4c:9d:49:1f:27:c6:00:58:98:c0:57:fd:4e:33:77:85:c5: 45:5a:df:75:0e:1c:49:fa:02:9e:6f:78:fd:77:74:ef:f1:dc: b0:65:1a:2a:89:dd:a7:ec:eb:9b:32:25:7f:cc:62:46:b1:5f: ff:33:19:24:2d:bc:db:8b:2c:f8:c4:b8:96:cb:75:95:3f:03: 93:bf:8f:43:d0:62:f7:56:20:9d:f0:c8:5c:5e:6b:0c:94:6f: 5e:cf:d6:5e:37:6d:f9:f1:d7:78:af:6a:15:98:82:50:48:c4: ee:27:82:54:e4:18:e5:e1:d3:d4:7e:a7:9f:76:32:44:fc:1e: a9:50:b0:a3:44:7c:81:7e:26:40:3d:e5:9c:a6:bf:13:a2:56: 55:9a:ff:14:9e:b7:81:d8:d6:7a:5f:7b:c5:b7:98:61:9d:c6: a2:1d:3c:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9iAH1tyU9bKvywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjI0ZDczNjEtZWVhNy00ZDE1LWFlODQtYzYxMzZmODBkZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp/pyqTOKg9bhyG1mWbuiIqrbTB3Kgdm00+U CbdjONxzFyscAXJBBO+3a5zNPMIB7S9zxCRP7cBQ9FJbQSBU6SgCT5kN6t1Cglt4 ZclrSSixQ5ygWvAZPs36cwBekI/EwMjccsYEmUFAOicaL64Iuomx/92HRswDbY++ WVtwV5osxE60na/+cI2GxXv/Pxxn4R28Sha9E/XZwVNC5+AAwf6+p8GFI8pICmcV gnfByK+sej4w6Q6Y1xi+ntI1pkr/qzvw7mytEDHD9zJEwoIEWSQRnccZIwBwBSYh bHm3c2LZBrsvOzHDdHTLsqhiJicCAKpt4xSLWd2+AOQKCXP79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHjTa4hcEBppmzZpWdKnKccaILAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQwYzA5YWQtZDFlOS0z NjRmLWE3NTUtMGE0ODcyMDMwNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECN84YBZt2dKKdpndqFVzcVzy1FH0QdX0jRDrj8SceCcT3pkGSR/n4b wk7OicAUZ3IA3hus4MyAUO5irQe5NXRU3ERIpW8TJPH0TSh3MxMR77dpmxTBSuyM RR5MnUkfJ8YAWJjAV/1OM3eFxUVa33UOHEn6Ap5veP13dO/x3LBlGiqJ3afs65sy JX/MYkaxX/8zGSQtvNuLLPjEuJbLdZU/A5O/j0PQYvdWIJ3wyFxeawyUb17P1l43 bfnx13ivahWYglBIxO4nglTkGOXh09R+p592MkT8HqlQsKNEfIF+JkA95ZymvxOi VlWa/xSet4HY1npfe8W3mGGdxqIdPH8= -----END CERTIFICATE-----Generated at Tue Apr 21 19:31:53 2026 by rpki-client