$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa8fee9-a924-30d5-85f1-41c70f5ec6c4.roa File: ffa8fee9-a924-30d5-85f1-41c70f5ec6c4.roa (raw, json) Hash identifier: P66J+j/UjfWwmSgxINUoyi6curM/2fw8V3n1yLxq6xg= Subject key identifier: 86:2B:F1:6B:E4:7D:3D:CE:77:8C:BE:41:EB:79:D7:6F:8F:16:19:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF789ED7C4EE6071E95B480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa8fee9-a924-30d5-85f1-41c70f5ec6c4.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 68.38.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:89:ed:7c:4e:e6:07:1e:95:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ec598df6-4713-4a8b-8aae-3a1e6a8cc157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:78:d3:1f:ad:c0:86:5f:3d:aa:b3:f8:09: 65:ac:42:d1:d3:d1:11:83:17:6a:40:dc:56:34:5d: bd:c9:97:66:2f:f7:b0:4a:ed:58:71:e8:b6:3c:8f: 82:18:d1:fe:19:07:ae:79:ca:c5:e6:84:ec:95:10: 75:76:80:cb:b8:c0:27:bb:b8:41:aa:e6:78:d8:8b: 88:b3:b1:50:67:f4:d1:16:bf:4d:ab:49:ae:c3:a9: 3e:a0:f0:ad:16:59:67:d9:8b:4f:79:b0:e2:7d:d4: d4:58:d8:1f:f1:1d:0b:da:90:37:05:4d:f8:01:86: 78:e9:d5:51:88:5b:b6:23:a2:07:17:f4:fe:99:9d: 23:14:d3:95:2d:7a:83:2c:b1:06:38:51:aa:a2:aa: 59:0a:5a:a3:22:43:d8:f1:7a:18:7a:96:e1:58:ef: 37:a0:4f:83:9a:be:09:a9:bd:31:14:fd:ff:2a:99: f9:84:89:03:35:63:b2:78:21:28:e5:7f:e0:dc:7b: a2:81:bc:5b:bf:61:31:47:46:8b:ab:36:6f:80:38: 58:d1:de:48:b0:73:67:3e:2d:01:76:73:7b:99:00: 5f:23:47:67:8b:60:fb:16:f6:e3:49:80:c2:d1:69: 42:97:f0:5f:aa:74:a6:76:3d:ff:ba:89:c5:91:2f: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:F1:6B:E4:7D:3D:CE:77:8C:BE:41:EB:79:D7:6F:8F:16:19:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffa8fee9-a924-30d5-85f1-41c70f5ec6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.38.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:df:08:a7:e8:20:c3:16:5d:5a:8f:7e:7e:0e:71:81:c4:12: 69:55:95:71:39:c4:c0:8e:9e:6f:b3:cc:b5:28:a5:8d:5b:f7: 59:5e:4c:42:da:51:62:85:89:cd:60:ac:f4:79:30:04:59:a1: bf:32:07:13:c1:50:3d:62:94:05:a7:83:1c:da:d0:78:8e:ea: 0f:bc:24:7a:39:1d:ab:9d:8a:b0:7f:c6:fe:60:e1:1d:c0:00: 61:53:e8:51:f7:8b:6d:c7:3f:f1:91:a8:60:9f:53:f6:8d:76: df:a0:c3:fc:0f:17:4a:02:59:b4:a2:56:68:ab:cd:d4:16:c6: d1:0e:49:3b:f1:4f:44:92:b6:0d:6e:3a:50:5c:2a:5e:92:ca: d9:1c:91:97:4a:39:21:98:de:2a:31:dd:8c:8e:19:26:43:b6: 56:fe:c1:19:1c:1b:7b:d0:15:ba:1d:a4:dc:b2:db:f2:76:ed: a2:80:8b:5a:88:70:a5:c3:e7:48:3a:3a:fe:37:03:ef:a3:de: 81:0a:f3:40:d4:2d:ca:94:20:7d:6d:28:10:b4:cd:8b:6c:e0: 5d:f3:72:1a:99:02:72:8e:e7:89:19:01:d8:34:b0:cb:6c:d3: 82:87:5e:e8:f9:c5:a3:ba:0f:ee:f9:23:4b:7b:a7:12:59:23: b3:67:2c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94ntfE7mBx6VtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWM1OThkZjYtNDcxMy00YThiLThhYWUtM2ExZTZhOGNjMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEF40x+twIZfPaqz+AllrELR09ERgxdqQNxW NF29yZdmL/ewSu1Ycei2PI+CGNH+GQeuecrF5oTslRB1doDLuMAnu7hBquZ42IuI s7FQZ/TRFr9Nq0muw6k+oPCtFlln2YtPebDifdTUWNgf8R0L2pA3BU34AYZ46dVR iFu2I6IHF/T+mZ0jFNOVLXqDLLEGOFGqoqpZClqjIkPY8XoYepbhWO83oE+Dmr4J qb0xFP3/Kpn5hIkDNWOyeCEo5X/g3Huigbxbv2ExR0aLqzZvgDhY0d5IsHNnPi0B dnN7mQBfI0dni2D7FvbjSYDC0WlCl/BfqnSmdj3/uonFkS+24wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYr8WvkfT3Od4y+Qet512+PFhk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZhOGZlZTktYTkyNC0z MGQ1LTg1ZjEtNDFjNzBmNWVjNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLfCKfoIMMWXVqPfn4OcYHEEmlVlXE5xMCOnm+zzLUopY1b91leTELa UWKFic1grPR5MARZob8yBxPBUD1ilAWngxza0HiO6g+8JHo5HaudirB/xv5g4R3A AGFT6FH3i23HP/GRqGCfU/aNdt+gw/wPF0oCWbSiVmirzdQWxtEOSTvxT0SStg1u OlBcKl6SytkckZdKOSGY3iox3YyOGSZDtlb+wRkcG3vQFbodpNyy2/J27aKAi1qI cKXD50g6Ov43A++j3oEK80DULcqUIH1tKBC0zYts4F3zchqZAnKO54kZAdg0sMts 04KHXuj5xaO6D+75I0t7pxJZI7NnLPY= -----END CERTIFICATE-----Generated at Tue Apr 21 19:19:47 2026 by rpki-client