$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa File: 7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa (raw, json) Hash identifier: OR6cOlP1KKCaEzGbBVRkWTpZIGozMInImKxAj2aHCmA= Subject key identifier: 42:4E:95:9E:44:C8:E8:FF:BF:F5:F6:3A:C4:A9:1C:48:88:AD:BD:79 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D91C01200AA445EAD319E2470 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 53291 IP address blocks: 68.168.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:12:00:aa:44:5e:ad:31:9e:24:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=ce1a290e-fecf-42e1-89c7-600a1c90c170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:11:10:6c:4d:30:c5:29:af:74:b5:b5:7c: 77:bb:60:f0:88:39:d0:fa:4d:57:cc:66:fb:08:6f: 07:7d:0e:4e:ae:13:fa:1c:98:2f:97:82:d1:cd:95: f5:21:7c:42:50:d8:ea:fd:9f:4e:63:71:56:7f:31: e8:bb:c0:07:2c:9e:c8:da:75:41:eb:0d:f5:74:40: 02:9d:42:19:2e:a4:a0:7e:4c:d9:e5:44:9c:10:67: 20:29:e1:57:07:98:43:3f:3f:fe:5d:a1:f6:7d:36: b4:d5:99:c0:4f:82:ed:9f:7a:cf:5d:c8:23:33:26: c3:cc:1a:6b:ca:fc:2c:b5:ea:d3:38:6c:19:f1:0e: 47:04:40:f7:e1:c1:f6:26:a2:20:f6:3b:5e:30:63: ba:16:92:d5:a5:9a:80:74:ad:02:34:10:69:60:cc: 36:c8:36:d0:b9:69:2b:15:89:20:16:7c:2f:23:02: 00:d1:67:c1:c4:1a:26:4d:66:c0:0a:ca:53:80:ba: 55:44:ef:e1:4b:65:f7:47:81:53:ec:b8:25:2c:32: f6:21:8f:0f:5f:6b:0f:d5:7d:7e:cb:ff:30:85:87: 0a:62:f4:26:cb:c7:16:99:c2:f4:f1:97:10:63:d3: e6:e1:f7:25:7d:d4:cd:86:cc:14:26:59:83:37:d5: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:95:9E:44:C8:E8:FF:BF:F5:F6:3A:C4:A9:1C:48:88:AD:BD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/7f033aa1-0f64-3d37-895b-8a4c9a9473d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 68.168.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:86:03:32:85:c2:9b:36:7a:43:d1:0a:e0:f3:27:fd:18:5f: 51:d4:18:0b:15:7f:ad:53:d3:77:c8:a8:4f:f7:ab:e0:f3:54: 75:4d:c6:27:c6:ce:5b:62:31:82:3e:ce:68:1e:f6:2b:d4:2f: dd:53:ff:42:9a:5c:f2:3a:cb:a3:33:25:ab:d6:2c:b2:21:0b: 74:12:ca:3e:55:23:4c:e6:b7:11:99:65:fc:25:29:cd:e2:5a: ca:55:a4:b5:a3:af:45:9d:14:96:a4:70:1c:9a:d8:f6:48:62: ca:ce:50:43:65:01:35:ab:78:95:e7:76:5d:54:3d:b3:9e:cc: 72:50:2a:97:f0:29:f8:a5:d8:8d:5a:89:fb:04:d5:44:52:26: 2d:e9:92:5d:2c:f9:f0:f4:7e:9a:14:ad:73:6d:2f:3c:17:da: 75:75:46:77:fa:94:83:8f:83:57:dd:47:e9:59:af:50:b1:26: 72:d7:63:20:e7:5a:bb:76:b4:32:92:7f:5d:bb:e5:68:42:40: 6c:83:70:8d:5d:ef:aa:09:4d:b5:0e:88:3e:34:22:c1:25:a6: f4:bc:4f:db:25:99:67:ff:d1:44:95:e8:ab:f0:9f:e3:7e:20: f3:15:72:0c:26:fe:c5:84:de:e2:55:2c:ab:df:a4:f4:f5:4c: a3:88:91:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBIAqkRerTGeJHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Y2UxYTI5MGUtZmVjZi00MmUxLTg5YzctNjAwYTFjOTBjMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnEREGxNMMUpr3S1tXx3u2DwiDnQ+k1XzGb7 CG8HfQ5OrhP6HJgvl4LRzZX1IXxCUNjq/Z9OY3FWfzHou8AHLJ7I2nVB6w31dEAC nUIZLqSgfkzZ5UScEGcgKeFXB5hDPz/+XaH2fTa01ZnAT4Ltn3rPXcgjMybDzBpr yvwsterTOGwZ8Q5HBED34cH2JqIg9jteMGO6FpLVpZqAdK0CNBBpYMw2yDbQuWkr FYkgFnwvIwIA0WfBxBomTWbACspTgLpVRO/hS2X3R4FT7LglLDL2IY8PX2sP1X1+ y/8whYcKYvQmy8cWmcL08ZcQY9Pm4fclfdTNhswUJlmDN9U/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJOlZ5EyOj/v/X2OsSpHEiIrb15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvN2YwMzNhYTEtMGY2NC0z ZDM3LTg5NWItOGE0YzlhOTQ3M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKGAzKFwps2ekPRCuDzJ/0YX1HUGAsVf61T03fIqE/3q+DzVHVNxifG zltiMYI+zmge9ivUL91T/0KaXPI6y6MzJavWLLIhC3QSyj5VI0zmtxGZZfwlKc3i WspVpLWjr0WdFJakcBya2PZIYsrOUENlATWreJXndl1UPbOezHJQKpfwKfil2I1a ifsE1URSJi3pkl0s+fD0fpoUrXNtLzwX2nV1Rnf6lIOPg1fdR+lZr1CxJnLXYyDn Wrt2tDKSf1275WhCQGyDcI1d76oJTbUOiD40IsElpvS8T9slmWf/0USV6Kvwn+N+ IPMVcgwm/sWE3uJVLKvfpPT1TKOIkRo= -----END CERTIFICATE-----Generated at Wed Apr 22 08:33:07 2026 by rpki-client