$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa File: 8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json) Hash identifier: fKpB4q0IGRph2KOmmS+52LNOGu5SJlMWC4uJlGcf+yQ= Subject key identifier: DA:ED:8B:69:C4:4D:86:78:9A:31:60:54:BE:23:EC:61:99:18:E6:04 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC4578C68461B08F3922B340 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 68.68.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:78:c6:84:61:b0:8f:39:22:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=27bc3d23-a6a9-4715-a308-831d1d7007fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:51:8d:f9:20:8e:11:f4:c8:85:cf:a4:d2: d9:15:0e:4a:fc:54:77:6b:26:dc:5f:b2:4d:1f:6b: 5c:7c:e7:93:e6:3f:d2:2e:30:12:c3:ed:ff:dc:b2: 09:09:3e:e8:f1:bf:72:39:68:b7:6c:d3:bd:29:8d: 5e:17:86:d7:06:41:23:2a:36:35:79:cd:ec:4d:e0: 72:9d:1f:1f:bd:d6:99:18:29:f0:07:f2:3b:11:c1: 6b:20:5c:cb:7f:6e:23:9c:fd:f1:bc:32:de:9b:01: f4:99:8a:e6:ea:2e:b9:12:08:53:cd:e8:2c:5e:34: fe:3c:25:2c:bf:2b:c8:73:f1:3e:08:6d:60:0e:6a: ce:46:6a:53:0a:ef:12:26:5c:fc:af:bb:9a:a9:c8: 92:14:b5:3e:cc:c1:0d:41:b6:cf:7f:02:f7:95:d7: 05:bc:b4:7c:09:3b:d7:b6:65:12:99:e9:bc:cb:50: 06:0b:83:42:54:85:f6:a0:54:d7:42:47:87:9c:fc: f5:8f:db:c5:03:e0:19:4c:45:10:6a:4d:03:87:07: 0d:e5:72:5c:a0:20:a1:37:e7:f5:72:b5:08:58:58: 92:1d:cb:6f:70:5f:d9:6a:e6:d2:53:92:c5:28:a8: 4a:f5:86:99:cb:8b:c6:d3:15:cd:ec:c2:4d:43:c7: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:ED:8B:69:C4:4D:86:78:9A:31:60:54:BE:23:EC:61:99:18:E6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:47:b0:06:1e:66:53:52:db:d3:cb:c3:dc:42:cb:99:e9:9b: da:b1:4a:9b:82:47:5e:52:cb:f6:51:68:05:ca:33:5a:f6:d0: e4:a5:2d:7c:12:c0:a4:1b:4e:9d:b5:46:a2:b1:1a:1a:0f:bf: 2d:fe:90:36:ef:e3:94:5c:ab:36:e6:a6:33:fe:a5:97:e8:02: 6a:cf:08:06:7d:2d:96:f1:33:0a:d2:ac:89:80:c4:06:48:00: 76:43:37:46:f3:5e:bb:57:0e:13:85:90:f9:25:30:52:08:e6: 8e:3b:dc:32:dd:46:e8:e7:2b:87:5d:4e:ae:00:60:f2:48:f6: 6d:92:83:07:20:7a:0d:9c:29:75:93:70:9e:14:22:32:f2:80: 96:a0:8d:cd:82:d7:40:f0:a1:3f:ab:9c:14:3f:15:ea:3e:53: 89:6e:5c:5e:61:78:58:19:3b:b4:d7:af:74:1d:d8:77:eb:a2: c3:83:2a:41:c2:48:3e:e7:28:58:8a:50:ae:fd:5a:6a:3d:2a: 3d:3b:7d:a7:05:5c:d4:4f:6a:60:6a:36:2c:d4:06:1f:e2:3c: 24:ef:5f:1e:bb:75:52:1d:0a:21:ff:60:ca:b3:5f:c4:c3:6c: 4d:9f:4c:ad:01:1b:b1:1f:c2:56:63:59:04:3a:b3:30:43:69: 18:99:67:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXjGhGGwjzkis0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MjdiYzNkMjMtYTZhOS00NzE1LWEzMDgtODMxZDFkNzAwN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg11RjfkgjhH0yIXPpNLZFQ5K/FR3aybcX7JN H2tcfOeT5j/SLjASw+3/3LIJCT7o8b9yOWi3bNO9KY1eF4bXBkEjKjY1ec3sTeBy nR8fvdaZGCnwB/I7EcFrIFzLf24jnP3xvDLemwH0mYrm6i65EghTzegsXjT+PCUs vyvIc/E+CG1gDmrORmpTCu8SJlz8r7uaqciSFLU+zMENQbbPfwL3ldcFvLR8CTvX tmUSmem8y1AGC4NCVIX2oFTXQkeHnPz1j9vFA+AZTEUQak0DhwcN5XJcoCChN+f1 crUIWFiSHctvcF/ZaubSU5LFKKhK9YaZy4vG0xXN7MJNQ8dG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrti2nETYZ4mjFgVL4j7GGZGOYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvOGY4M2EwMjUtNGMyMC0z ZjE3LThkNzgtZmU2MTQyMjZkZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRESQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9HsAYeZlNS29PLw9xCy5npm9qxSpuCR15Sy/ZRaAXKM1r20OSlLXwS wKQbTp21RqKxGhoPvy3+kDbv45RcqzbmpjP+pZfoAmrPCAZ9LZbxMwrSrImAxAZI AHZDN0bzXrtXDhOFkPklMFII5o473DLdRujnK4ddTq4AYPJI9m2Sgwcgeg2cKXWT cJ4UIjLygJagjc2C10DwoT+rnBQ/Feo+U4luXF5heFgZO7TXr3Qd2HfrosODKkHC SD7nKFiKUK79Wmo9Kj07facFXNRPamBqNizUBh/iPCTvXx67dVIdCiH/YMqzX8TD bE2fTK0BG7EfwlZjWQQ6szBDaRiZZ4w= -----END CERTIFICATE-----Generated at Fri May 1 17:04:42 2026 by rpki-client