$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa File: fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa (raw, json) Hash identifier: 7jB1zSTCLpQipBgVj19rvQeSV7igLz44RB3u+eYB2fA= Subject key identifier: 3C:D1:4A:8B:5F:39:3D:56:A1:2E:AE:98:21:97:F5:03:BE:24:15:A2 Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Certificate serial: 010D0C9F4328584DAC4578D751436F9326E23700 Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 394285 IP address blocks: 68.68.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:78:d7:51:43:6f:93:26:e2:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=f4babd29-2811-484f-b2ab-29cb587688aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:06:14:2c:46:48:13:32:a8:82:2f:20:40:f4: 7b:c7:77:0b:87:43:04:89:8e:a6:a5:6a:90:ef:d8: 5b:0c:0b:d4:cf:43:a2:8d:0a:91:78:e6:24:0b:25: 64:ff:68:4b:f6:f6:8c:f6:25:d3:d2:74:87:75:29: ce:a5:dc:7e:7b:71:24:43:ea:f2:08:33:df:6f:90: 37:71:70:f2:b0:9e:6e:0c:ad:aa:78:3c:f4:a9:94: 00:64:4b:49:58:8a:a7:c6:5f:5a:3e:8d:84:8e:f6: b7:7e:58:95:a4:41:d3:bf:1c:dd:f0:51:4f:86:c2: 33:dc:c4:5a:83:dc:d5:28:7c:d5:83:c8:ee:ed:72: 8b:6c:85:b1:95:b4:09:29:02:94:e8:69:33:91:0d: eb:9b:31:44:a4:d7:d6:be:8b:8d:c2:2e:00:c0:a1: 12:71:bd:35:8f:31:25:2d:f9:5a:09:32:34:25:47: 35:fb:bb:08:d1:8d:34:27:ce:d5:d0:7a:19:45:1a: cf:9f:4d:fb:3d:57:56:7b:8d:e8:ab:a5:63:6e:b6: f5:ca:f1:54:55:bb:9f:d7:ff:aa:13:95:b9:5c:3c: fb:4a:01:76:9d:3e:41:fa:cd:ff:cc:5a:6a:28:2a: 1b:18:8c:3b:60:bf:36:16:7b:f8:c9:a1:be:54:ac: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D1:4A:8B:5F:39:3D:56:A1:2E:AE:98:21:97:F5:03:BE:24:15:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/fde34107-f3bb-3076-bcac-4fbfc88bcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl X509v3 Authority Key Identifier: keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer sbgp-ipAddrBlock: critical IPv4: 68.68.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:75:e9:e8:c3:66:74:97:c2:08:07:7f:b5:6f:9a:89:12:fd: 91:b4:ea:0a:e4:66:a2:fe:fa:c6:53:35:fd:76:89:2f:bd:ed: 46:a8:b8:1a:05:8c:a0:7f:95:e3:64:1e:bf:89:2c:37:66:69: e0:86:29:38:0b:a2:f2:26:25:fa:c5:72:7d:3e:30:b2:6e:38: 9f:1f:be:e6:a6:56:74:04:be:37:da:ea:f6:38:78:d5:2d:de: 8e:98:34:f0:5a:02:cb:a9:e4:df:aa:e0:68:65:8b:a1:9b:cc: 8b:71:b1:3a:c9:3f:38:01:91:c9:91:e7:44:f1:bf:b7:28:b0: e6:97:ae:fa:98:f5:bf:39:73:f8:bb:95:40:e3:b4:37:5d:96: c9:5e:37:38:3c:d5:fd:6d:50:fe:18:8a:e8:b0:42:f0:1a:80: 42:8f:91:10:d5:88:02:82:aa:4f:3c:83:ec:8e:0e:c7:e5:8d: b7:93:19:a9:25:f0:91:74:70:ac:2d:f0:62:ec:ab:76:2f:9d: 97:0f:77:94:d5:a4:2a:17:46:e4:2f:7e:4c:36:da:68:6b:70: 4d:1a:fc:44:ec:40:f1:a1:78:34:de:82:16:02:0c:f7:2b:a5: 3c:19:05:d1:2f:94:a8:27:d3:e1:69:3f:88:ae:c6:06:c0:22: c9:d3:30:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXjXUUNvkybiNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4 OGEwMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZjRiYWJkMjktMjgxMS00ODRmLWIyYWItMjljYjU4NzY4OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AYULEZIEzKogi8gQPR7x3cLh0MEiY6mpWqQ 79hbDAvUz0OijQqReOYkCyVk/2hL9vaM9iXT0nSHdSnOpdx+e3EkQ+ryCDPfb5A3 cXDysJ5uDK2qeDz0qZQAZEtJWIqnxl9aPo2Ejva3fliVpEHTvxzd8FFPhsIz3MRa g9zVKHzVg8ju7XKLbIWxlbQJKQKU6GkzkQ3rmzFEpNfWvouNwi4AwKEScb01jzEl LflaCTI0JUc1+7sI0Y00J87V0HoZRRrPn037PVdWe43oq6Vjbrb1yvFUVbuf1/+q E5W5XDz7SgF2nT5B+s3/zFpqKCobGIw7YL82Fnv4yaG+VKwVpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzRSotfOT1WoS6umCGX9QO+JBWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvZmRlMzQxMDctZjNiYi0z MDc2LWJjYWMtNGZiZmM4OGJjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRESYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF16ejDZnSXwggHf7VvmokS/ZG06grkZqL++sZTNf12iS+97UaouBoF jKB/leNkHr+JLDdmaeCGKTgLovImJfrFcn0+MLJuOJ8fvuamVnQEvjfa6vY4eNUt 3o6YNPBaAsup5N+q4Ghli6GbzItxsTrJPzgBkcmR50Txv7cosOaXrvqY9b85c/i7 lUDjtDddlsleNzg81f1tUP4YiuiwQvAagEKPkRDViAKCqk88g+yODsfljbeTGakl 8JF0cKwt8GLsq3YvnZcPd5TVpCoXRuQvfkw22mhrcE0a/ETsQPGheDTeghYCDPcr pTwZBdEvlKgn0+FpP4iuxgbAIsnTMJA= -----END CERTIFICATE-----Generated at Fri May 1 17:04:33 2026 by rpki-client