$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa File: 4b38712d-d189-31fc-bc63-0bccffcd7422.roa (raw, json) Hash identifier: Yew8iUA1XfB9boyZDiwmAyOF6zVhsziMqZvTOkBJRoE= Subject key identifier: 31:BE:C5:79:15:35:20:CF:C0:35:BF:6F:48:75:06:A7:2F:59:0B:AD Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584D143D7D0FACE5B8AC8504B120 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 68.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7d:0f:ac:e5:b8:ac:85:04:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4a5ab641-6e61-4a11-a056-ab4ebbc0b9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:32:0d:9a:96:89:ef:ef:a7:d7:76:cb:13: a5:e3:a8:4d:03:ed:48:41:d2:04:98:27:9b:3d:63: 6c:bd:53:be:ec:95:3d:ff:ac:43:b3:35:27:40:96: 44:7f:76:51:f5:45:97:22:75:1a:b3:0b:38:7c:cb: 98:06:29:be:cc:b3:b1:9b:f5:a2:4e:50:7d:3d:02: 1b:71:84:48:23:a9:cc:e1:d8:ce:20:c4:d0:03:f3: 27:f7:83:2b:bc:7e:61:d9:70:6a:aa:6c:a9:6d:d6: a4:2a:ac:54:19:7e:ab:ab:89:b0:ae:61:3c:28:b7: 37:06:a6:f6:ce:6c:f0:08:ee:0e:3a:c3:73:5d:84: 8c:4f:0f:12:a3:24:73:66:f1:40:78:83:95:f0:96: cf:86:82:a1:dc:93:55:43:a9:ec:96:f1:81:11:b9: 3c:98:aa:4a:74:98:0a:d8:d6:49:5c:a3:6f:83:e1: 4a:ad:64:3d:28:9d:28:0a:76:47:59:8a:db:4f:51: 03:fe:e3:d4:ef:04:9c:42:36:6c:4d:cb:b1:5d:51: 9f:2d:e8:ba:fb:7d:f0:dd:f3:ef:f2:13:ef:85:81: 8a:58:2f:39:df:f6:48:e2:0f:bc:ba:26:cc:68:c7: 8a:7f:33:bd:e9:aa:74:b6:fe:67:be:d8:b4:34:cc: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BE:C5:79:15:35:20:CF:C0:35:BF:6F:48:75:06:A7:2F:59:0B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4b38712d-d189-31fc-bc63-0bccffcd7422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2a:d7:ed:2c:3b:a1:99:5e:63:05:8b:73:fd:15:75:ec:df: 4a:30:4b:fc:82:79:bc:78:be:98:dd:7e:f2:5d:76:af:dc:26: ae:e7:13:b5:b4:b0:4f:49:cf:1b:55:6e:b1:bb:8b:67:46:af: a4:a1:65:c8:86:76:b3:9f:29:7c:b7:ec:ab:c6:df:7b:d1:dc: ef:f0:b9:d0:7e:9a:f7:7d:bf:2c:75:3b:b8:26:9b:7d:e7:3b: 19:b4:7a:a2:9e:0a:1f:cb:89:43:70:ee:4b:fb:d9:3a:37:94: 63:4e:0e:3a:a3:2e:d3:74:12:79:3e:fd:61:c0:e7:d6:c7:a9: 0b:56:2f:14:04:d6:79:98:34:e0:d2:b1:be:13:37:02:56:24: 1e:e7:5c:84:7a:2f:bf:8e:d4:3f:09:19:37:ec:f2:cf:05:2a: 1e:14:01:52:69:0b:3b:e2:fc:2b:5c:3b:69:1d:a5:f9:ec:45: db:65:00:61:b2:ca:c9:6e:d3:4e:77:cc:cc:0f:cb:75:93:06: e0:5d:b0:77:9f:46:90:00:79:8f:6c:11:7d:dd:07:0d:f7:33: cc:4f:e4:73:48:a5:b8:db:2b:47:62:1a:95:0f:a6:35:b3:b6: 6e:ec:65:2f:c5:e7:63:3b:cc:35:6d:98:65:0e:8a:f6:f7:2f: 31:03:ef:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPX0PrOW4rIUEsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGE1YWI2NDEtNmU2MS00YTExLWEwNTYtYWI0ZWJiYzBiOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/IyDZqWie/vp9d2yxOl46hNA+1IQdIEmCeb PWNsvVO+7JU9/6xDszUnQJZEf3ZR9UWXInUasws4fMuYBim+zLOxm/WiTlB9PQIb cYRII6nM4djOIMTQA/Mn94MrvH5h2XBqqmypbdakKqxUGX6rq4mwrmE8KLc3Bqb2 zmzwCO4OOsNzXYSMTw8SoyRzZvFAeIOV8JbPhoKh3JNVQ6nslvGBEbk8mKpKdJgK 2NZJXKNvg+FKrWQ9KJ0oCnZHWYrbT1ED/uPU7wScQjZsTcuxXVGfLei6+33w3fPv 8hPvhYGKWC853/ZI4g+8uibMaMeKfzO96ap0tv5nvti0NMxrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG+xXkVNSDPwDW/b0h1BqcvWQutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvNGIzODcxMmQtZDE4OS0z MWZjLWJjNjMtMGJjY2ZmY2Q3NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYq1+0sO6GZXmMFi3P9FXXs30owS/yCebx4vpjdfvJddq/cJq7nE7W0 sE9JzxtVbrG7i2dGr6ShZciGdrOfKXy37KvG33vR3O/wudB+mvd9vyx1O7gmm33n Oxm0eqKeCh/LiUNw7kv72To3lGNODjqjLtN0Enk+/WHA59bHqQtWLxQE1nmYNODS sb4TNwJWJB7nXIR6L7+O1D8JGTfs8s8FKh4UAVJpCzvi/CtcO2kdpfnsRdtlAGGy yslu0053zMwPy3WTBuBdsHefRpAAeY9sEX3dBw33M8xP5HNIpbjbK0diGpUPpjWz tm7sZS/F52M7zDVtmGUOivb3LzED77s= -----END CERTIFICATE-----Generated at Thu Mar 26 01:56:57 2026 by rpki-client