$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa File: 95b95446-035a-3b2b-aefd-734f3fb5f220.roa (raw, json) Hash identifier: O5frti7YxZbWFZ466Hfuhi0yIZu003thshOlKnBIop8= Subject key identifier: D2:DA:B7:BF:C1:BF:96:6F:36:70:E6:0C:49:BA:0E:A9:6A:0A:D9:F5 Certificate issuer: /CN=d47a94a4-ac39-4383-91f3-389070353c6d Certificate serial: 010D0C9F4328584D44FA4115B7DCDE753824C080 Authority key identifier: 3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 397293 IP address blocks: 68.69.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:41:15:b7:dc:de:75:38:24:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d47a94a4-ac39-4383-91f3-389070353c6d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0a548dfc-9cf5-4763-8def-1a84f17fa016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:a3:a7:7f:4f:25:be:84:6e:c6:24:ad:81: 40:a0:91:cc:6a:c4:d7:11:29:71:f1:bc:70:62:41: 2b:70:8a:a0:2b:11:18:66:5d:12:ac:d6:e2:90:59: 9f:49:5e:7d:6c:d7:96:38:d6:06:53:56:3e:ad:06: 6e:59:ef:cb:85:92:01:9e:93:be:87:4e:98:33:c5: 20:c9:85:82:f3:24:13:18:4c:a6:c8:3e:68:5b:98: c8:7f:a3:b9:3c:24:c1:76:98:a7:a2:d9:cd:46:35: c4:95:f9:5f:8a:14:67:af:10:8f:35:4d:2d:fe:3f: 9a:8f:a0:60:18:e5:59:1f:13:7c:c1:fe:2b:5d:73: ca:6d:54:f2:97:b0:18:e4:c9:59:b2:c7:4f:a6:33: 67:5a:46:7e:df:25:d2:f4:0f:c3:89:f0:1e:02:45: b4:bd:15:69:e8:07:de:a2:26:60:ce:a2:f5:d5:84: f6:5f:66:51:3e:5e:bf:9e:a7:f4:7f:54:ab:14:7c: 34:63:32:70:9c:37:9f:14:5a:db:cc:6b:69:71:d5: 0a:0d:a2:b2:a4:76:da:ee:07:c1:db:81:c6:3a:66: f9:18:b6:5a:2e:3b:a5:2e:11:1e:8c:a9:20:45:27: a2:d5:8c:c2:38:d5:4b:d5:c6:4f:b2:18:0f:aa:b9: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DA:B7:BF:C1:BF:96:6F:36:70:E6:0C:49:BA:0E:A9:6A:0A:D9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/95b95446-035a-3b2b-aefd-734f3fb5f220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d/d47a94a4-ac39-4383-91f3-389070353c6d.crl X509v3 Authority Key Identifier: keyid:3E:0C:D4:A2:7F:33:8F:7F:84:15:BB:CA:33:D1:2E:95:B9:EA:73:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d47a94a4-ac39-4383-91f3-389070353c6d.cer sbgp-ipAddrBlock: critical IPv4: 68.69.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:26:51:e7:af:52:93:2e:83:a0:0b:dd:13:ca:08:31:46:7d: 6b:8f:49:5d:87:34:cd:6b:c1:21:2f:87:4b:07:78:5e:24:2d: dc:f8:8e:be:b4:15:7d:2d:47:11:06:b0:2f:e8:0a:de:5b:55: 2e:0b:f3:8e:19:3b:c0:c4:4a:37:95:0c:b0:44:49:03:ff:23: 7b:f4:cd:08:8c:82:f9:ae:1b:1f:f3:a7:82:6b:26:bd:e1:e7: 31:2d:4f:90:94:22:94:ce:24:fb:ad:38:ee:a6:f3:0f:94:64: b0:a4:61:42:fa:f3:3e:ab:d9:a0:9c:3b:dc:2d:34:32:c4:8e: f7:70:05:e4:f6:5b:7d:ba:e9:b7:1a:ea:b1:7b:cb:29:cb:82: 50:f5:04:88:ea:43:c6:49:0d:ae:65:9c:58:4d:65:02:fc:f0: 8a:21:d5:3b:5e:f0:00:d8:37:a4:8a:07:81:f2:0b:07:d8:c1: 41:aa:7a:87:ff:63:fd:65:13:bc:3c:ee:18:ee:03:62:38:2b: 10:22:6a:60:0d:97:69:34:89:89:74:5a:ea:d0:62:d5:32:f5: a9:64:ab:2e:d5:d2:8f:0b:bc:5b:2e:9c:13:53:65:58:c0:2f: 5f:dd:d6:aa:96:82:64:0e:1b:50:39:53:13:ac:ac:71:15:8f: 49:e0:0e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kEVt9zedTgkwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ3YTk0YTQtYWMzOS00MzgzLTkxZjMtMzg5MDcwMzUz YzZkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGE1NDhkZmMtOWNmNS00NzYzLThkZWYtMWE4NGYxN2ZhMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTGjp39PJb6EbsYkrYFAoJHMasTXESlx8bxw YkErcIqgKxEYZl0SrNbikFmfSV59bNeWONYGU1Y+rQZuWe/LhZIBnpO+h06YM8Ug yYWC8yQTGEymyD5oW5jIf6O5PCTBdpinotnNRjXElflfihRnrxCPNU0t/j+aj6Bg GOVZHxN8wf4rXXPKbVTyl7AY5MlZssdPpjNnWkZ+3yXS9A/DifAeAkW0vRVp6Afe oiZgzqL11YT2X2ZRPl6/nqf0f1SrFHw0YzJwnDefFFrbzGtpcdUKDaKypHba7gfB 24HGOmb5GLZaLjulLhEejKkgRSei1YzCONVL1cZPshgPqrksswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLat7/Bv5ZvNnDmDEm6DqlqCtn1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDdh OTRhNC1hYzM5LTQzODMtOTFmMy0zODkwNzAzNTNjNmQvOTViOTU0NDYtMDM1YS0z YjJiLWFlZmQtNzM0ZjNmYjVmMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQ3YTk0YTQtYWMzOS00MzgzLTkx ZjMtMzg5MDcwMzUzYzZkL2Q0N2E5NGE0LWFjMzktNDM4My05MWYzLTM4OTA3MDM1 M2M2ZC5jcmwwHwYDVR0jBBgwFoAUPgzUon8zj3+EFbvKM9Eulbnqc40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDdhOTRhNC1hYzM5LTQzODMtOTFmMy0zODkw NzAzNTNjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwmUeevUpMug6AL3RPKCDFGfWuPSV2HNM1rwSEvh0sHeF4kLdz4jr60 FX0tRxEGsC/oCt5bVS4L844ZO8DESjeVDLBESQP/I3v0zQiMgvmuGx/zp4JrJr3h 5zEtT5CUIpTOJPutOO6m8w+UZLCkYUL68z6r2aCcO9wtNDLEjvdwBeT2W3266bca 6rF7yynLglD1BIjqQ8ZJDa5lnFhNZQL88Ioh1Tte8ADYN6SKB4HyCwfYwUGqeof/ Y/1lE7w87hjuA2I4KxAiamANl2k0iYl0WurQYtUy9alkqy7V0o8LvFsunBNTZVjA L1/d1qqWgmQOG1A5UxOsrHEVj0ngDqs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:09 2026 by rpki-client