$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07fa524f-f078-3ce7-9e32-d778d0efeb03.roa File: 07fa524f-f078-3ce7-9e32-d778d0efeb03.roa (raw, json) Hash identifier: nEa1FLH4CSZuYxYxXLtQM9VdM2lx3zcm0xpQPjnWZfo= Subject key identifier: 41:66:68:76:77:A8:09:6D:76:0F:A5:B2:0D:02:BA:29:6B:67:D9:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58C1B9998CD0A318A22F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07fa524f-f078-3ce7-9e32-d778d0efeb03.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 67.170.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:c1:b9:99:8c:d0:a3:18:a2:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=540cd222-2d32-4d70-ad3a-f2e9cbde9f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:71:1b:92:40:fe:b1:32:41:04:25:5c:69:ee: 44:67:c2:4c:69:7f:a2:42:f0:6c:ed:5f:a6:4d:23: 85:b7:6d:0d:b3:f7:ab:9e:5a:a5:3e:64:68:e7:ef: 1c:f8:66:ab:fe:50:58:f0:89:45:d4:ed:17:64:f7: 79:e5:ea:d6:f0:c1:58:fd:23:8f:38:32:f5:b8:d5: de:24:18:ea:57:ff:5c:db:75:ab:65:8c:45:d7:a0: 75:57:df:ec:61:2c:46:de:95:f1:6f:04:6c:fa:ad: 14:df:2f:71:16:29:b6:90:a3:c5:a7:ae:00:12:e4: a7:c0:24:2e:63:d7:05:bb:31:7f:40:00:53:2e:d3: 3b:16:92:7a:94:16:ea:5d:aa:2b:c1:b5:5b:02:21: dc:fb:70:b1:50:22:f8:b6:b5:e4:8f:1a:17:6f:a8: d6:fa:40:ce:f7:72:19:1b:98:2b:11:0a:19:48:54: 4e:20:7d:16:55:bb:15:5f:e0:ff:68:30:b0:07:b3: 6e:99:8a:dd:2e:14:03:9e:41:03:de:28:91:86:83: e9:9d:b2:6d:fd:13:a1:eb:7b:23:a6:fd:5c:f7:ec: c3:7e:4c:a3:52:80:0b:b9:2b:41:c5:bf:88:66:8d: df:cc:7a:2a:26:45:48:a6:f6:ad:fe:57:b1:6a:8a: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:66:68:76:77:A8:09:6D:76:0F:A5:B2:0D:02:BA:29:6B:67:D9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07fa524f-f078-3ce7-9e32-d778d0efeb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:02:e2:6d:1d:ea:6b:a4:10:db:d9:11:e0:23:bf:04:7f:76: 72:df:2e:56:7e:a6:5c:7d:14:fe:1b:1d:50:6f:46:50:5e:65: ea:0e:3a:ff:e2:c1:16:4f:5a:bd:41:04:bc:d5:88:f2:43:a9: 1a:28:37:00:b4:a7:69:f8:a7:ae:9d:2e:fa:3d:29:7a:f4:6a: 55:53:fb:6b:f9:3e:0a:2b:05:17:41:d1:d2:ab:20:a7:ef:8d: 81:81:72:f0:ae:e4:f5:50:53:60:94:45:d1:66:f8:2c:9f:3f: 58:d6:42:bc:7e:3f:6c:cc:7f:02:de:d4:6a:82:3d:27:ae:7e: be:d6:bb:17:c8:96:78:c5:c1:3e:ab:30:cd:9d:47:cc:2d:05: f3:84:b5:7f:78:2e:52:7e:b2:e6:60:d5:22:ba:f6:74:cc:77: 13:c1:c6:e0:8f:62:e2:27:29:70:b5:87:8b:b5:97:df:82:73: d5:5f:17:48:3c:aa:40:e3:7a:ec:d4:2c:6c:2b:b5:a9:77:4a: ef:f4:5f:9a:0e:de:5a:dd:4b:2b:c4:33:2d:76:53:49:73:be: 64:30:0e:19:0f:98:4f:0b:76:7c:17:f8:ac:7e:de:b8:e0:91: f7:28:96:6e:50:bc:65:49:1e:4e:66:f0:54:b3:b6:27:49:6a: ca:8f:80:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWMG5mYzQoxiiLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTQwY2QyMjItMmQzMi00ZDcwLWFkM2EtZjJlOWNiZGU5ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHEbkkD+sTJBBCVcae5EZ8JMaX+iQvBs7V+m TSOFt20Ns/ernlqlPmRo5+8c+Gar/lBY8IlF1O0XZPd55erW8MFY/SOPODL1uNXe JBjqV/9c23WrZYxF16B1V9/sYSxG3pXxbwRs+q0U3y9xFim2kKPFp64AEuSnwCQu Y9cFuzF/QABTLtM7FpJ6lBbqXaorwbVbAiHc+3CxUCL4trXkjxoXb6jW+kDO93IZ G5grEQoZSFROIH0WVbsVX+D/aDCwB7NumYrdLhQDnkED3iiRhoPpnbJt/ROh63sj pv1c9+zDfkyjUoALuStBxb+IZo3fzHoqJkVIpvat/lexaopikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFmaHZ3qAltdg+lsg0CuilrZ9mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdmYTUyNGYtZjA3OC0z Y2U3LTllMzItZDc3OGQwZWZlYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6rkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIC4m0d6mukENvZEeAjvwR/dnLfLlZ+plx9FP4bHVBvRlBeZeoOOv/i wRZPWr1BBLzViPJDqRooNwC0p2n4p66dLvo9KXr0alVT+2v5PgorBRdB0dKrIKfv jYGBcvCu5PVQU2CURdFm+CyfP1jWQrx+P2zMfwLe1GqCPSeufr7WuxfIlnjFwT6r MM2dR8wtBfOEtX94LlJ+suZg1SK69nTMdxPBxuCPYuInKXC1h4u1l9+Cc9VfF0g8 qkDjeuzULGwrtal3Su/0X5oO3lrdSyvEMy12U0lzvmQwDhkPmE8LdnwX+Kx+3rjg kfcolm5QvGVJHk5m8FSztidJasqPgGk= -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:27 2026 by rpki-client