$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a4f209-1b32-3410-85aa-a1b4a6aa84be.roa File: 14a4f209-1b32-3410-85aa-a1b4a6aa84be.roa (raw, json) Hash identifier: ewIzfQZpjmtK+Pux/IQBz0ZZzHksZzrMRucW9eBBt04= Subject key identifier: E9:6F:5F:0B:ED:CB:8F:34:47:60:B3:C4:8B:66:F2:80:78:4E:6F:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B7C11DC8BBC76FA4D4180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a4f209-1b32-3410-85aa-a1b4a6aa84be.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 67.167.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:7c:11:dc:8b:bc:76:fa:4d:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=3f5453bb-a834-4224-9421-a3d8654c1b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:23:22:f9:c8:34:b4:f1:ee:ef:bd:94:80: d6:a4:cb:2d:56:d5:b9:4f:a2:b3:4f:0a:51:a7:ef: a6:77:e7:a6:3b:11:39:40:5e:9d:81:35:f1:58:f9: f9:5a:ad:53:0e:f8:8a:09:d9:02:68:fa:81:31:02: cf:b6:55:9b:84:d5:99:ba:cf:a6:c8:76:82:f0:e4: fd:9c:e3:98:f4:b9:0f:07:63:71:e8:f8:21:90:3b: b4:e1:60:f5:93:ca:93:75:68:24:6b:d5:99:9e:ba: a9:4b:6e:b9:49:0f:50:89:87:64:7f:d6:b4:c2:30: 4c:ec:69:e0:84:8c:0a:6e:e9:9a:63:3b:cd:bc:93: 0f:44:7e:be:38:30:59:a3:ac:14:b9:09:5c:29:8e: e4:e1:bb:d3:3d:cf:e2:2e:bf:67:5c:c3:48:79:97: 2e:8a:ce:69:86:64:0a:21:f0:f5:eb:b9:02:c9:5f: 56:74:84:84:b6:5d:65:34:5a:ba:23:a2:b5:95:76: 98:0d:59:13:15:80:08:3c:ea:a3:94:a0:d8:2b:2d: 2d:d9:18:53:0d:16:47:56:58:28:8c:46:09:5f:ee: a9:1f:9d:d8:3b:3c:69:1b:b5:31:7e:7c:ca:d1:21: 24:14:1d:0f:e6:42:38:50:91:9e:33:f0:c3:88:f4: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:5F:0B:ED:CB:8F:34:47:60:B3:C4:8B:66:F2:80:78:4E:6F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/14a4f209-1b32-3410-85aa-a1b4a6aa84be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:f8:09:77:b6:2e:ea:17:ae:cd:58:16:8a:bc:88:26:61: 9e:b7:85:ee:21:b2:07:b3:77:de:3c:ab:a1:35:8d:47:2f:b5: 5b:26:d8:da:17:ad:1b:96:a9:34:c1:45:2e:dd:60:45:24:1f: c2:db:91:c2:81:86:01:1e:89:3d:44:eb:15:51:61:f6:7e:05: 39:2d:14:f9:a3:c4:e1:2f:36:42:0f:a1:8c:2d:fb:be:de:03: 8f:a5:7a:96:d2:44:bb:ab:dc:eb:c9:a2:9a:e1:31:14:30:96: cc:fc:1d:96:f3:a4:ef:93:ed:60:e5:cf:ff:11:24:5c:3a:c1: 10:c0:07:02:d9:f0:0c:3d:1f:5b:ae:c3:1e:bf:23:4a:48:2d: 7c:b8:34:c0:d3:aa:38:e1:6e:99:15:16:da:27:ff:a7:7b:d5: 3a:2b:6a:c5:f7:b2:be:d4:3a:76:8f:50:b5:37:19:77:25:b5: a3:a2:0d:71:11:0e:f7:72:18:a8:62:14:94:b6:63:ce:f6:61: b0:b2:96:f6:95:30:54:6c:c8:d1:44:f5:60:60:82:f7:83:ec: 82:cc:58:41:ca:95:76:40:f7:6d:04:a1:ca:36:a7:99:bb:b3: 2d:fe:00:f6:1c:f2:b7:6c:47:87:d4:96:19:74:82:0e:17:10: 83:3f:f0:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW3wR3Iu8dvpNQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk M2Y1NDUzYmItYTgzNC00MjI0LTk0MjEtYTNkODY1NGMxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxgjIvnINLTx7u+9lIDWpMstVtW5T6KzTwpR p++md+emOxE5QF6dgTXxWPn5Wq1TDviKCdkCaPqBMQLPtlWbhNWZus+myHaC8OT9 nOOY9LkPB2Nx6PghkDu04WD1k8qTdWgka9WZnrqpS265SQ9QiYdkf9a0wjBM7Gng hIwKbumaYzvNvJMPRH6+ODBZo6wUuQlcKY7k4bvTPc/iLr9nXMNIeZcuis5phmQK IfD167kCyV9WdISEtl1lNFq6I6K1lXaYDVkTFYAIPOqjlKDYKy0t2RhTDRZHVlgo jEYJX+6pH53YOzxpG7UxfnzK0SEkFB0P5kI4UJGeM/DDiPTUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlvXwvty480R2CzxItm8oB4Tm/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTRhNGYyMDktMWIzMi0z NDEwLTg1YWEtYTFiNGE2YWE4NGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLO+Al3ti7qF67NWBaKvIgmYZ63he4hsgezd948q6E1jUcvtVsm2NoX rRuWqTTBRS7dYEUkH8LbkcKBhgEeiT1E6xVRYfZ+BTktFPmjxOEvNkIPoYwt+77e A4+lepbSRLur3OvJoprhMRQwlsz8HZbzpO+T7WDlz/8RJFw6wRDABwLZ8Aw9H1uu wx6/I0pILXy4NMDTqjjhbpkVFton/6d71TorasX3sr7UOnaPULU3GXcltaOiDXER DvdyGKhiFJS2Y872YbCylvaVMFRsyNFE9WBggveD7ILMWEHKlXZA920Eoco2p5m7 sy3+APYc8rdsR4fUlhl0gg4XEIM/8Pg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:46:53 2026 by rpki-client