$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/158fc234-f90d-39b3-8f63-2dd18c782ff0.roa File: 158fc234-f90d-39b3-8f63-2dd18c782ff0.roa (raw, json) Hash identifier: hiWf83kyilsmMzG7DbxLBS/gyMmPTR3xVG6HzoC//9E= Subject key identifier: 39:19:16:EA:A1:07:6B:63:BC:1B:B4:DE:6C:E0:D2:71:5E:46:9D:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB901A30C68A55B689A300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/158fc234-f90d-39b3-8f63-2dd18c782ff0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.189.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:90:1a:30:c6:8a:55:b6:89:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=17441a17-b9e3-4f49-a29c-c1b4a81494e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:0d:af:79:0e:4d:2c:b9:d0:c7:60:11:6d: 5b:2e:c7:bd:83:6e:75:f1:dc:81:68:b9:ea:94:a7: f7:73:d0:ad:3b:ee:1e:28:e3:ea:bd:1b:12:d9:e9: a1:eb:0a:0f:d7:2b:53:22:58:de:60:1b:cd:d7:07: 3d:14:81:de:c7:2a:0e:0a:a1:06:8a:9f:49:a8:22: 67:36:20:dc:e9:2e:f8:8f:1f:77:55:09:a0:d9:75: 5b:f6:ca:dd:5f:2e:57:d1:93:bd:7c:4b:9f:3d:ae: b1:b5:19:bb:df:db:c7:78:91:09:02:6d:21:a2:81: 1d:2c:d2:20:34:24:ad:d0:b6:84:6b:f9:7b:24:ca: 88:72:0b:af:c9:3f:2f:27:3a:71:24:16:3c:fa:57: 58:36:26:1b:14:69:05:fd:bb:19:47:47:53:a5:7a: a3:63:8a:bc:4b:f9:d0:39:0a:67:52:dd:e9:a3:1e: 3c:71:56:22:3b:6a:2c:08:ec:d1:22:62:43:0c:de: 6c:c7:89:d1:5a:71:ba:56:d2:de:9f:bf:ae:88:82: 1d:4e:18:ad:79:b2:46:5a:f0:c0:f3:70:9f:af:fe: fa:86:1a:6a:50:54:84:62:f2:3e:15:e7:ab:b0:4a: b6:69:71:82:da:cd:49:ee:e0:eb:5b:06:48:a6:5f: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:19:16:EA:A1:07:6B:63:BC:1B:B4:DE:6C:E0:D2:71:5E:46:9D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/158fc234-f90d-39b3-8f63-2dd18c782ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:54:f0:69:3e:69:03:cd:3e:5c:ca:04:2b:b2:ba:00:01:54: dc:dd:3c:a4:af:34:f1:c9:8c:a3:60:15:91:5c:84:d0:7e:30: 10:2e:4d:44:b1:57:e5:b5:d8:e2:b0:40:83:53:48:b8:ee:2c: 17:8e:36:80:1f:d7:26:25:73:9e:bf:46:42:ea:4d:93:58:b9: 74:b2:94:0b:44:7d:1e:ba:69:99:bb:e2:1a:38:9b:89:da:55: 1c:67:90:5c:95:0d:dd:fc:69:79:48:cd:dd:3b:c0:f3:dc:01: 3a:2f:26:45:a9:4c:52:91:20:f0:23:fd:6e:9f:b4:0f:e3:5b: 63:3e:0c:1b:3a:90:f9:78:b5:0d:db:c9:48:07:84:7f:2e:42: 0e:bf:38:19:c9:dc:ef:a9:60:44:4e:67:89:70:2a:c8:56:ea: dc:de:8b:19:8d:a3:dd:6a:6a:c6:4a:61:25:9e:91:a5:3d:53: 99:41:f0:47:ad:b7:c7:22:7a:7e:76:22:8c:61:c9:ba:7e:f0: 85:77:f5:1b:c8:a1:9c:e3:67:78:aa:e6:bb:30:b3:29:32:a5: 65:36:10:47:5d:f2:92:17:f5:bf:51:60:df:4f:4e:cc:c2:62: 88:3b:0a:b5:e4:2d:ad:60:b8:51:02:ec:e2:ad:12:ab:3a:36: 17:b0:33:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5AaMMaKVbaJowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTc0NDFhMTctYjllMy00ZjQ5LWEyOWMtYzFiNGE4MTQ5NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsNr3kOTSy50MdgEW1bLse9g2518dyBaLnq lKf3c9CtO+4eKOPqvRsS2emh6woP1ytTIljeYBvN1wc9FIHexyoOCqEGip9JqCJn NiDc6S74jx93VQmg2XVb9srdXy5X0ZO9fEufPa6xtRm739vHeJEJAm0hooEdLNIg NCSt0LaEa/l7JMqIcguvyT8vJzpxJBY8+ldYNiYbFGkF/bsZR0dTpXqjY4q8S/nQ OQpnUt3pox48cVYiO2osCOzRImJDDN5sx4nRWnG6VtLen7+uiIIdThitebJGWvDA 83Cfr/76hhpqUFSEYvI+FeersEq2aXGC2s1J7uDrWwZIpl8eZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkZFuqhB2tjvBu03mzg0nFeRp2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTU4ZmMyMzQtZjkwZC0z OWIzLThmNjMtMmRkMThjNzgyZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ714MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNU8Gk+aQPNPlzKBCuyugABVNzdPKSvNPHJjKNgFZFchNB+MBAuTUSx V+W12OKwQINTSLjuLBeONoAf1yYlc56/RkLqTZNYuXSylAtEfR66aZm74ho4m4na VRxnkFyVDd38aXlIzd07wPPcATovJkWpTFKRIPAj/W6ftA/jW2M+DBs6kPl4tQ3b yUgHhH8uQg6/OBnJ3O+pYEROZ4lwKshW6tzeixmNo91qasZKYSWekaU9U5lB8Eet t8cien52Ioxhybp+8IV39RvIoZzjZ3iq5rswsykypWU2EEdd8pIX9b9RYN9PTszC Yog7CrXkLa1guFEC7OKtEqs6NhewM10= -----END CERTIFICATE-----Generated at Sat Apr 18 08:55:49 2026 by rpki-client