$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17ae67dd-0f71-3f4c-a64f-16a6960c9410.roa File: 17ae67dd-0f71-3f4c-a64f-16a6960c9410.roa (raw, json) Hash identifier: cZUbf5L72p/VY2TfKw1evQ+eVzZe3YMrC8ivsImDYyI= Subject key identifier: C4:76:B1:F0:57:F3:6E:F0:F0:7C:64:74:70:AF:42:FB:54:B0:5C:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA4D2173A596936E3C7900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17ae67dd-0f71-3f4c-a64f-16a6960c9410.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 174.174.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4d:21:73:a5:96:93:6e:3c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=83bac6d6-5d0b-4747-95ba-dbe0623055c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:a7:27:09:a1:a3:d7:84:e8:73:c7:ec:8b: 6f:33:ac:6a:58:6f:1e:bd:b2:05:48:1d:6b:9c:fc: de:7e:02:19:11:19:d9:c3:7b:44:56:c3:51:67:ed: 23:5d:ab:84:79:f9:aa:3d:44:c2:2c:97:13:89:48: 6c:13:22:28:6a:e0:6b:af:6e:d2:ed:11:52:ad:be: 16:f9:37:90:53:da:2a:9a:f6:63:61:02:6d:a1:d0: 67:04:e9:cf:f3:9c:e4:ad:5a:98:86:25:f6:47:21: be:9d:d8:aa:d8:25:4d:01:ea:0d:dd:d8:9f:95:ea: a4:b2:25:aa:5c:8d:ba:42:e1:f7:8d:f6:4a:e2:a0: d2:86:2d:57:94:dd:a8:4f:ef:17:12:80:bd:84:63: fe:f1:ec:58:e6:b8:09:df:fa:df:f7:7a:fd:29:a9: a4:dd:47:28:38:f0:f6:b2:85:65:a4:1c:7a:02:c7: a5:df:81:54:76:fd:39:76:1c:29:34:7d:40:97:d4: 7c:f1:d7:55:ca:98:ea:8b:d9:b1:a6:d5:74:8e:5d: 4c:03:d4:93:93:f7:ed:79:0f:6c:9c:fb:5b:a4:0c: 02:c5:fa:47:27:6a:13:34:cc:43:d6:0a:1f:c2:52: 49:28:8b:27:e8:78:c7:96:3e:d1:02:ae:6c:ae:d5: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:B1:F0:57:F3:6E:F0:F0:7C:64:74:70:AF:42:FB:54:B0:5C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17ae67dd-0f71-3f4c-a64f-16a6960c9410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:dd:db:ca:65:cf:85:89:58:28:ea:cf:4a:c4:47:37:79:ca: ab:65:a5:7b:eb:6e:0e:43:39:f9:7f:3d:0d:fc:a3:49:31:8e: d0:76:08:bf:2e:ca:f9:aa:55:a6:9a:9a:3e:31:7c:28:bf:e2: f0:85:07:c4:08:c8:d9:7d:f9:2a:9b:93:ec:ca:fd:84:4f:68: 35:d1:7e:2c:b3:49:e9:54:29:4a:36:88:c9:36:a4:21:ca:41: 5c:5c:c5:52:b7:e5:64:7b:64:4a:a1:b4:60:0b:6b:20:b0:c0: b2:78:b1:3b:2d:1d:30:3d:58:64:2e:78:28:b3:33:c7:04:d3: 89:b6:62:e2:c4:98:48:11:98:19:ef:17:16:27:b7:94:a0:c8: 1f:ae:4e:cd:4f:13:77:4e:3d:fb:03:06:4b:d8:c1:86:23:78: a0:93:b2:05:db:43:52:e5:fd:c8:bf:76:41:af:97:eb:31:1e: 05:7b:29:9e:4f:43:e8:4d:fa:03:da:85:ff:6b:6f:7b:71:cb: 16:d4:1a:1f:c1:3d:aa:19:fd:f0:1a:4f:ab:08:65:84:5d:89: f1:f5:ce:50:76:a5:81:cf:80:82:e2:3f:91:90:cf:c9:12:5d: e9:34:c5:1f:f4:e3:96:88:09:02:fe:c4:6d:12:65:af:0d:93: 84:aa:40:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuk0hc6WWk248eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODNiYWM2ZDYtNWQwYi00NzQ3LTk1YmEtZGJlMDYyMzA1NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNenJwmho9eE6HPH7ItvM6xqWG8evbIFSB1r nPzefgIZERnZw3tEVsNRZ+0jXauEefmqPUTCLJcTiUhsEyIoauBrr27S7RFSrb4W +TeQU9oqmvZjYQJtodBnBOnP85zkrVqYhiX2RyG+ndiq2CVNAeoN3difleqksiWq XI26QuH3jfZK4qDShi1XlN2oT+8XEoC9hGP+8exY5rgJ3/rf93r9Kamk3UcoOPD2 soVlpBx6Asel34FUdv05dhwpNH1Al9R88ddVypjqi9mxptV0jl1MA9STk/fteQ9s nPtbpAwCxfpHJ2oTNMxD1gofwlJJKIsn6HjHlj7RAq5srtWLzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR2sfBX827w8HxkdHCvQvtUsFyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdhZTY3ZGQtMGY3MS0z ZjRjLWE2NGYtMTZhNjk2MGM5NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLd28plz4WJWCjqz0rERzd5yqtlpXvrbg5DOfl/PQ38o0kxjtB2CL8u yvmqVaaamj4xfCi/4vCFB8QIyNl9+Sqbk+zK/YRPaDXRfiyzSelUKUo2iMk2pCHK QVxcxVK35WR7ZEqhtGALayCwwLJ4sTstHTA9WGQueCizM8cE04m2YuLEmEgRmBnv FxYnt5SgyB+uTs1PE3dOPfsDBkvYwYYjeKCTsgXbQ1Ll/ci/dkGvl+sxHgV7KZ5P Q+hN+gPahf9rb3txyxbUGh/BPaoZ/fAaT6sIZYRdifH1zlB2pYHPgILiP5GQz8kS Xek0xR/045aICQL+xG0SZa8Nk4SqQLs= -----END CERTIFICATE-----Generated at Fri Apr 17 17:00:51 2026 by rpki-client