$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c2d9afe-acf5-3736-b1ad-a93f891c6e1c.roa File: 1c2d9afe-acf5-3736-b1ad-a93f891c6e1c.roa (raw, json) Hash identifier: KVROqH4iYiTtp7KdVuMk5mE7vbk5sxHsbrCkcrP7UzY= Subject key identifier: 14:F5:28:77:C2:E6:5D:E0:A3:B0:89:BD:85:4F:4C:F9:32:CC:03:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D52439BDA313A9273AC087880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c2d9afe-acf5-3736-b1ad-a93f891c6e1c.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13367 IP address blocks: 66.41.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:9b:da:31:3a:92:73:ac:08:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=18a725fa-fd52-48f1-80cf-f186a171333c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:7b:80:57:62:34:49:d5:8b:34:47:e8:4c: 2c:c3:8b:53:4a:b8:84:49:18:6e:1a:6f:2e:d8:08: bb:24:95:67:00:d2:49:53:fe:04:1e:53:be:18:e8: fb:3d:70:15:46:f1:a1:31:53:39:6b:5d:50:69:b9: 94:45:ea:f7:7f:2d:88:c6:c9:f3:a4:9a:02:f4:05: 01:a5:9b:3e:b3:e8:c2:ab:ee:49:71:72:71:05:ab: d6:0d:9b:78:66:ba:b5:c2:e4:fc:81:c0:5f:d0:25: 20:97:56:a4:14:a0:c2:16:56:2f:7e:ec:8c:9d:11: 46:09:2f:a9:b3:53:f4:42:84:2b:78:43:cc:82:fd: bd:47:1f:59:80:38:d3:09:92:db:4d:96:8e:c2:e0: 54:52:b7:66:80:92:b5:ad:24:d7:a1:37:e2:0d:2d: a3:e6:42:68:1c:23:09:df:9c:cf:64:3d:ab:86:3b: db:51:14:7f:3a:be:6a:a6:0c:02:ad:e7:91:e7:68: 1f:23:88:8d:84:97:ae:ce:1a:8f:83:f7:1d:02:05: 7f:e7:38:a3:29:e4:06:f8:0f:9c:d6:a8:e6:c7:b0: 41:f2:24:56:e9:19:63:61:bc:c5:09:f9:60:af:f7: 72:a2:73:2f:89:07:5e:71:5b:6e:e4:a1:db:9a:9a: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F5:28:77:C2:E6:5D:E0:A3:B0:89:BD:85:4F:4C:F9:32:CC:03:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c2d9afe-acf5-3736-b1ad-a93f891c6e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.41.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:98:9e:c1:f4:f0:21:b6:c0:2a:9e:f4:6a:d4:76:42:58:3a: d3:8e:21:a0:02:4c:21:bb:15:16:01:d1:0c:1a:a7:6b:5b:6a: 09:c8:16:f2:cf:3a:ec:1f:3f:6d:2c:1e:1c:63:45:27:fc:77: 55:0f:f0:fc:d9:b2:9a:95:01:d9:56:c3:48:60:7f:7c:9b:88: c1:57:53:07:2b:ff:9c:69:ce:7d:61:1b:57:62:d3:89:44:ec: d2:35:d2:cd:83:42:8d:49:97:df:cd:40:07:4c:be:05:c3:c9: f3:a1:42:f6:97:20:95:f9:36:d1:23:e1:a6:be:f1:01:7a:56: 56:8a:4b:95:f1:ad:c3:d7:a4:20:42:88:d3:57:e1:f1:87:6d: 0b:0c:52:4b:1e:f8:9c:f4:a0:25:1d:9e:1c:c5:9c:ec:6f:bd: 0e:41:fd:f4:59:02:be:c8:2a:51:41:b5:b1:fa:8a:73:c7:e6: 6a:50:ba:65:ff:8d:76:38:5f:8c:c2:f0:c0:01:7e:19:57:00: c9:56:23:d2:dd:b6:93:2b:f0:ab:da:70:42:a2:be:3a:dd:86: 54:79:98:2f:cc:2d:b4:12:c4:2e:78:8f:ef:1c:ac:cc:49:af: 8c:63:42:82:a2:4d:fe:1f:6b:39:38:d3:14:c8:09:a3:d2:89: 68:ae:75:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ5vaMTqSc6wIeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MThhNzI1ZmEtZmQ1Mi00OGYxLTgwY2YtZjE4NmExNzEzMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlod7gFdiNEnVizRH6Ewsw4tTSriESRhuGm8u 2Ai7JJVnANJJU/4EHlO+GOj7PXAVRvGhMVM5a11QabmURer3fy2IxsnzpJoC9AUB pZs+s+jCq+5JcXJxBavWDZt4Zrq1wuT8gcBf0CUgl1akFKDCFlYvfuyMnRFGCS+p s1P0QoQreEPMgv29Rx9ZgDjTCZLbTZaOwuBUUrdmgJK1rSTXoTfiDS2j5kJoHCMJ 35zPZD2rhjvbURR/Or5qpgwCreeR52gfI4iNhJeuzhqPg/cdAgV/5zijKeQG+A+c 1qjmx7BB8iRW6RljYbzFCflgr/dyonMviQdecVtu5KHbmprD5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT1KHfC5l3go7CJvYVPTPkyzAONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWMyZDlhZmUtYWNmNS0z NzM2LWIxYWQtYTkzZjg5MWM2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQilsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmYnsH08CG2wCqe9GrUdkJYOtOOIaACTCG7FRYB0Qwap2tbagnIFvLP OuwfP20sHhxjRSf8d1UP8PzZspqVAdlWw0hgf3ybiMFXUwcr/5xpzn1hG1di04lE 7NI10s2DQo1Jl9/NQAdMvgXDyfOhQvaXIJX5NtEj4aa+8QF6VlaKS5XxrcPXpCBC iNNX4fGHbQsMUkse+Jz0oCUdnhzFnOxvvQ5B/fRZAr7IKlFBtbH6inPH5mpQumX/ jXY4X4zC8MABfhlXAMlWI9LdtpMr8KvacEKivjrdhlR5mC/MLbQSxC54j+8crMxJ r4xjQoKiTf4fazk40xTICaPSiWiudQw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:34 2026 by rpki-client