$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f254c5d-a1dc-3eb6-a998-d57ce3f22266.roa File: 1f254c5d-a1dc-3eb6-a998-d57ce3f22266.roa (raw, json) Hash identifier: wurB3f+RlEmy68JrGqpHWDJTdsoP1gIS0XY7DXrqRPI= Subject key identifier: BF:59:AA:06:39:7E:3D:4C:55:22:48:A3:C5:23:D4:ED:6C:51:3F:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA56F89E9961A9C9535800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f254c5d-a1dc-3eb6-a998-d57ce3f22266.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.171.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:56:f8:9e:99:61:a9:c9:53:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=db350dd8-6538-4d41-85c4-ce7cb48efd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:40:20:3a:d4:1a:b7:f4:1f:83:67:de:8a: e9:57:b3:ed:15:54:6a:7e:10:d3:f6:7d:33:c8:18: ee:fe:e6:76:19:29:d0:ad:db:71:ac:1c:7a:84:c1: 63:f8:bc:1e:ec:0e:fd:bd:36:4d:7f:90:90:93:40: 94:0f:e9:10:7a:9c:89:f5:a9:46:5a:8e:f8:78:e5: 89:54:64:8c:5c:6f:d7:35:ff:1c:f2:0b:4d:52:b8: 35:e9:04:ac:33:71:1f:bb:ed:12:4e:89:cc:1c:c4: 73:42:82:1f:48:80:02:80:6d:2a:0c:25:6e:c0:33: bb:d9:e3:cc:52:cc:25:06:32:68:2b:b6:bd:73:f5: 37:09:83:17:df:7c:cb:e2:fa:b8:c2:e3:25:05:36: 11:f1:cc:ef:42:c1:8a:9e:c8:e1:aa:f9:3d:b4:aa: af:ae:f8:0e:25:6e:ac:23:4f:7b:14:e9:9a:06:bc: d5:bd:48:d9:a3:cc:9d:5e:74:48:c8:d2:50:91:2c: a6:44:d6:5a:f0:19:20:17:dd:fd:9c:e9:5f:36:1d: 9a:ee:8e:38:89:b7:33:4e:c7:0c:01:64:3f:77:0e: 02:d8:1d:2e:14:94:47:1d:72:3b:dd:db:73:6f:4b: fc:52:ea:60:08:13:48:e5:8c:7c:9a:51:ee:24:bb: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:AA:06:39:7E:3D:4C:55:22:48:A3:C5:23:D4:ED:6C:51:3F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f254c5d-a1dc-3eb6-a998-d57ce3f22266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:74:03:cb:3a:00:80:63:f8:23:a7:88:77:54:d7:79:64:f9: c9:c8:e4:80:f9:e0:4c:1a:b4:b4:54:7d:3e:f1:dc:3d:c7:36: b7:08:62:37:2a:b3:01:59:0f:82:36:59:cd:04:b0:55:fc:69: 5a:c6:02:3d:c8:da:eb:1b:dd:34:2a:0e:a0:83:0a:8d:b2:1f: 2b:70:3b:56:a6:fa:35:43:92:ab:f8:e4:f1:29:86:43:ec:d0: 56:5f:8c:de:21:22:01:05:21:cf:30:59:bf:02:99:20:6c:52: b5:c9:79:54:e2:e6:f5:26:2c:0c:df:b3:10:ed:33:4f:bb:1e: cc:0f:52:5c:40:df:b9:26:01:a0:7d:5f:a7:16:b3:0e:1a:09: 6e:7e:bf:8a:44:83:df:e5:aa:c2:3a:39:03:2a:79:f5:d8:4f: a0:fb:bf:58:78:3a:48:03:3c:a7:f8:14:fd:74:8d:6f:5f:4a: ad:7e:19:75:52:85:f3:4a:71:f8:36:43:05:1c:92:c0:e3:6d: 7c:5b:f0:d6:ae:10:74:34:a8:e8:c4:61:ed:19:b1:35:4c:08: 17:97:19:24:e9:3f:4f:9d:7e:eb:09:36:cb:b5:2e:c7:5c:35: 66:21:74:e5:b1:96:b9:fa:ea:97:82:00:a0:d3:16:d8:85:ad: 51:da:73:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vulb4nplhqclTWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZGIzNTBkZDgtNjUzOC00ZDQxLTg1YzQtY2U3Y2I0OGVmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZdAIDrUGrf0H4Nn3orpV7PtFVRqfhDT9n0z yBju/uZ2GSnQrdtxrBx6hMFj+Lwe7A79vTZNf5CQk0CUD+kQepyJ9alGWo74eOWJ VGSMXG/XNf8c8gtNUrg16QSsM3Efu+0STonMHMRzQoIfSIACgG0qDCVuwDO72ePM UswlBjJoK7a9c/U3CYMX33zL4vq4wuMlBTYR8czvQsGKnsjhqvk9tKqvrvgOJW6s I097FOmaBrzVvUjZo8ydXnRIyNJQkSymRNZa8BkgF939nOlfNh2a7o44ibczTscM AWQ/dw4C2B0uFJRHHXI73dtzb0v8UupgCBNI5Yx8mlHuJLtXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9ZqgY5fj1MVSJIo8Uj1O1sUT8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWYyNTRjNWQtYTFkYy0z ZWI2LWE5OTgtZDU3Y2UzZjIyMjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6uWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx0A8s6AIBj+COniHdU13lk+cnI5ID54EwatLRUfT7x3D3HNrcIYjcq swFZD4I2Wc0EsFX8aVrGAj3I2usb3TQqDqCDCo2yHytwO1am+jVDkqv45PEphkPs 0FZfjN4hIgEFIc8wWb8CmSBsUrXJeVTi5vUmLAzfsxDtM0+7HswPUlxA37kmAaB9 X6cWsw4aCW5+v4pEg9/lqsI6OQMqefXYT6D7v1h4OkgDPKf4FP10jW9fSq1+GXVS hfNKcfg2QwUcksDjbXxb8NauEHQ0qOjEYe0ZsTVMCBeXGSTpP0+dfusJNsu1Lsdc NWYhdOWxlrn66peCAKDTFtiFrVHac0I= -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:55 2026 by rpki-client