$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31ac8092-da37-3950-bbae-3b3444ea0312.roa File: 31ac8092-da37-3950-bbae-3b3444ea0312.roa (raw, json) Hash identifier: cq68wShndqxIjYfsjrCeb6nN/Iio7RvphSH1lDEoquc= Subject key identifier: 4E:CA:7C:A0:89:7A:C5:43:02:58:7E:E8:87:B3:27:E5:2A:8B:7A:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC303E061BB4BF5B412CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31ac8092-da37-3950-bbae-3b3444ea0312.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 174.162.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:30:3e:06:1b:b4:bf:5b:41:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4b5bd5c2-b0ee-4fd6-b303-304d7ef7d0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:00:f5:70:b3:0a:20:be:4c:91:68:a4:c5: 08:58:2f:9f:ca:32:8d:e2:af:fd:54:70:bf:d8:96: c5:d8:2f:2e:6c:e4:4b:16:2b:9b:3b:5e:97:60:67: f3:03:ca:20:81:9a:e9:9f:16:7c:86:16:a3:30:b2: 5b:55:a8:bf:60:24:13:7e:d7:8e:90:47:95:1d:5b: f4:bb:3e:60:99:43:7d:af:0b:1e:06:c8:68:a8:09: c4:7f:99:3c:a4:93:e7:a9:8f:ad:59:6f:65:96:76: b3:5c:b0:97:27:03:5b:cc:88:5c:b0:f6:91:f6:fb: 9e:82:d1:ae:8b:e3:12:b9:ec:c8:1a:cd:56:12:15: 3e:c4:ec:35:ee:ba:98:09:27:2e:ad:c1:e8:fb:23: e9:cf:52:2e:fe:c9:8f:6e:70:8d:0c:dc:07:35:68: dc:bb:a2:f7:df:20:a9:a6:c7:ab:e2:71:a3:02:fb: c1:f0:30:1a:70:19:16:a0:4c:2f:15:08:04:05:9b: b8:2b:b7:8c:73:cd:1c:e1:63:97:39:6a:63:96:11: ff:0c:2f:9c:5c:79:78:33:b6:b7:33:6d:3f:36:85: 2a:e1:20:e1:39:b1:69:90:87:08:ec:e7:ff:7d:70: d6:3e:79:b1:56:9d:bf:06:26:a3:42:7a:85:b1:71: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:7C:A0:89:7A:C5:43:02:58:7E:E8:87:B3:27:E5:2A:8B:7A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31ac8092-da37-3950-bbae-3b3444ea0312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:48:f4:0f:0b:54:c6:4a:51:f7:35:54:69:79:63:7c:14:32: 37:96:37:47:89:76:28:de:7e:91:44:58:d5:9e:62:68:e5:4d: 37:10:ca:19:5d:b7:e6:d9:7e:86:93:2b:8f:34:d5:a3:7e:0d: 87:60:3d:42:69:a6:85:c2:2b:a7:d6:b0:13:f8:55:8c:bd:75: b9:ec:27:6e:e4:ca:02:1b:70:9b:62:52:a2:9c:84:87:30:0f: 59:9b:1f:5c:da:08:b8:bb:65:e9:c9:fa:78:fc:e2:d5:da:81: ac:39:81:f7:58:e0:7c:c5:f0:a9:82:aa:87:93:a1:dc:d4:f4: 06:d7:27:76:43:37:79:78:22:a8:74:7c:3c:ff:5e:1e:5f:40: bd:d2:3a:cd:3e:3f:27:6c:f2:07:cd:dc:3c:04:01:cf:8e:05: 59:fc:61:6e:70:e6:0e:2d:c4:35:dd:6c:c8:80:61:0f:04:99: 75:e2:0d:ad:bb:9e:b3:0f:13:2d:6e:93:4d:f0:28:b8:53:b7: 1f:ae:9c:58:af:36:ad:c6:ee:46:55:62:d9:59:5f:e7:e8:51: 42:d5:27:ba:4f:ac:b7:f9:f1:81:d7:79:c4:d3:7f:3d:0d:b2: c7:00:fa:01:c8:15:2d:53:71:d3:90:00:bc:7a:f1:20:47:4e: 91:52:9e:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvDA+Bhu0v1tBLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGI1YmQ1YzItYjBlZS00ZmQ2LWIzMDMtMzA0ZDdlZjdkMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhakA9XCzCiC+TJFopMUIWC+fyjKN4q/9VHC/ 2JbF2C8ubORLFiubO16XYGfzA8oggZrpnxZ8hhajMLJbVai/YCQTfteOkEeVHVv0 uz5gmUN9rwseBshoqAnEf5k8pJPnqY+tWW9llnazXLCXJwNbzIhcsPaR9vuegtGu i+MSuezIGs1WEhU+xOw17rqYCScurcHo+yPpz1Iu/smPbnCNDNwHNWjcu6L33yCp pser4nGjAvvB8DAacBkWoEwvFQgEBZu4K7eMc80c4WOXOWpjlhH/DC+cXHl4M7a3 M20/NoUq4SDhObFpkIcI7Of/fXDWPnmxVp2/BiajQnqFsXHhPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7KfKCJesVDAlh+6IezJ+Uqi3q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzFhYzgwOTItZGEzNy0z OTUwLWJiYWUtM2IzNDQ0ZWEwMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRI9A8LVMZKUfc1VGl5Y3wUMjeWN0eJdijefpFEWNWeYmjlTTcQyhld t+bZfoaTK4801aN+DYdgPUJppoXCK6fWsBP4VYy9dbnsJ27kygIbcJtiUqKchIcw D1mbH1zaCLi7ZenJ+nj84tXagaw5gfdY4HzF8KmCqoeTodzU9AbXJ3ZDN3l4Iqh0 fDz/Xh5fQL3SOs0+Pyds8gfN3DwEAc+OBVn8YW5w5g4txDXdbMiAYQ8EmXXiDa27 nrMPEy1uk03wKLhTtx+unFivNq3G7kZVYtlZX+foUULVJ7pPrLf58YHXecTTfz0N sscA+gHIFS1TcdOQALx68SBHTpFSnuo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:18:44 2026 by rpki-client