$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa File: 36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa (raw, json) Hash identifier: /82iaTyby7IydfBX+ibVIlComjaOHKknKQl5u16A36E= Subject key identifier: 6C:2F:66:5E:ED:50:7E:B4:3C:F0:4A:10:46:1C:53:FA:CF:8B:05:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA7D4A7A1AB9E3485EAE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 174.168.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:7d:4a:7a:1a:b9:e3:48:5e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=275ae34d-a6ea-4419-8363-6893d1f66a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:56:8a:a6:21:ce:2c:eb:85:1a:d0:7b:06: 6f:62:01:73:ae:4a:04:82:0d:c7:dc:96:48:9d:f5: 51:eb:c3:35:83:53:a6:2e:3e:61:ff:83:c0:d6:9a: e6:c7:72:f3:7e:d8:89:c6:b7:4e:0f:17:e4:64:18: bd:51:07:49:50:ea:ce:bb:6f:23:b4:40:82:29:75: 77:e6:dc:ab:44:8e:72:da:97:be:b6:aa:2e:f5:2f: d1:7b:1f:2a:df:a6:9e:7e:8f:1d:c5:f0:df:df:19: 66:a3:88:9c:e4:cb:02:b6:1d:5e:7c:75:df:4a:71: d0:43:25:90:5d:16:9b:ff:42:1b:a3:57:ef:4d:98: 49:67:6c:bf:50:1a:97:0c:7d:7e:85:a1:2e:14:e5: 33:7f:5a:51:0e:67:2b:c4:39:c9:1f:dd:3d:92:db: cd:29:51:12:23:34:51:0a:9b:48:f9:3b:48:f2:a0: 75:90:10:62:d6:ce:4d:db:67:59:84:fc:f8:48:63: 7c:e5:e4:d9:3e:e7:79:55:e6:95:db:04:36:14:f0: b6:18:36:56:65:61:66:7f:e9:63:68:5a:6d:92:86: 49:d2:b7:14:86:c4:32:10:4b:e6:d4:6b:46:35:bc: 38:90:15:73:fc:7c:77:37:2b:80:5e:64:90:be:ed: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:66:5E:ED:50:7E:B4:3C:F0:4A:10:46:1C:53:FA:CF:8B:05:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36cc8a40-1e1f-3177-a4d0-abf18f63c3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1e:23:21:5d:b5:fb:90:da:47:ac:1d:7e:be:bb:f8:4f:8e: e9:8b:a9:0c:91:f0:39:77:6b:f1:84:06:13:17:ee:1d:30:bf: 42:dd:e2:e4:04:e4:64:16:ea:3f:11:46:14:31:0a:08:23:54: 22:cf:5e:ed:3a:c1:9f:74:ed:19:db:25:dc:ea:ec:e4:e1:da: 79:a0:e0:7d:5b:52:02:5f:3a:f9:e3:3c:ef:0a:d3:07:d6:83: 01:94:c8:f3:3f:9a:1a:db:4c:47:4e:e0:07:c7:4a:7d:b7:0b: 56:8c:91:73:07:10:3e:6a:3e:9d:5e:e8:f4:5f:bb:fb:36:21: 40:36:df:9a:c0:ba:5d:6d:f5:05:2b:0a:6b:fc:f4:d8:f1:8e: 93:58:f4:31:8f:a2:2a:f2:66:97:0e:7c:bf:64:e7:e0:df:04: 54:d1:81:a2:e1:d6:29:5d:bb:4a:ee:a0:8f:cf:47:0b:ba:e7: 81:d5:40:7b:86:fc:79:40:cb:dd:28:9e:69:b9:fc:a5:7a:10: 66:e3:c1:42:9b:80:10:ab:b9:3e:8c:60:c4:09:21:74:50:f3: 63:49:3b:26:08:ba:3a:0a:ab:c5:37:21:27:9d:b8:c1:05:2a: c9:7e:9d:a0:1f:ac:79:df:9e:54:f5:39:39:2e:af:a8:24:06: 3a:44:d8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vun1Kehq540heroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Mjc1YWUzNGQtYTZlYS00NDE5LTgzNjMtNjg5M2QxZjY2YTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE9WiqYhzizrhRrQewZvYgFzrkoEgg3H3JZI nfVR68M1g1OmLj5h/4PA1prmx3LzftiJxrdODxfkZBi9UQdJUOrOu28jtECCKXV3 5tyrRI5y2pe+tqou9S/Rex8q36aefo8dxfDf3xlmo4ic5MsCth1efHXfSnHQQyWQ XRab/0Ibo1fvTZhJZ2y/UBqXDH1+haEuFOUzf1pRDmcrxDnJH909ktvNKVESIzRR CptI+TtI8qB1kBBi1s5N22dZhPz4SGN85eTZPud5VeaV2wQ2FPC2GDZWZWFmf+lj aFptkoZJ0rcUhsQyEEvm1GtGNbw4kBVz/Hx3NyuAXmSQvu2h3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwvZl7tUH60PPBKEEYcU/rPiwVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZjYzhhNDAtMWUxZi0z MTc3LWE0ZDAtYWJmMThmNjNjM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkeIyFdtfuQ2kesHX6+u/hPjumLqQyR8Dl3a/GEBhMX7h0wv0Ld4uQE 5GQW6j8RRhQxCggjVCLPXu06wZ907RnbJdzq7OTh2nmg4H1bUgJfOvnjPO8K0wfW gwGUyPM/mhrbTEdO4AfHSn23C1aMkXMHED5qPp1e6PRfu/s2IUA235rAul1t9QUr Cmv89NjxjpNY9DGPoiryZpcOfL9k5+DfBFTRgaLh1ildu0ruoI/PRwu654HVQHuG /HlAy90onmm5/KV6EGbjwUKbgBCruT6MYMQJIXRQ82NJOyYIujoKq8U3ISeduMEF Ksl+naAfrHnfnlT1OTkur6gkBjpE2Bk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:34:42 2026 by rpki-client