$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa File: 394e19e6-981e-3f41-93e9-872acc0e24fd.roa (raw, json) Hash identifier: GsvuX5QmKaCTB53kQ1uLZ/GJ3/IU4tvpb4D6y6jVia4= Subject key identifier: 28:5E:83:2F:E4:52:20:A0:4A:9A:53:E6:6D:73:5C:DA:93:31:FB:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB3F13CA52EFD3C4525100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 174.170.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:3f:13:ca:52:ef:d3:c4:52:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3aee1bd8-2cac-4820-a7a8-1ab1a24fde58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:c3:61:75:af:61:5e:3f:e2:21:cc:45:a3: e1:15:3e:cf:4c:5b:f1:06:13:b5:43:66:60:83:d0: 25:9f:36:a7:d2:83:19:2e:4c:39:22:87:ab:5d:60: 21:15:c7:a8:85:dc:1b:97:13:e7:22:2f:a0:d7:af: 82:08:b6:3d:ce:88:9b:cc:d2:0d:2f:8c:f2:38:b8: 96:1c:01:d9:01:fe:ec:a1:d6:2d:d6:a6:cf:99:4b: fd:50:e7:21:76:24:51:bd:dd:0e:a3:f4:cf:16:27: f7:44:21:e6:14:ea:d8:04:23:d1:be:0a:11:38:79: 5e:5d:b3:d5:40:43:9d:c7:d5:7a:84:c5:2d:f1:78: dd:dd:0e:22:bb:14:a7:80:0d:16:e5:a5:32:d0:42: 6b:90:f0:6b:54:58:f4:78:4d:34:07:23:63:cf:2c: 81:3a:20:98:14:dc:ba:1a:99:e6:bd:2d:67:48:ab: 6c:59:5b:ab:ba:9a:88:ad:21:2c:97:7d:e8:f6:a1: 0c:08:e7:44:69:7c:9c:7c:ba:e1:33:f3:d4:00:80: 7f:0e:fd:29:c1:ec:d0:04:20:1e:a3:ef:29:20:d2: ac:38:21:26:38:92:28:02:39:2b:9e:0e:7f:e4:17: 00:1f:29:c5:01:70:e3:e3:18:9e:d7:3b:b7:9f:04: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:83:2F:E4:52:20:A0:4A:9A:53:E6:6D:73:5C:DA:93:31:FB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/394e19e6-981e-3f41-93e9-872acc0e24fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:80:e2:02:f0:d9:15:1f:a1:4a:66:c7:27:38:b7:e5:b9:95: 7e:08:33:6c:f6:ed:ff:8b:a2:78:f2:d8:d7:3e:05:45:7a:81: 62:74:b1:d7:c4:1e:19:1d:df:80:d6:1f:d8:cc:54:a9:d7:eb: 85:98:5e:21:d0:57:f3:93:ab:e7:9c:1f:f0:c8:03:36:63:67: eb:c3:99:a2:04:be:c7:2d:0b:9f:b6:02:d7:63:99:fe:98:ea: 18:73:34:b6:22:8a:b9:7e:10:06:5e:c8:f9:89:d3:60:c9:8b: 4b:af:83:51:6f:8b:68:1b:71:e2:bb:bc:4c:75:6d:dc:bc:06: 1e:fe:9f:9a:cf:c0:7a:fc:89:b3:0a:80:11:e5:2f:5c:99:0e: 48:59:76:46:5b:f4:4d:8e:f4:c1:25:69:2b:b8:52:79:c7:35: 07:b2:7c:2d:97:5c:c6:d5:92:be:a6:d5:ca:33:8f:a8:fd:ed: 34:0a:69:18:f9:f4:9c:68:f7:d9:4f:ff:67:9f:7f:35:df:35: 2e:91:0b:fa:83:07:7c:47:cb:1c:53:74:dc:a3:a3:1b:82:6f: 03:73:8d:6d:4a:0d:fe:d4:e8:ed:6f:f7:06:6c:6a:44:51:dd: e1:e4:d9:a0:1b:bd:f2:6c:c4:69:77:e1:b7:1d:93:72:e6:d3: 95:3b:0b:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuz8TylLv08RSUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2FlZTFiZDgtMmNhYy00ODIwLWE3YTgtMWFiMWEyNGZkZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTfDYXWvYV4/4iHMRaPhFT7PTFvxBhO1Q2Zg g9Alnzan0oMZLkw5IoerXWAhFceohdwblxPnIi+g16+CCLY9zoibzNINL4zyOLiW HAHZAf7sodYt1qbPmUv9UOchdiRRvd0Oo/TPFif3RCHmFOrYBCPRvgoROHleXbPV QEOdx9V6hMUt8Xjd3Q4iuxSngA0W5aUy0EJrkPBrVFj0eE00ByNjzyyBOiCYFNy6 GpnmvS1nSKtsWVurupqIrSEsl33o9qEMCOdEaXycfLrhM/PUAIB/Dv0pwezQBCAe o+8pINKsOCEmOJIoAjkrng5/5BcAHynFAXDj4xie1zu3nwSlswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChegy/kUiCgSppT5m1zXNqTMft6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk0ZTE5ZTYtOTgxZS0z ZjQxLTkzZTktODcyYWNjMGUyNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuA4gLw2RUfoUpmxyc4t+W5lX4IM2z27f+Lonjy2Nc+BUV6gWJ0sdfE Hhkd34DWH9jMVKnX64WYXiHQV/OTq+ecH/DIAzZjZ+vDmaIEvsctC5+2Atdjmf6Y 6hhzNLYiirl+EAZeyPmJ02DJi0uvg1Fvi2gbceK7vEx1bdy8Bh7+n5rPwHr8ibMK gBHlL1yZDkhZdkZb9E2O9MElaSu4UnnHNQeyfC2XXMbVkr6m1cozj6j97TQKaRj5 9Jxo99lP/2effzXfNS6RC/qDB3xHyxxTdNyjoxuCbwNzjW1KDf7U6O1v9wZsakRR 3eHk2aAbvfJsxGl34bcdk3Lm05U7Cz0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:32 2026 by rpki-client