$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa File: 3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa (raw, json) Hash identifier: G8G68ZvrlEXLYJtRpPISNbcOTx9hCJw8jnT8SA8OiBo= Subject key identifier: 78:DE:76:12:E7:5F:10:8E:08:55:8F:E0:3B:61:FA:07:44:AC:A7:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB8ECBB735BE79EAA3EE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.170.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:8e:cb:b7:35:be:79:ea:a3:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1524b82e-353e-491f-af13-fc9eb9e4a7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:35:13:7f:6b:ce:3e:ea:f0:b9:6b:9b:ca:29: bd:36:c7:c2:89:d7:63:2a:53:6f:f0:c4:d8:d9:a6: c1:b6:25:2b:8e:94:96:17:70:49:0e:18:2f:97:43: 85:54:c5:f5:91:af:a0:b8:63:ae:4d:c1:84:80:90: ae:b0:e0:c5:00:99:c7:0a:a4:44:0a:3b:1e:5f:ea: b8:0e:f7:52:1e:42:b9:4f:d9:4f:7a:77:4b:61:12: 7c:59:79:8f:c9:cf:46:d4:76:2a:50:8f:2c:98:73: 36:ed:79:ec:6a:f7:9c:a8:eb:04:c3:3f:da:b0:95: d1:9e:e5:6c:9d:6d:8c:7d:e7:a6:f6:62:5b:f5:8e: f0:fe:f1:3e:ca:d0:fb:0b:cb:d7:b3:96:50:b9:d2: 25:c9:c7:7f:37:a9:2a:37:9b:d8:df:00:c7:61:d3: dd:41:a0:a4:d3:29:38:5b:0b:95:1d:24:6a:a3:52: 2a:d2:cc:31:15:be:47:68:eb:30:c0:06:f0:d2:58: b8:6b:fa:82:d9:9d:57:b7:cb:d6:1f:c6:b9:51:86: 29:5a:c7:8b:6d:17:ee:af:4b:e4:1b:8b:5d:0c:9e: 2c:10:61:b9:1e:ca:02:59:fa:44:98:18:8c:4a:6c: 89:6f:37:31:53:08:fe:66:b1:01:6c:69:5d:df:cb: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:76:12:E7:5F:10:8E:08:55:8F:E0:3B:61:FA:07:44:AC:A7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a97a1a4-efa8-3c90-9988-c0940be9ee95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8e:12:10:37:f7:a8:35:13:f6:2f:aa:ab:fc:de:3f:d2:24: d8:f1:b4:4d:23:fd:46:e0:8a:98:2f:0f:5b:c4:cd:d4:92:2c: d6:63:1d:84:9b:23:af:9f:90:9b:d8:0f:f5:8d:bf:79:c5:2c: a7:5b:3d:2f:1e:1e:82:82:37:01:c5:d5:53:d8:a0:7b:15:7e: d1:e5:31:3e:ed:b0:f2:64:50:fa:26:a8:f0:75:ba:2a:3a:ae: aa:b4:b0:01:0f:17:25:66:c0:da:1b:41:49:49:2b:2a:44:82: 85:a3:d9:5a:c3:43:25:10:fb:04:31:2e:7e:bd:34:6b:e4:6c: 97:39:b8:75:59:9f:f3:95:1c:39:1c:77:dd:c2:f5:a4:dd:9c: f0:7c:9c:aa:56:c5:06:36:06:f7:1c:05:86:6a:d3:8e:58:7b: 70:71:0a:f3:62:a6:b6:d7:67:6c:1c:22:cb:4c:4f:99:a9:9b: 33:8c:ae:8c:68:86:e1:1f:f8:07:b3:38:6b:0d:87:b7:e4:5d: 96:88:bf:57:3c:f7:b2:1e:f0:3f:4f:b2:39:b0:10:a6:15:7e: e0:e7:b5:5b:35:6b:95:16:2c:66:e1:66:7e:c4:0d:11:e8:b4: de:d5:9e:71:db:24:24:e7:1a:bc:11:c8:37:f3:3c:ba:94:73: bc:d8:1a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu47LtzW+eeqj7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTUyNGI4MmUtMzUzZS00OTFmLWFmMTMtZmM5ZWI5ZTRhN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zUTf2vOPurwuWubyim9NsfCiddjKlNv8MTY 2abBtiUrjpSWF3BJDhgvl0OFVMX1ka+guGOuTcGEgJCusODFAJnHCqRECjseX+q4 DvdSHkK5T9lPendLYRJ8WXmPyc9G1HYqUI8smHM27XnsavecqOsEwz/asJXRnuVs nW2Mfeem9mJb9Y7w/vE+ytD7C8vXs5ZQudIlycd/N6kqN5vY3wDHYdPdQaCk0yk4 WwuVHSRqo1Iq0swxFb5HaOswwAbw0li4a/qC2Z1Xt8vWH8a5UYYpWseLbRfur0vk G4tdDJ4sEGG5HsoCWfpEmBiMSmyJbzcxUwj+ZrEBbGld38stTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjedhLnXxCOCFWP4Dth+gdErKcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E5N2ExYTQtZWZhOC0z YzkwLTk5ODgtYzA5NDBiZTllZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiOEhA396g1E/Yvqqv83j/SJNjxtE0j/UbgipgvD1vEzdSSLNZjHYSb I6+fkJvYD/WNv3nFLKdbPS8eHoKCNwHF1VPYoHsVftHlMT7tsPJkUPomqPB1uio6 rqq0sAEPFyVmwNobQUlJKypEgoWj2VrDQyUQ+wQxLn69NGvkbJc5uHVZn/OVHDkc d93C9aTdnPB8nKpWxQY2BvccBYZq045Ye3BxCvNiprbXZ2wcIstMT5mpmzOMroxo huEf+AezOGsNh7fkXZaIv1c897Ie8D9PsjmwEKYVfuDntVs1a5UWLGbhZn7EDRHo tN7VnnHbJCTnGrwRyDfzPLqUc7zYGiU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:46:06 2026 by rpki-client