$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a2f254-a87e-381c-887a-419924e214f5.roa File: 49a2f254-a87e-381c-887a-419924e214f5.roa (raw, json) Hash identifier: i8QaVTwAjlpjaxsV4oLMnBSa07QNG7RahUF48vUViQs= Subject key identifier: 44:37:19:84:85:ED:3B:06:0D:B6:3D:81:19:7B:73:BE:9D:3D:BD:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBB805DCD34A9E3A0DFB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a2f254-a87e-381c-887a-419924e214f5.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 174.168.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:b8:05:dc:d3:4a:9e:3a:0d:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=84fa0657-d19e-4fdc-8af2-3acac4a28dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a3:e1:ef:b4:27:99:e8:7f:28:4c:ab:e1:c8: 52:54:95:f8:d9:05:91:57:ab:49:af:23:16:8d:54: 97:ee:c9:00:ac:a2:65:3e:6e:77:30:50:9d:09:a9: fc:29:f8:70:3f:5e:ec:ee:fe:e6:a5:0f:80:e2:bb: fa:f5:6f:68:5d:3d:49:6f:c3:52:bf:9b:8e:23:3b: ba:97:7f:44:6f:61:af:c8:1f:66:5d:1a:88:4f:6c: 79:32:3e:93:59:50:96:2e:7a:69:69:fc:36:4d:8e: 75:fb:96:41:a3:50:8d:59:56:7a:c8:7a:51:6b:ee: db:d6:a8:5c:3b:20:31:7c:f8:83:d6:93:05:63:5d: 9f:7e:ed:c0:90:cf:35:f4:4a:10:b9:cb:6a:94:88: b7:b2:a7:69:9f:63:fe:48:ee:99:8c:b8:9b:e2:ca: cf:af:dc:60:62:a0:ce:85:26:a5:fa:f1:49:a1:b1: c7:e7:0b:08:b9:6a:cf:80:05:de:fb:55:58:3c:c3: 27:d4:20:e2:ad:79:04:97:82:a5:0b:13:e0:24:f1: fb:e9:4e:ef:4e:b0:9e:1e:05:16:22:41:e4:fc:7d: 68:71:1b:f8:10:19:e0:3f:75:36:54:16:c3:4a:bd: 79:10:4d:5f:a4:63:77:f6:14:eb:d4:d8:05:9c:a9: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:19:84:85:ED:3B:06:0D:B6:3D:81:19:7B:73:BE:9D:3D:BD:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a2f254-a87e-381c-887a-419924e214f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1f:01:ac:92:fe:c4:4d:fa:6d:e0:bb:cb:1a:dc:44:fc:95: 6b:04:f1:c0:33:4e:e4:7e:d2:9a:28:42:61:99:17:2e:a5:00: 57:1f:63:d8:c1:95:84:8e:1e:f6:48:8c:2a:9d:14:e6:a1:f2: e9:c2:b8:62:4c:d6:1f:f0:f5:be:f6:7a:ad:c7:c1:b7:c2:91: 7c:f2:51:bd:6f:8c:57:4d:01:b0:bd:10:00:ff:37:fc:1e:5f: ed:0e:ea:43:eb:e0:8f:2b:c1:57:9d:14:04:72:83:d2:e6:66: fa:36:85:11:e0:95:17:18:9b:c9:68:b6:16:81:ba:53:18:ad: 80:32:5b:e8:50:7f:e9:6c:ac:01:ba:96:93:79:9f:82:83:61: d4:c8:22:1f:e5:f7:f6:9d:b3:c4:66:36:3b:d0:ce:a2:9f:93: fd:40:22:05:69:51:4a:b3:64:ca:4d:3b:b2:8a:2e:5b:60:f9: 13:83:13:fc:31:2e:9c:c9:cd:32:f9:4d:97:29:1c:6d:d9:40: 24:68:65:1f:3e:51:e7:4d:c5:19:56:96:f5:19:8a:ed:46:99: f9:a8:b0:ed:27:a9:e3:ea:19:fb:b8:ec:ea:5c:10:87:e9:9d: 61:4e:bf:81:81:17:2e:00:69:6e:08:9c:12:10:d8:ee:23:1c: 7f:27:48:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu7gF3NNKnjoN+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODRmYTA2NTctZDE5ZS00ZmRjLThhZjItM2FjYWM0YTI4ZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaPh77Qnmeh/KEyr4chSVJX42QWRV6tJryMW jVSX7skArKJlPm53MFCdCan8KfhwP17s7v7mpQ+A4rv69W9oXT1Jb8NSv5uOIzu6 l39Eb2GvyB9mXRqIT2x5Mj6TWVCWLnppafw2TY51+5ZBo1CNWVZ6yHpRa+7b1qhc OyAxfPiD1pMFY12ffu3AkM819EoQuctqlIi3sqdpn2P+SO6ZjLib4srPr9xgYqDO hSal+vFJobHH5wsIuWrPgAXe+1VYPMMn1CDirXkEl4KlCxPgJPH76U7vTrCeHgUW IkHk/H1ocRv4EBngP3U2VBbDSr15EE1fpGN39hTr1NgFnKkEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ3GYSF7TsGDbY9gRl7c76dPb2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDlhMmYyNTQtYTg3ZS0z ODFjLTg4N2EtNDE5OTI0ZTIxNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwfAayS/sRN+m3gu8sa3ET8lWsE8cAzTuR+0pooQmGZFy6lAFcfY9jB lYSOHvZIjCqdFOah8unCuGJM1h/w9b72eq3HwbfCkXzyUb1vjFdNAbC9EAD/N/we X+0O6kPr4I8rwVedFARyg9LmZvo2hRHglRcYm8lothaBulMYrYAyW+hQf+lsrAG6 lpN5n4KDYdTIIh/l9/ads8RmNjvQzqKfk/1AIgVpUUqzZMpNO7KKLltg+RODE/wx LpzJzTL5TZcpHG3ZQCRoZR8+UedNxRlWlvUZiu1GmfmosO0nqePqGfu47OpcEIfp nWFOv4GBFy4AaW4InBIQ2O4jHH8nSFY= -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:15 2026 by rpki-client