$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa File: 5bb221f0-982b-3d95-87c9-0d93d45f3307.roa (raw, json) Hash identifier: 8uiMi4oPMnalqv4N7OsIQaP94XF2fN/frJf/pppa9gE= Subject key identifier: E5:8D:BC:CF:22:C4:25:CC:DE:20:40:36:42:BC:6B:80:37:97:0F:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB8F1AD598E5EBB0E7B1A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.170.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:8f:1a:d5:98:e5:eb:b0:e7:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6a966862-32b9-4498-bdb9-35c68fa38bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:b9:45:8e:20:cf:54:cb:da:93:79:15:65: ec:cd:b3:7e:e2:08:b9:eb:b7:6a:88:fa:7a:0f:d5: 01:aa:53:98:b1:c4:cc:6b:71:76:29:00:2b:88:67: 6b:ae:cd:1a:c7:4b:1e:8a:77:05:cf:5f:ea:e6:c1: 68:a9:f2:5d:25:c8:9e:a6:35:b4:48:cd:28:09:cb: 3b:a9:22:42:c9:c1:51:b6:fe:f6:25:f7:af:55:a4: 61:c7:2c:55:ab:ff:c2:e0:da:ef:99:73:45:4a:31: 1b:a3:03:ee:a1:d3:4d:ab:c9:c1:78:6b:10:f6:e9: 98:43:43:82:2b:62:8d:24:ca:2b:6a:01:d9:83:09: b9:0f:cb:92:2e:37:74:cc:87:39:94:4b:77:35:2d: 76:9e:2a:33:4a:22:e0:a5:06:72:61:3d:51:11:98: 25:b2:36:cd:65:db:6d:71:1a:82:f8:10:14:db:8d: aa:8b:c8:6d:2f:57:a5:5e:56:a3:d3:d6:9b:c3:82: 4a:4a:97:a6:df:85:3f:7e:20:f9:49:eb:ac:28:ea: 17:d5:dd:e1:71:38:cb:94:19:c0:b8:41:46:cf:ed: 5e:a0:7f:b3:41:dd:55:75:c2:f0:fa:c7:b5:05:bd: 11:ad:29:13:40:e1:ff:4a:64:59:13:61:78:a9:12: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8D:BC:CF:22:C4:25:CC:DE:20:40:36:42:BC:6B:80:37:97:0F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bb221f0-982b-3d95-87c9-0d93d45f3307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0a:4a:c7:68:87:5d:36:26:f1:fa:31:5b:5d:aa:30:69:36: 93:2f:42:3f:68:fc:a9:d9:ec:30:bc:ee:fb:13:07:b7:9b:b9: 3b:02:1b:03:59:44:3b:05:68:15:af:1e:b1:1c:3e:cb:8d:4b: ee:fe:b4:8c:c6:44:ad:1f:59:f2:f9:44:49:8a:cd:31:15:07: a2:62:a5:91:be:8a:3c:5f:34:ac:80:b2:f0:2b:67:a4:05:97: 39:ba:30:0e:86:6d:b2:8b:4f:f9:63:4b:82:e4:21:ef:51:49: 0f:61:9f:9c:07:5d:56:46:6c:e5:d5:57:fe:fe:78:21:61:a2: 9e:8a:f7:86:8d:b5:31:bf:0a:82:54:aa:9f:10:90:4e:7a:cf: 6d:0f:ea:de:c6:c4:ce:06:d4:97:89:00:75:71:fd:1c:1f:2d: c8:5f:dd:8e:c2:b8:aa:7c:fa:a4:2d:01:ec:85:3f:ca:08:a8: 2f:71:37:35:34:f4:29:d5:6d:93:37:6b:91:1b:d4:06:38:0a: d2:21:e9:17:84:ab:e0:41:f8:17:38:df:86:1d:43:e8:0c:0d: d4:58:4b:f1:41:cc:02:42:1f:42:6a:c0:d9:72:eb:73:4d:31: f5:da:be:49:d9:af:d4:a7:55:6e:ea:49:93:7c:63:57:93:e9: 4c:fb:e8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu48a1Zjl67DnsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmE5NjY4NjItMzJiOS00NDk4LWJkYjktMzVjNjhmYTM4YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW25RY4gz1TL2pN5FWXszbN+4gi567dqiPp6 D9UBqlOYscTMa3F2KQAriGdrrs0ax0seincFz1/q5sFoqfJdJciepjW0SM0oCcs7 qSJCycFRtv72JfevVaRhxyxVq//C4NrvmXNFSjEbowPuodNNq8nBeGsQ9umYQ0OC K2KNJMoragHZgwm5D8uSLjd0zIc5lEt3NS12niozSiLgpQZyYT1REZglsjbNZdtt cRqC+BAU242qi8htL1elXlaj09abw4JKSpem34U/fiD5SeusKOoX1d3hcTjLlBnA uEFGz+1eoH+zQd1VdcLw+se1Bb0RrSkTQOH/SmRZE2F4qRKfSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWNvM8ixCXM3iBANkK8a4A3lw/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJiMjIxZjAtOTgyYi0z ZDk1LTg3YzktMGQ5M2Q0NWYzMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgKSsdoh102JvH6MVtdqjBpNpMvQj9o/KnZ7DC87vsTB7ebuTsCGwNZ RDsFaBWvHrEcPsuNS+7+tIzGRK0fWfL5REmKzTEVB6JipZG+ijxfNKyAsvArZ6QF lzm6MA6GbbKLT/ljS4LkIe9RSQ9hn5wHXVZGbOXVV/7+eCFhop6K94aNtTG/CoJU qp8QkE56z20P6t7GxM4G1JeJAHVx/RwfLchf3Y7CuKp8+qQtAeyFP8oIqC9xNzU0 9CnVbZM3a5Eb1AY4CtIh6ReEq+BB+Bc434YdQ+gMDdRYS/FBzAJCH0JqwNly63NN MfXavknZr9SnVW7qSZN8Y1eT6Uz76IE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:00 2026 by rpki-client