$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa File: 89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa (raw, json) Hash identifier: leK7ZkRtTIKIa3lpqtjn4waRpsIM22e66oxP+/L7jqA= Subject key identifier: 3C:2D:75:9F:E6:3A:89:40:8D:05:4B:96:7E:B0:81:24:6E:8A:B7:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D80FFFEE1376A9197CBDEA740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 7725 IP address blocks: 174.163.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fe:e1:37:6a:91:97:cb:de:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=c0be35f4-8ab0-4938-a626-0b047c0c0734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:42:8b:b2:29:00:fd:be:e9:39:7e:42:9e: ae:2c:90:14:32:c0:fa:12:09:be:7a:08:d9:17:54: 39:53:9b:b0:92:e5:c4:af:f6:76:bb:b1:7b:e7:43: 4b:6a:d3:33:63:96:da:ea:16:24:ef:96:a0:e4:73: da:ce:e4:aa:4e:41:ab:c0:c1:b9:2a:64:fe:36:04: 6f:05:0a:7c:88:25:b1:d0:77:af:ad:71:13:df:5c: c7:20:35:da:59:99:fb:a7:ab:46:2e:8c:c0:43:6e: fd:9b:ca:56:02:00:d0:fb:e4:d1:49:3e:c0:db:35: b9:20:70:21:6c:a4:d0:d3:61:c0:5a:09:d0:51:88: be:bd:cb:48:f3:35:23:ba:2a:45:03:21:c0:89:ad: af:ce:41:f5:53:89:ec:18:41:1b:d3:69:e2:44:47: 84:5d:b8:dc:19:79:af:a7:af:57:a7:4f:8a:a6:f9: d9:be:ee:7e:5a:81:e7:2f:36:cf:bb:5e:40:6b:bd: c4:52:3c:83:49:54:ae:aa:7e:8c:95:4d:2c:6a:ac: 24:0d:ec:44:8b:3b:85:c5:3a:bf:e6:f0:18:8b:ba: 71:8f:93:ff:b6:b8:29:84:4f:69:6e:90:7d:b4:20: 17:94:ce:55:28:aa:f7:a6:46:43:93:54:a4:16:5d: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2D:75:9F:E6:3A:89:40:8D:05:4B:96:7E:B0:81:24:6E:8A:B7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89b9a49f-1a9f-3e07-b52a-cf1fbd3e6033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.163.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c4:15:58:8a:78:b1:ae:ff:1d:6f:60:29:de:b0:5a:d2:05: 13:59:73:ef:2a:11:e4:db:8c:01:cb:35:5f:62:f4:e1:51:3c: bd:c6:e0:f2:27:1b:bc:6e:e5:51:1a:da:39:f3:49:2d:20:e6: d3:01:d2:31:23:69:5d:fe:15:03:66:96:40:94:1c:79:18:37: 97:0b:d6:b8:de:5a:3e:6b:5c:82:1e:bf:09:d8:f9:09:ce:be: ed:fe:85:d7:44:86:8d:2b:7b:73:e0:02:bf:d2:b3:a5:d5:19: ea:bc:2f:9b:c0:f7:c2:c0:98:c7:01:b2:a1:06:46:79:6d:27: d9:e3:28:5d:34:bb:03:4a:38:b8:77:c8:0f:5d:d7:dd:f1:f8: 44:fb:72:6c:40:02:58:62:6c:f9:32:de:be:98:f8:e2:49:de: 9e:dc:b9:37:c8:9b:70:cf:e3:f3:7a:29:6f:b0:e3:82:30:59: 47:64:b6:17:7f:a7:2c:56:a6:bf:69:2e:10:e9:58:ed:63:56: d7:f7:8e:84:2b:ca:d3:d2:fa:2d:b4:18:fa:40:f4:5c:8f:3e: 6b:70:e0:c1:d6:b0:fc:c1:9f:c4:84:90:a0:76:88:82:a0:1d: 29:17:53:52:38:8e:ba:27:02:fe:63:de:d0:58:2e:8d:d5:ea: 20:06:99:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//7hN2qRl8vep0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YzBiZTM1ZjQtOGFiMC00OTM4LWE2MjYtMGIwNDdjMGMwNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa9Ci7IpAP2+6Tl+Qp6uLJAUMsD6Egm+egjZ F1Q5U5uwkuXEr/Z2u7F750NLatMzY5ba6hYk75ag5HPazuSqTkGrwMG5KmT+NgRv BQp8iCWx0HevrXET31zHIDXaWZn7p6tGLozAQ279m8pWAgDQ++TRST7A2zW5IHAh bKTQ02HAWgnQUYi+vctI8zUjuipFAyHAia2vzkH1U4nsGEEb02niREeEXbjcGXmv p69Xp0+KpvnZvu5+WoHnLzbPu15Aa73EUjyDSVSuqn6MlU0saqwkDexEizuFxTq/ 5vAYi7pxj5P/trgphE9pbpB9tCAXlM5VKKr3pkZDk1SkFl1DNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwtdZ/mOolAjQVLln6wgSRuirdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODliOWE0OWYtMWE5Zi0z ZTA3LWI1MmEtY2YxZmJkM2U2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXEFViKeLGu/x1vYCnesFrSBRNZc+8qEeTbjAHLNV9i9OFRPL3G4PIn G7xu5VEa2jnzSS0g5tMB0jEjaV3+FQNmlkCUHHkYN5cL1rjeWj5rXIIevwnY+QnO vu3+hddEho0re3PgAr/Ss6XVGeq8L5vA98LAmMcBsqEGRnltJ9njKF00uwNKOLh3 yA9d193x+ET7cmxAAlhibPky3r6Y+OJJ3p7cuTfIm3DP4/N6KW+w44IwWUdkthd/ pyxWpr9pLhDpWO1jVtf3joQrytPS+i20GPpA9FyPPmtw4MHWsPzBn8SEkKB2iIKg HSkXU1I4jronAv5j3tBYLo3V6iAGmRI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:42 2026 by rpki-client