$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bd4410d-2668-3206-8ad6-ca5c6a5d1962.roa File: 8bd4410d-2668-3206-8ad6-ca5c6a5d1962.roa (raw, json) Hash identifier: 9hVySxWKvhrY4xHmP+YcccvmsDPICxUewSlMKjtdZM0= Subject key identifier: E5:63:9C:80:F3:4A:EE:82:2C:58:22:BD:0A:E5:C1:3F:A8:88:AB:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAFAF3D81AFE730B4D8280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bd4410d-2668-3206-8ad6-ca5c6a5d1962.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 174.174.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:fa:f3:d8:1a:fe:73:0b:4d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bae6f654-af6d-4da5-bb61-d44da6b1f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:42:90:75:7a:29:cb:1f:fb:63:08:bb:5e: b9:39:80:3b:82:95:08:be:7e:e9:8e:18:99:d5:cf: 50:c8:64:db:93:a8:b4:34:8b:af:0c:5d:15:46:9f: 88:fa:33:6f:b9:7c:78:2e:d7:e9:88:dd:21:da:01: c9:5c:d3:c6:dd:d5:8f:06:f0:46:2a:1d:5a:b3:05: a9:a8:59:51:94:87:2f:a5:d4:f1:19:53:19:98:a3: f4:97:02:ff:8c:ff:41:4b:9a:9e:d0:93:f1:38:0f: 2b:2f:5e:95:47:ca:6c:ee:22:0a:d3:44:a9:39:41: d6:22:52:52:c8:18:1b:0b:0e:df:55:0f:d9:a8:19: 10:df:44:74:56:6f:8b:b3:66:52:4d:36:46:20:85: f1:12:a0:42:82:3f:6b:b4:2d:8e:c9:0d:58:8b:49: bf:86:8e:0c:ca:a2:92:1e:87:ae:dd:cf:4b:d1:32: c3:62:80:59:6d:01:fa:14:9b:9f:9b:39:f6:d9:cc: 94:3c:49:3f:3e:a5:53:80:e6:bb:84:b3:d0:d9:a0: 88:fe:ce:7a:71:df:cc:6e:d9:f2:81:41:83:58:c8: 14:0f:bc:5b:20:48:9b:fb:12:36:16:00:e2:a1:07: bd:33:58:2b:20:d2:08:ef:36:ca:5b:b8:20:19:54: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:63:9C:80:F3:4A:EE:82:2C:58:22:BD:0A:E5:C1:3F:A8:88:AB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8bd4410d-2668-3206-8ad6-ca5c6a5d1962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.174.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:dd:ed:75:8b:f7:12:5e:7b:ee:f5:a6:a1:1e:76:82:d2:85: 8d:19:cd:e9:00:2e:24:90:45:52:bf:08:6a:a7:92:ff:53:27: de:5a:1b:1b:c7:22:b6:18:10:69:7f:32:25:47:f4:9c:50:f4: 11:55:d5:c7:c9:f9:17:a4:26:c9:d0:c6:5a:8d:56:bb:f6:cc: e0:f9:f0:ce:29:6d:c7:eb:f7:e1:ab:e4:7a:3b:9a:66:c6:85: 56:e2:f2:ec:85:7b:21:f8:34:d5:08:69:f2:e6:b3:fb:90:2a: 85:e0:42:35:cf:8f:ac:e7:1e:90:3d:ff:30:db:c6:f0:c4:8d: 51:02:ec:97:3a:31:34:49:c2:6f:3c:b6:37:20:51:ec:2b:a7: 51:14:28:62:db:e8:16:21:53:1c:d5:79:95:dd:98:cc:7c:e4: a2:e9:6c:5a:7b:c9:4f:2b:86:72:0c:ec:e6:95:f5:ba:eb:b1: 44:ef:ed:57:8f:31:18:8c:85:37:12:a2:67:16:18:71:27:a2: 00:cf:05:c1:62:bf:25:dc:d9:fa:09:3b:4b:7f:7c:7c:0a:77: d7:7a:2d:c7:60:da:e6:af:e1:fd:49:bb:72:00:02:c8:c5:15: 19:52:8b:a0:51:6f:dc:f4:10:26:c9:2f:14:ab:c3:a2:06:92: 15:9a:2e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuvrz2Br+cwtNgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmFlNmY2NTQtYWY2ZC00ZGE1LWJiNjEtZDQ0ZGE2YjFmNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VCkHV6Kcsf+2MIu165OYA7gpUIvn7pjhiZ 1c9QyGTbk6i0NIuvDF0VRp+I+jNvuXx4LtfpiN0h2gHJXNPG3dWPBvBGKh1aswWp qFlRlIcvpdTxGVMZmKP0lwL/jP9BS5qe0JPxOA8rL16VR8ps7iIK00SpOUHWIlJS yBgbCw7fVQ/ZqBkQ30R0Vm+Ls2ZSTTZGIIXxEqBCgj9rtC2OyQ1Yi0m/ho4MyqKS Hoeu3c9L0TLDYoBZbQH6FJufmzn22cyUPEk/PqVTgOa7hLPQ2aCI/s56cd/Mbtny gUGDWMgUD7xbIEib+xI2FgDioQe9M1grINII7zbKW7ggGVRF8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVjnIDzSu6CLFgivQrlwT+oiKvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGJkNDQxMGQtMjY2OC0z MjA2LThhZDYtY2E1YzZhNWQxOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTd7XWL9xJee+71pqEedoLShY0ZzekALiSQRVK/CGqnkv9TJ95aGxvH IrYYEGl/MiVH9JxQ9BFV1cfJ+RekJsnQxlqNVrv2zOD58M4pbcfr9+Gr5Ho7mmbG hVbi8uyFeyH4NNUIafLms/uQKoXgQjXPj6znHpA9/zDbxvDEjVEC7Jc6MTRJwm88 tjcgUewrp1EUKGLb6BYhUxzVeZXdmMx85KLpbFp7yU8rhnIM7OaV9brrsUTv7VeP MRiMhTcSomcWGHEnogDPBcFivyXc2foJO0t/fHwKd9d6Lcdg2uav4f1Ju3IAAsjF FRlSi6BRb9z0ECbJLxSrw6IGkhWaLh0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:00 2026 by rpki-client