$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa File: a0d0eb43-98de-3d94-954f-40e5daa90029.roa (raw, json) Hash identifier: PU3oRdfnFzOKpUbyrZSM4MYl76RSuA/3IBw6SicjDPg= Subject key identifier: 60:B5:12:04:90:4F:4A:AF:D9:3C:AB:E3:90:5D:A9:21:B1:CD:C5:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC6DFFE38291B72F777400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 174.171.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:6d:ff:e3:82:91:b7:2f:77:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a860af97-053a-4ccf-8f90-5b0f1ea8eca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:a8:28:63:f3:0e:50:42:02:db:19:0c:1f: 19:ee:a3:83:81:5e:b7:76:56:38:f0:6f:f9:af:54: 35:b1:b6:27:30:e4:7f:ab:c8:d1:44:0c:2b:78:f9: ae:03:38:c5:cb:52:04:68:00:8e:5a:ce:02:63:66: 53:05:ac:25:76:2f:83:c8:d3:34:af:7c:e0:8e:60: b8:61:59:2c:07:82:c2:48:33:51:46:f2:3e:4d:e8: d3:e0:2c:21:3b:11:71:02:0d:fa:02:dc:28:f8:89: f1:bf:27:df:f8:4c:3d:42:a8:1d:ea:08:ae:20:62: 60:cd:14:93:da:46:2a:bc:33:38:4a:0b:5b:41:3c: cd:0e:27:f1:d9:6b:ae:ee:5c:64:99:20:0e:9a:24: 2c:e2:b9:c9:7b:fa:68:0e:a6:81:87:40:8d:84:db: 4a:b2:db:1d:a0:b6:56:92:20:3c:31:c3:6a:08:35: 54:43:1c:76:47:48:fc:cb:1f:01:72:5e:27:d6:5e: 28:bd:98:6d:d0:10:4b:5e:e4:2b:cf:91:8e:2f:ed: 52:d2:08:24:6f:49:6c:3c:23:4d:95:0e:e8:0c:33: cb:81:e6:e6:b0:9c:53:4f:24:91:5d:77:93:44:4a: d5:b0:10:66:2d:6f:9e:5b:52:f4:bb:79:44:0c:55: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:12:04:90:4F:4A:AF:D9:3C:AB:E3:90:5D:A9:21:B1:CD:C5:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0d0eb43-98de-3d94-954f-40e5daa90029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:03:5b:08:24:92:5a:f2:75:d5:85:d2:22:03:dc:fe:02:b0: 20:61:66:40:5c:31:56:1b:b4:fd:84:99:c9:3f:c7:d5:4b:24: 72:89:2d:02:77:f9:ab:f0:b1:1b:96:f9:e8:43:1c:71:45:25: 01:79:06:91:21:6a:d4:9f:96:ad:19:a6:f5:41:9a:b6:8f:99: 97:69:e5:6d:96:33:75:24:34:b5:a9:6f:21:42:e8:36:79:ba: 17:4d:b0:f0:d6:79:fc:ae:54:a4:47:e3:49:3d:36:d3:ec:47: bc:83:09:34:88:84:fe:b0:73:b7:44:78:ca:7b:c4:90:b1:98: 52:f5:ef:d1:b0:d5:95:de:72:7f:97:74:27:c5:3f:1e:b3:db: ba:12:8b:1f:28:71:91:f7:99:b5:e8:be:23:8b:21:00:2b:70: ec:8a:55:1e:e9:46:de:c7:8f:b1:b4:0a:75:0e:ff:75:47:5a: 87:1a:2c:06:22:eb:91:cb:61:4f:44:2f:74:b5:1b:16:b6:26: 66:c2:da:ac:6a:f0:89:9e:ec:ab:7a:77:55:7d:3c:3b:61:dc: 4a:e0:65:8a:f7:24:e0:09:b0:2a:3d:76:1f:34:ff:cf:6f:eb: 8f:49:1f:51:50:ca:f6:1e:90:4e:0c:d6:2f:a8:a8:f1:f9:5f: 9f:d5:4d:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvG3/44KRty93dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTg2MGFmOTctMDUzYS00Y2NmLThmOTAtNWIwZjFlYThlY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonqoKGPzDlBCAtsZDB8Z7qODgV63dlY48G/5 r1Q1sbYnMOR/q8jRRAwrePmuAzjFy1IEaACOWs4CY2ZTBawldi+DyNM0r3zgjmC4 YVksB4LCSDNRRvI+TejT4CwhOxFxAg36Atwo+Inxvyff+Ew9Qqgd6giuIGJgzRST 2kYqvDM4SgtbQTzNDifx2Wuu7lxkmSAOmiQs4rnJe/poDqaBh0CNhNtKstsdoLZW kiA8McNqCDVUQxx2R0j8yx8Bcl4n1l4ovZht0BBLXuQrz5GOL+1S0ggkb0lsPCNN lQ7oDDPLgebmsJxTTySRXXeTRErVsBBmLW+eW1L0u3lEDFXqCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC1EgSQT0qv2Tyr45BdqSGxzcUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBkMGViNDMtOThkZS0z ZDk0LTk1NGYtNDBlNWRhYTkwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKADWwgkklryddWF0iID3P4CsCBhZkBcMVYbtP2Emck/x9VLJHKJLQJ3 +avwsRuW+ehDHHFFJQF5BpEhatSflq0ZpvVBmraPmZdp5W2WM3UkNLWpbyFC6DZ5 uhdNsPDWefyuVKRH40k9NtPsR7yDCTSIhP6wc7dEeMp7xJCxmFL179Gw1ZXecn+X dCfFPx6z27oSix8ocZH3mbXoviOLIQArcOyKVR7pRt7Hj7G0CnUO/3VHWocaLAYi 65HLYU9EL3S1Gxa2JmbC2qxq8Ime7Kt6d1V9PDth3ErgZYr3JOAJsCo9dh80/89v 649JH1FQyvYekE4M1i+oqPH5X5/VTUg= -----END CERTIFICATE-----Generated at Fri Apr 17 10:48:36 2026 by rpki-client