$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa File: a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa (raw, json) Hash identifier: SqzmZqSzMsG3+Jw9iBzAdsbiLFETXkvZd1gjGVyRU9Q= Subject key identifier: 04:35:D8:83:4C:94:FE:26:76:F3:7C:CC:17:A1:9D:0C:E3:5B:CA:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D81006E02AE979A2C3B7D6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 7725 IP address blocks: 67.191.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:6e:02:ae:97:9a:2c:3b:7d:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=f276625b-10e4-4f55-944d-d02531bf592f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:1e:69:3a:53:9e:a2:d1:4f:1d:d8:b4:73: 44:6b:66:d3:b1:9d:86:b2:30:03:93:f9:28:26:eb: c9:03:0a:4d:42:9a:17:bd:aa:50:b9:d2:3c:61:03: 6c:85:57:22:ef:6b:fc:e4:1c:08:d1:a8:f2:32:e6: 9f:2f:30:36:14:d7:13:9c:f0:41:a1:ac:bc:f6:3a: 1d:df:26:fb:65:4d:4b:35:72:ac:81:fb:d3:c4:d0: 09:97:73:a3:03:a9:3e:8b:e7:e2:2a:2d:74:e8:33: b7:4f:e6:b0:9f:06:67:45:0d:e9:56:e9:7e:7f:78: b2:21:3c:1f:78:3e:ae:9e:3a:71:61:20:c2:84:cb: 98:37:76:e8:7b:a1:86:8c:74:e8:d9:28:24:b8:bd: 24:4e:bb:d8:a8:d4:28:ba:cc:77:14:28:4d:54:ee: 09:9c:a0:1d:0d:9e:d8:36:58:df:7e:a7:b9:1d:e0: 75:40:54:5c:cf:90:06:33:8a:62:e9:71:02:b7:e0: f4:50:d8:b8:71:47:83:70:93:8c:73:14:04:b2:c7: df:e1:08:73:1c:cf:7e:33:a5:25:68:3f:5f:2b:95: eb:17:88:42:89:9e:06:cb:a4:51:fe:50:40:23:62: e6:b3:ca:e4:d8:70:7f:0b:65:5b:a8:60:95:dc:d6: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:D8:83:4C:94:FE:26:76:F3:7C:CC:17:A1:9D:0C:E3:5B:CA:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:00:c5:c7:df:bb:29:30:64:b2:1a:44:28:da:54:22:d6:c4: 7c:f5:c8:4d:63:88:d7:0c:c9:6a:a2:c1:b2:01:7d:48:bc:ee: 99:c3:77:be:f4:cc:75:1d:8f:31:0e:01:64:54:b9:eb:93:b1: 87:ce:22:57:3e:18:f1:35:74:62:72:ec:ec:43:a4:d4:44:68: ef:20:90:27:28:eb:de:76:d1:9f:e4:64:1f:90:28:ad:ee:ec: 1e:93:df:3d:57:18:7c:8b:2f:a4:4c:d3:aa:b6:93:d3:1e:15: a8:d0:ac:a3:ce:a6:72:83:42:5e:3f:e3:dc:13:d3:bb:c7:db: 5b:76:ed:7f:3e:eb:0d:44:c3:9e:cd:92:46:cf:94:ef:42:23: 97:e2:1b:c5:19:1a:e6:4b:9b:4e:8a:3e:40:60:42:e8:8a:2a: 22:1d:b7:1d:93:b0:77:6b:79:8f:e1:d0:5f:be:fd:63:a7:51: 09:ae:45:ef:c5:78:d5:4f:9f:82:d0:f4:8a:43:fb:4f:05:b6: 93:9c:22:f6:5c:50:9e:b3:2f:81:e5:4c:f5:99:1c:ea:43:08: 55:b4:56:0e:2e:54:66:eb:56:50:bd:c7:8c:c4:18:b5:71:bd: 17:ef:35:50:89:40:d5:af:89:e6:4b:23:ab:ea:4f:b6:48:7c: e9:56:76:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAG4CrpeaLDt9ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZjI3NjYyNWItMTBlNC00ZjU1LTk0NGQtZDAyNTMxYmY1OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHceaTpTnqLRTx3YtHNEa2bTsZ2GsjADk/ko JuvJAwpNQpoXvapQudI8YQNshVci72v85BwI0ajyMuafLzA2FNcTnPBBoay89jod 3yb7ZU1LNXKsgfvTxNAJl3OjA6k+i+fiKi106DO3T+awnwZnRQ3pVul+f3iyITwf eD6unjpxYSDChMuYN3boe6GGjHTo2SgkuL0kTrvYqNQousx3FChNVO4JnKAdDZ7Y Nljffqe5HeB1QFRcz5AGM4pi6XECt+D0UNi4cUeDcJOMcxQEssff4QhzHM9+M6Ul aD9fK5XrF4hCiZ4Gy6RR/lBAI2Lms8rk2HB/C2VbqGCV3NYyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ12INMlP4mdvN8zBehnQzjW8qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJmNDU5NWMtNDYyMy0z MWFkLTgyYWYtYWE2ZTdhNjkyMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUAxcffuykwZLIaRCjaVCLWxHz1yE1jiNcMyWqiwbIBfUi87pnDd770 zHUdjzEOAWRUueuTsYfOIlc+GPE1dGJy7OxDpNREaO8gkCco69520Z/kZB+QKK3u 7B6T3z1XGHyLL6RM06q2k9MeFajQrKPOpnKDQl4/49wT07vH21t27X8+6w1Ew57N kkbPlO9CI5fiG8UZGuZLm06KPkBgQuiKKiIdtx2TsHdreY/h0F++/WOnUQmuRe/F eNVPn4LQ9IpD+08FtpOcIvZcUJ6zL4HlTPWZHOpDCFW0Vg4uVGbrVlC9x4zEGLVx vRfvNVCJQNWvieZLI6vqT7ZIfOlWdos= -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:48 2026 by rpki-client