$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa File: baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa (raw, json) Hash identifier: nr7uDnkyrdjJgnbAK5raVFafZnHeCM8b43SiJEur5Rk= Subject key identifier: 84:BA:BA:7A:3A:B9:25:82:70:60:D3:B4:B4:EF:E4:29:E9:30:F1:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAF7167C3E79A29BC0CF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 107.4.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:f7:16:7c:3e:79:a2:9b:c0:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cf88d891-0d32-47a3-bcdb-224c667e6f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:e9:12:ec:50:38:e5:41:6e:2d:ec:0a:94: 5a:61:f6:bf:5e:54:b0:11:28:9a:8f:a4:81:c0:75: c8:82:b2:8c:1c:fd:21:2b:9f:16:89:02:4e:db:9a: 34:fb:43:b7:b5:de:72:68:be:43:6d:71:58:6c:b7: 2c:df:89:75:28:cc:39:9d:70:4e:c8:23:90:2f:cb: f2:bc:67:7f:9d:bb:ee:73:22:ee:c8:b0:9b:3c:fc: f1:9f:ca:f5:4d:3f:b6:26:9d:9e:02:d6:c7:df:60: 86:3a:b7:ef:a6:d8:e1:1c:fb:d1:e1:83:c1:92:98: 66:c4:16:30:11:a1:75:7b:5f:65:2f:9e:06:6e:3d: 3c:ba:b2:db:0d:ba:c1:a9:60:7f:3a:71:9a:df:fb: f8:c9:5f:0c:a3:f8:8c:89:05:33:a6:33:3a:81:2e: 80:48:39:f9:29:9e:cb:0f:e1:09:26:48:84:be:4d: ea:43:e2:b3:86:3b:b1:e6:23:0c:63:97:79:5f:4a: c1:8c:68:60:a4:1e:8c:10:be:6d:b6:b2:9c:0a:30: 7c:41:76:b3:a2:ff:61:fa:73:f6:50:4b:77:55:51: 8d:c2:a8:44:74:4b:eb:4f:a3:1f:26:f5:eb:83:e1: f8:f5:4d:6b:fb:b6:b5:b9:03:01:5c:fa:bd:ad:e6: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:BA:7A:3A:B9:25:82:70:60:D3:B4:B4:EF:E4:29:E9:30:F1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf4f579-eff0-350e-b7a3-cfd43cfea10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:97:72:b1:18:81:1f:f7:b6:7d:37:c0:04:d5:3b:91:d8:f9: 33:da:9f:74:d4:15:14:8a:40:0b:e1:8c:22:d0:eb:38:f8:7c: 1c:e8:86:db:dc:a7:f9:49:d9:70:26:d6:bd:2b:a6:03:19:3e: 38:95:37:56:4c:13:ef:c9:24:2d:37:2b:2d:1d:4f:98:4f:c7: e5:0a:80:28:bc:8d:21:cd:22:01:52:ab:88:40:b4:cb:42:5f: ba:80:5c:6b:cb:f4:10:70:89:2d:d5:95:1b:bb:05:56:e3:bf: 11:22:1b:f6:35:96:a5:5d:31:e2:32:1f:db:88:1e:45:13:33: 6b:0c:2a:c3:b7:d1:b2:68:6c:72:5f:92:9c:f4:f1:50:1d:25: ce:b6:13:79:04:d0:e5:3f:75:b7:f2:e2:7a:b8:cd:ba:bd:48: 9d:55:b4:87:e9:e2:cb:42:0d:17:18:45:c3:bc:77:cb:aa:e5: c7:8f:f0:ef:cf:66:87:c3:3b:8e:fb:2a:08:26:49:5e:5d:22: 08:96:30:ae:21:d9:1b:94:5f:4f:04:6f:8c:26:3e:85:c0:c0: 2e:b8:35:43:34:4f:47:8b:1a:98:32:40:7c:e4:08:2a:6c:4a: ea:8d:e2:84:5b:28:71:81:f1:62:50:e0:07:b7:60:8a:a4:be: 53:13:ff:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuvcWfD55opvAz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2Y4OGQ4OTEtMGQzMi00N2EzLWJjZGItMjI0YzY2N2U2ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsITpEuxQOOVBbi3sCpRaYfa/XlSwESiaj6SB wHXIgrKMHP0hK58WiQJO25o0+0O3td5yaL5DbXFYbLcs34l1KMw5nXBOyCOQL8vy vGd/nbvucyLuyLCbPPzxn8r1TT+2Jp2eAtbH32CGOrfvptjhHPvR4YPBkphmxBYw EaF1e19lL54Gbj08urLbDbrBqWB/OnGa3/v4yV8Mo/iMiQUzpjM6gS6ASDn5KZ7L D+EJJkiEvk3qQ+Kzhjux5iMMY5d5X0rBjGhgpB6MEL5ttrKcCjB8QXazov9h+nP2 UEt3VVGNwqhEdEvrT6MfJvXrg+H49U1r+7a1uQMBXPq9rea2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS6uno6uSWCcGDTtLTv5CnpMPHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmNGY1NzktZWZmMC0z NTBlLWI3YTMtY2ZkNDNjZmVhMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+XcrEYgR/3tn03wATVO5HY+TPan3TUFRSKQAvhjCLQ6zj4fBzohtvc p/lJ2XAm1r0rpgMZPjiVN1ZME+/JJC03Ky0dT5hPx+UKgCi8jSHNIgFSq4hAtMtC X7qAXGvL9BBwiS3VlRu7BVbjvxEiG/Y1lqVdMeIyH9uIHkUTM2sMKsO30bJobHJf kpz08VAdJc62E3kE0OU/dbfy4nq4zbq9SJ1VtIfp4stCDRcYRcO8d8uq5ceP8O/P ZofDO477KggmSV5dIgiWMK4h2RuUX08Eb4wmPoXAwC64NUM0T0eLGpgyQHzkCCps SuqN4oRbKHGB8WJQ4Ae3YIqkvlMT/40= -----END CERTIFICATE-----Generated at Fri Apr 17 10:08:58 2026 by rpki-client