$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98556e4-9462-3d54-89ce-edf3961abf50.roa File: c98556e4-9462-3d54-89ce-edf3961abf50.roa (raw, json) Hash identifier: NxaEjxkgBaUiOicCLMt+gc381239iaseukjdwLZet0k= Subject key identifier: 31:4B:07:E2:67:ED:5B:45:78:FE:AE:56:28:40:C7:6D:28:68:DF:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC6B4EDDC399E24F7F9D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98556e4-9462-3d54-89ce-edf3961abf50.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 174.170.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:6b:4e:dd:c3:99:e2:4f:7f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e543d19c-851b-4597-bf70-06b0f9f62da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:f4:2c:52:7d:60:07:2c:5a:b7:12:df:60: 23:1b:cc:b3:7b:1f:59:44:5f:c2:6c:72:95:b4:34: ee:ee:be:89:f1:f2:e9:f7:fe:8d:24:33:16:1c:48: 1f:30:ba:8b:fe:e1:4b:78:54:1a:33:8c:78:a9:3e: 7c:c1:3a:57:ef:61:b1:fa:46:3d:88:3a:2c:dc:e4: d5:10:d6:83:e2:79:fe:40:8f:52:71:00:ca:f0:cd: e4:e0:c2:9d:9f:53:e6:80:2e:9e:5a:9c:1f:1c:ab: 62:ed:39:9b:d4:2e:37:80:c4:15:c7:6e:ff:12:ce: a7:c5:9a:eb:eb:ed:99:19:5c:60:a3:36:46:74:53: 10:8a:3e:64:ca:82:f7:df:1c:93:42:bd:86:01:30: c0:4a:67:05:4f:23:67:b7:b4:d1:82:57:f8:3a:de: 8e:12:7f:ba:44:06:e2:a5:69:cb:d9:95:ed:e6:e2: 61:50:da:86:75:d8:e5:e0:02:a8:9e:81:ba:1d:d5: ed:da:3c:7c:c0:a2:02:a6:98:36:47:07:1b:d6:90: 72:ec:35:9a:cd:b9:19:cc:13:09:3c:86:82:7f:31: ce:bb:8d:03:5a:60:7f:44:e1:bb:c7:4e:21:7f:0a: 66:33:09:93:a7:80:02:7d:a0:86:e0:ca:7f:60:d7: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4B:07:E2:67:ED:5B:45:78:FE:AE:56:28:40:C7:6D:28:68:DF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98556e4-9462-3d54-89ce-edf3961abf50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:31:dd:5f:5e:30:04:e3:eb:09:e1:6e:ee:68:43:78:7f:99: 5a:78:c6:63:79:f5:35:0e:b8:a4:16:49:03:1b:9a:6c:17:3a: b8:09:7a:48:5b:13:d3:1f:12:00:17:0b:9e:b3:35:cf:46:38: 7b:bf:dd:ef:fa:83:44:9e:1f:bc:b0:8d:63:a7:48:f9:02:1a: 3e:75:59:98:e1:aa:b4:83:04:2e:1a:45:96:0d:58:e1:54:71: c3:f9:e3:c1:19:c1:ea:f6:d4:3e:74:c1:af:cc:9d:db:f6:6a: 5c:b9:35:ac:a7:05:97:82:56:d3:3d:18:22:a5:8a:34:6a:ba: 6d:e6:b5:7a:c0:6f:ed:01:fa:5e:08:cd:04:58:a1:ec:99:58: 42:ab:d4:48:ca:54:d5:6e:a0:b7:01:5d:45:ec:5d:54:22:8d: 44:cb:ac:9e:a3:1f:02:5d:08:74:3a:45:0a:27:81:de:50:ba: c6:e9:af:e1:e9:95:3c:96:07:3f:ff:5b:63:1d:98:73:9f:9d: be:86:ff:79:e9:09:0d:75:7c:a6:17:10:06:86:98:75:7d:34: 29:9f:ca:2c:01:3d:99:ae:ec:31:97:2b:fb:e6:ae:d7:56:7b: ea:02:ab:aa:c2:cb:68:80:6a:a7:33:21:cf:5f:a7:c9:91:4c: 13:ef:b4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGtO3cOZ4k9/nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTU0M2QxOWMtODUxYi00NTk3LWJmNzAtMDZiMGY5ZjYyZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnez0LFJ9YAcsWrcS32AjG8yzex9ZRF/CbHKV tDTu7r6J8fLp9/6NJDMWHEgfMLqL/uFLeFQaM4x4qT58wTpX72Gx+kY9iDos3OTV ENaD4nn+QI9ScQDK8M3k4MKdn1PmgC6eWpwfHKti7Tmb1C43gMQVx27/Es6nxZrr 6+2ZGVxgozZGdFMQij5kyoL33xyTQr2GATDASmcFTyNnt7TRglf4Ot6OEn+6RAbi pWnL2ZXt5uJhUNqGddjl4AKonoG6HdXt2jx8wKICppg2Rwcb1pBy7DWazbkZzBMJ PIaCfzHOu40DWmB/ROG7x04hfwpmMwmTp4ACfaCG4Mp/YNfAzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFLB+Jn7VtFeP6uVihAx20oaN9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzk4NTU2ZTQtOTQ2Mi0z ZDU0LTg5Y2UtZWRmMzk2MWFiZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAx3V9eMATj6wnhbu5oQ3h/mVp4xmN59TUOuKQWSQMbmmwXOrgJekhb E9MfEgAXC56zNc9GOHu/3e/6g0SeH7ywjWOnSPkCGj51WZjhqrSDBC4aRZYNWOFU ccP548EZwer21D50wa/Mndv2aly5NaynBZeCVtM9GCKlijRqum3mtXrAb+0B+l4I zQRYoeyZWEKr1EjKVNVuoLcBXUXsXVQijUTLrJ6jHwJdCHQ6RQongd5Qusbpr+Hp lTyWBz//W2MdmHOfnb6G/3npCQ11fKYXEAaGmHV9NCmfyiwBPZmu7DGXK/vmrtdW e+oCq6rCy2iAaqczIc9fp8mRTBPvtGA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:45:12 2026 by rpki-client