$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecf362a-9656-30b9-b648-758958be5ad0.roa File: cecf362a-9656-30b9-b648-758958be5ad0.roa (raw, json) Hash identifier: 3fIRati+r/DKkobPYvUJ400LEmZbEKea5nVWaMeBfmA= Subject key identifier: AD:64:62:55:F9:99:3F:14:B7:8E:56:02:8A:79:1E:1A:81:AF:EC:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB8FB43DE6F6CD38A268F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecf362a-9656-30b9-b648-758958be5ad0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.171.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:8f:b4:3d:e6:f6:cd:38:a2:68:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=232b8b30-0904-47da-91ee-89d8ecde198e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2e:7b:62:5c:57:cc:aa:fb:d0:3e:cd:fb:3e: 86:14:bb:5c:dd:24:0a:42:3f:c8:c4:8a:53:7b:f4: fb:ea:a7:24:f6:be:7c:2c:a9:c1:42:42:32:05:fa: 38:b1:8d:d3:b6:65:a8:a2:69:b0:c6:42:c3:88:4b: f0:09:00:4e:d9:b0:0c:b2:71:0f:64:ab:d3:15:ca: b7:b4:60:e1:7a:a7:25:e8:65:07:97:eb:24:2a:0e: 0c:7e:79:ec:7f:04:7a:5b:55:db:38:79:9f:52:9a: 89:19:43:9f:24:ed:2b:51:1f:55:d9:c8:80:17:11: a5:aa:18:0a:a1:54:af:c6:4c:b9:f8:36:22:9b:ff: b4:4e:19:f6:4b:95:ff:96:ca:0a:c5:15:ca:8d:f6: 72:ae:e2:bf:26:7a:99:34:2e:f6:f2:32:34:c6:18: a8:12:35:0a:7b:09:ac:a1:6d:86:4f:ec:a0:77:6b: 2b:c7:4e:9d:1b:ad:c8:fb:c9:b5:d3:b5:dc:02:6c: 15:09:c4:3f:cd:e2:86:7a:64:be:f3:92:a1:41:c6: a8:96:5c:be:ab:26:26:28:32:a0:47:8a:91:3a:96: a0:48:27:4f:61:f7:9d:9e:02:e1:51:fb:c8:60:3f: 48:06:61:8d:9a:03:a2:16:1b:cc:85:d1:2d:cf:4a: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:64:62:55:F9:99:3F:14:B7:8E:56:02:8A:79:1E:1A:81:AF:EC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cecf362a-9656-30b9-b648-758958be5ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:cb:a1:4e:47:89:d9:de:ab:1d:6a:8e:14:b8:55:ee:87:5b: b6:45:5e:68:78:6f:26:58:ae:47:11:a3:1f:f1:04:1c:d1:32: a9:5b:10:a1:ed:02:ea:a2:bb:be:e2:d0:59:6d:31:c1:a1:b5: c5:c5:50:57:f7:06:7d:fc:00:7a:46:da:c1:83:e0:72:e1:08: 26:41:0c:7c:c3:88:ea:1b:5c:b6:92:d6:23:24:dc:e5:5d:b9: 2c:f7:ec:d3:18:95:1d:ae:6e:62:51:b7:b3:3c:c7:98:2e:0c: 5c:37:a6:79:0e:a4:ce:ca:3a:ad:d3:08:ac:16:04:60:0e:f4: 05:23:f8:71:19:f4:9e:52:b0:e7:73:07:b3:a1:6f:a2:a4:d4: 9f:a4:8d:3c:6c:6a:50:d0:99:36:e5:b4:98:34:09:54:2b:00: fd:77:b6:69:38:66:04:36:fd:b5:57:16:99:2c:9e:d3:83:9d: da:9c:63:78:d8:1f:42:a3:c0:9d:3b:83:9c:2c:a6:5d:41:a8: 7a:2c:e1:09:59:82:c9:e3:46:ec:4e:28:72:4a:49:2d:46:a7: 0e:1b:42:b7:70:3c:0e:61:07:ed:fb:78:41:ca:4c:e4:73:c4: bd:ce:58:b3:8c:b2:36:c3:3d:2b:63:85:96:14:ba:b7:77:80: 47:08:b6:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu4+0Peb2zTiiaPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjMyYjhiMzAtMDkwNC00N2RhLTkxZWUtODlkOGVjZGUxOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi57YlxXzKr70D7N+z6GFLtc3SQKQj/IxIpT e/T76qck9r58LKnBQkIyBfo4sY3TtmWoommwxkLDiEvwCQBO2bAMsnEPZKvTFcq3 tGDheqcl6GUHl+skKg4MfnnsfwR6W1XbOHmfUpqJGUOfJO0rUR9V2ciAFxGlqhgK oVSvxky5+DYim/+0Thn2S5X/lsoKxRXKjfZyruK/JnqZNC728jI0xhioEjUKewms oW2GT+ygd2srx06dG63I+8m107XcAmwVCcQ/zeKGemS+85KhQcaolly+qyYmKDKg R4qROpagSCdPYfedngLhUfvIYD9IBmGNmgOiFhvMhdEtz0qVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1kYlX5mT8Ut45WAop5HhqBr+xGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VjZjM2MmEtOTY1Ni0z MGI5LWI2NDgtNzU4OTU4YmU1YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6vGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzLoU5Hidneqx1qjhS4Ve6HW7ZFXmh4byZYrkcRox/xBBzRMqlbEKHt Auqiu77i0FltMcGhtcXFUFf3Bn38AHpG2sGD4HLhCCZBDHzDiOobXLaS1iMk3OVd uSz37NMYlR2ubmJRt7M8x5guDFw3pnkOpM7KOq3TCKwWBGAO9AUj+HEZ9J5SsOdz B7Ohb6Kk1J+kjTxsalDQmTbltJg0CVQrAP13tmk4ZgQ2/bVXFpksntODndqcY3jY H0KjwJ07g5wspl1BqHos4QlZgsnjRuxOKHJKSS1Gpw4bQrdwPA5hB+37eEHKTORz xL3OWLOMsjbDPStjhZYUurd3gEcIthQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:19:19 2026 by rpki-client