$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa File: d3d0583a-32b8-341b-8a18-30793c6e87fd.roa (raw, json) Hash identifier: ODc7ilHtG04DwjLW3se5ZlL+orCf8ojVWxlbxTtdXi8= Subject key identifier: FD:67:F9:A1:E7:E1:A0:9E:EA:26:87:CD:FB:D0:2B:D7:2B:E1:DA:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D52435E654EE4DD6E78D78B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 174.161.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:5e:65:4e:e4:dd:6e:78:d7:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=51b33230-956f-4c1e-87ae-bf6291bc64f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:f8:90:77:c0:2d:f9:a0:59:0d:d9:f7:83: 29:4b:9f:b7:9b:c6:92:3b:b4:3e:44:22:3c:66:82: 86:80:83:6b:66:22:55:ac:8f:63:0f:f7:d2:e5:7c: d7:cb:3d:62:f7:14:03:29:30:c0:94:e6:a2:50:71: 51:09:df:6c:6c:be:a5:c4:89:82:84:c0:53:9e:f9: e9:5d:04:c5:ef:62:82:26:16:19:04:d1:f5:02:f9: e9:81:68:af:a3:7c:87:8a:be:5d:cb:bd:29:f2:e9: 4d:12:79:0d:b4:43:a1:44:77:a4:09:e1:7e:34:29: b6:ef:55:b9:54:91:80:84:eb:4f:0f:e1:5f:c6:c0: 5a:b6:4d:4a:17:5a:f7:19:3b:9f:ad:2c:49:a9:9d: 7f:2b:4a:48:dd:80:10:a3:f6:0d:66:3c:ac:6a:96: e0:c6:1c:80:a8:bf:41:75:88:6d:c7:84:45:fb:6c: 72:d3:51:70:53:9f:11:44:bf:a8:1f:17:9f:8d:4d: 2e:13:5e:3e:15:aa:b3:ce:b1:93:d3:df:e1:8e:76: 5d:a1:67:8b:b0:b0:7a:82:c2:ca:2c:98:58:95:b8: 58:98:a3:94:f0:48:f5:63:e4:7d:1f:4c:6d:9e:f2: c1:6a:a8:63:d0:72:44:17:60:fa:41:69:d7:0c:52: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:F9:A1:E7:E1:A0:9E:EA:26:87:CD:FB:D0:2B:D7:2B:E1:DA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8d:d5:71:e4:3c:04:d4:fb:bf:16:40:90:f3:87:dd:24:1d: 17:01:d3:c7:1d:3d:82:cb:be:f9:3e:87:8e:0a:07:ec:ec:99: 54:ad:d4:d2:13:67:47:2c:b4:95:6f:ff:14:e8:b2:de:05:04: 9c:73:09:4d:9c:90:a1:71:10:ca:60:84:bd:01:62:b9:64:c5: f9:f4:9d:d9:ef:46:a0:60:3f:4b:30:78:78:15:08:03:6e:0b: 29:8f:d5:6a:ce:14:f9:fd:c5:4d:16:51:b1:51:83:ec:7f:13: 25:08:58:0e:56:1b:39:15:40:96:8c:1d:6b:ba:37:44:7e:3f: 72:e9:e4:1a:98:7a:53:e4:d4:13:19:c4:40:f0:86:d1:f1:ec: 93:c0:b7:aa:9b:30:8a:fc:2f:b8:3d:66:75:cf:25:16:e6:0d: b2:d4:9f:68:27:9c:f3:65:ba:47:ea:0c:83:d5:f7:b9:c8:24: f8:c7:4c:18:5c:cf:8d:ed:11:ca:fc:b2:29:ea:12:d2:6a:1a: 4e:4b:ec:9a:af:b4:89:2c:c7:ad:12:e0:d8:00:e6:37:c3:41: 3c:44:d8:f4:20:86:cd:bc:11:15:2d:92:c4:b9:f5:09:35:70: e0:31:3b:da:9e:13:ae:a0:e5:75:06:c6:f3:4f:35:e2:1b:cf: 8d:83:1b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ15lTuTdbnjXiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NTFiMzMyMzAtOTU2Zi00YzFlLTg3YWUtYmY2MjkxYmM2NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo634kHfALfmgWQ3Z94MpS5+3m8aSO7Q+RCI8 ZoKGgINrZiJVrI9jD/fS5XzXyz1i9xQDKTDAlOaiUHFRCd9sbL6lxImChMBTnvnp XQTF72KCJhYZBNH1AvnpgWivo3yHir5dy70p8ulNEnkNtEOhRHekCeF+NCm271W5 VJGAhOtPD+FfxsBatk1KF1r3GTufrSxJqZ1/K0pI3YAQo/YNZjysapbgxhyAqL9B dYhtx4RF+2xy01FwU58RRL+oHxefjU0uE14+FaqzzrGT09/hjnZdoWeLsLB6gsLK LJhYlbhYmKOU8Ej1Y+R9H0xtnvLBaqhj0HJEF2D6QWnXDFKPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1n+aHn4aCe6iaHzfvQK9cr4do1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNkMDU4M2EtMzJiOC0z NDFiLThhMTgtMzA3OTNjNmU4N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEON1XHkPATU+78WQJDzh90kHRcB08cdPYLLvvk+h44KB+zsmVSt1NIT Z0cstJVv/xTost4FBJxzCU2ckKFxEMpghL0BYrlkxfn0ndnvRqBgP0sweHgVCANu CymP1WrOFPn9xU0WUbFRg+x/EyUIWA5WGzkVQJaMHWu6N0R+P3Lp5BqYelPk1BMZ xEDwhtHx7JPAt6qbMIr8L7g9ZnXPJRbmDbLUn2gnnPNlukfqDIPV97nIJPjHTBhc z43tEcr8sinqEtJqGk5L7JqvtIksx60S4NgA5jfDQTxE2PQghs28ERUtksS59Qk1 cOAxO9qeE66g5XUGxvNPNeIbz42DG3M= -----END CERTIFICATE-----Generated at Fri Apr 17 12:02:18 2026 by rpki-client