$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa File: dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa (raw, json) Hash identifier: kSftlpBONDOjve+iaFLtb1s3UME455r8Tce1lOu2XZU= Subject key identifier: B4:03:10:8B:54:B0:EE:C8:57:44:6A:B6:FA:02:6B:63:F4:BA:77:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA7D19A6EB422EF6255730 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 174.168.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:7d:19:a6:eb:42:2e:f6:25:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ea87efba-8ea4-4326-bff5-24673bc72943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:51:a6:7a:ee:20:90:c5:56:1c:a2:8e:7a: 94:40:1b:72:cf:c2:2e:2a:19:ab:a0:42:be:aa:3b: 34:01:4b:9b:51:29:73:fa:1b:32:2c:10:8a:49:60: 5b:c7:61:43:7c:80:a6:ee:9d:83:c4:1d:9e:03:32: ff:24:ab:9b:4f:bc:c7:cc:48:9e:37:d6:ef:8c:b8: 02:4c:de:ec:44:51:8b:2b:0d:bb:be:8a:98:c1:64: ed:0b:45:10:ea:cc:ec:5b:7d:19:dc:33:00:f7:be: 33:92:74:2a:a8:a8:11:eb:7c:8e:e2:34:05:1e:ca: aa:fc:47:a8:7d:7a:0b:02:db:e2:bb:f4:4a:11:1c: bf:77:01:04:f3:71:b5:0a:a5:54:b9:3e:04:a3:83: ea:f4:d0:b3:2c:6d:9e:5c:3a:e9:b7:a2:c7:a9:03: 17:67:68:43:21:70:43:31:f8:fb:f3:0a:e9:87:43: 79:d3:68:1c:3f:3d:92:56:56:de:50:b7:96:41:0b: 03:95:7b:49:76:9a:bb:42:2b:b0:eb:0d:59:2a:b8: 0d:b2:89:3f:7d:ba:85:d1:6a:3a:35:18:6e:c4:52: 00:de:87:f6:61:80:ed:e8:95:3c:7f:49:7e:e4:29: ed:55:d1:f8:64:78:5d:f0:b9:38:2a:19:f8:4e:d8: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:03:10:8B:54:B0:EE:C8:57:44:6A:B6:FA:02:6B:63:F4:BA:77:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:53:8c:a8:95:03:f7:82:20:7c:8d:4a:fd:60:bf:54:92:3d: 85:db:1a:9c:af:14:e4:40:04:78:5d:e8:a9:be:25:7b:64:26: 6d:fa:85:e6:91:16:35:94:a3:f1:cb:fe:81:e3:d9:87:37:7c: 82:02:12:0a:56:8b:8f:67:50:0d:4e:6f:45:a7:c6:7c:9b:83: dc:8e:04:25:52:af:16:6a:09:a3:96:4f:86:f3:10:35:9d:56: 65:58:81:4b:8a:39:81:d1:ed:d5:25:e1:d6:f4:6c:69:fb:4e: eb:ac:e9:d4:11:59:1f:f0:05:26:03:86:f0:5a:34:95:e0:90: b0:fa:04:a3:ec:1b:74:8a:36:a6:6e:d2:2a:d4:25:0e:87:57: 47:59:5b:ff:b8:c6:54:2f:59:19:b7:1b:e8:42:c5:fe:56:d6: 7e:bd:4d:70:f2:47:c7:ef:0d:95:34:15:82:49:bf:b4:2a:9b: 98:b1:88:62:09:06:6e:a0:df:19:f1:d6:91:66:1a:0c:5f:38: 4d:e7:48:0b:f1:5e:4d:09:f0:8e:6c:ab:97:89:95:10:2c:4c: 47:97:19:2c:5c:62:f5:64:3d:c9:23:22:d6:6f:5a:6d:8e:48: 92:17:5b:99:fa:d7:69:d5:53:b2:8d:0f:eb:66:35:0a:ef:2d: 80:de:ea:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vun0ZputCLvYlVzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZWE4N2VmYmEtOGVhNC00MzI2LWJmZjUtMjQ2NzNiYzcyOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbhRpnruIJDFVhyijnqUQBtyz8IuKhmroEK+ qjs0AUubUSlz+hsyLBCKSWBbx2FDfICm7p2DxB2eAzL/JKubT7zHzEieN9bvjLgC TN7sRFGLKw27voqYwWTtC0UQ6szsW30Z3DMA974zknQqqKgR63yO4jQFHsqq/Eeo fXoLAtviu/RKERy/dwEE83G1CqVUuT4Eo4Pq9NCzLG2eXDrpt6LHqQMXZ2hDIXBD Mfj78wrph0N502gcPz2SVlbeULeWQQsDlXtJdpq7Qiuw6w1ZKrgNsok/fbqF0Wo6 NRhuxFIA3of2YYDt6JU8f0l+5CntVdH4ZHhd8Lk4Khn4TtiZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQDEItUsO7IV0RqtvoCa2P0unc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM3MmEwY2ItMDViNy0z MmI5LWJiZTktNTFlNzU5OTUzOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpTjKiVA/eCIHyNSv1gv1SSPYXbGpyvFORABHhd6Km+JXtkJm36heaR FjWUo/HL/oHj2Yc3fIICEgpWi49nUA1Ob0Wnxnybg9yOBCVSrxZqCaOWT4bzEDWd VmVYgUuKOYHR7dUl4db0bGn7Tuus6dQRWR/wBSYDhvBaNJXgkLD6BKPsG3SKNqZu 0irUJQ6HV0dZW/+4xlQvWRm3G+hCxf5W1n69TXDyR8fvDZU0FYJJv7Qqm5ixiGIJ Bm6g3xnx1pFmGgxfOE3nSAvxXk0J8I5sq5eJlRAsTEeXGSxcYvVkPckjItZvWm2O SJIXW5n612nVU7KND+tmNQrvLYDe6iY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:11 2026 by rpki-client