$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea58c461-eacb-3016-a66f-60eef717a3cd.roa File: ea58c461-eacb-3016-a66f-60eef717a3cd.roa (raw, json) Hash identifier: RjJG+TIavXwONlCdMORLRgtDvQWt3Et8kK8DPSOZR00= Subject key identifier: AD:A4:3A:C1:74:DA:4E:B6:2A:F3:68:66:17:8B:E4:28:C6:2A:CC:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA57AD1C85669D14715F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea58c461-eacb-3016-a66f-60eef717a3cd.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 67.189.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:57:ad:1c:85:66:9d:14:71:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6a5861e6-cb0e-4a5d-aa10-d67e73bb186b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:27:71:f2:b9:00:17:6b:12:e2:b6:17:93: ee:f0:b4:48:0b:a5:cf:5b:6d:a5:59:ad:94:80:59: 4a:75:a3:bf:e9:92:51:b8:00:0a:db:f5:0e:00:d3: 3d:c2:63:17:5a:b3:17:3b:9b:ac:d0:f9:d1:b9:2d: bb:0a:4c:a9:1e:b2:4e:73:be:47:21:91:7a:83:95: f5:2e:a6:95:fb:da:08:0d:7a:8c:c7:08:7b:98:90: 1f:7b:c4:31:0e:60:fa:73:48:2e:04:93:c2:8f:c1: 73:90:81:d5:88:6d:bc:f4:66:ff:e2:74:3f:fb:ed: 1c:de:24:4b:20:2d:84:9c:f1:cb:24:21:1f:3f:25: 9f:65:08:da:98:52:30:d5:d5:7e:5c:21:b9:8c:e6: b7:15:2a:88:27:a9:db:b6:9f:36:a0:2b:35:f0:41: d5:fc:8a:2a:9a:f5:49:44:8c:ac:20:a8:61:0e:c1: 3a:f5:44:8a:ff:c2:ff:3a:2f:bd:5a:72:39:f2:cd: b4:de:d5:e2:70:09:c6:c8:83:d9:a6:00:79:3c:6f: 81:b3:97:7b:8c:67:db:b5:91:89:a3:db:c5:98:a1: 2a:25:ba:5c:f8:d0:f8:3c:52:e2:eb:38:f5:32:77: 85:bb:67:da:df:e2:37:dc:0a:3f:d6:31:5f:be:45: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A4:3A:C1:74:DA:4E:B6:2A:F3:68:66:17:8B:E4:28:C6:2A:CC:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea58c461-eacb-3016-a66f-60eef717a3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:42:43:81:55:51:05:5f:e5:98:1b:c2:25:0f:2b:02:4a:09: 84:2f:3e:7e:75:c5:25:88:22:1c:d5:2a:3f:e6:88:bd:d6:da: 50:95:c6:6c:8c:d4:9a:32:a8:ae:47:d8:61:e8:2a:63:b6:02: 06:d1:b3:b1:e0:88:87:0f:98:57:b7:67:a4:f2:34:85:94:b2: ff:d1:3d:1c:fe:53:4c:ae:3a:2a:aa:a4:b5:46:df:55:4d:df: 48:bb:d6:42:74:8f:f5:16:9b:cd:74:a8:42:ff:e3:e4:cc:9f: 22:a2:f9:5e:1e:4c:c0:80:77:4d:af:22:19:62:da:7f:3a:f9: fd:15:08:86:36:e6:3e:24:8b:23:56:6d:5b:06:16:f0:99:2e: 4c:bb:07:5f:af:45:f7:69:37:0b:99:a2:36:5e:98:c3:43:89: 7c:98:87:ae:1e:b5:69:52:44:ba:4e:47:9f:d6:cd:e3:c7:e4: 83:dd:60:22:17:75:e2:7a:61:74:70:e2:99:46:b9:83:b8:5c: 39:bc:47:38:26:87:3c:a6:df:21:38:db:f6:aa:1f:34:bc:fb: 66:3e:1c:d7:0a:45:10:2c:91:be:7d:01:d2:75:ea:a1:84:63: 84:88:1b:37:a8:e1:23:21:3e:32:19:a6:c2:08:0c:b2:7f:4c: 4c:b9:2a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuletHIVmnRRxXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmE1ODYxZTYtY2IwZS00YTVkLWFhMTAtZDY3ZTczYmIxODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+IncfK5ABdrEuK2F5Pu8LRIC6XPW22lWa2U gFlKdaO/6ZJRuAAK2/UOANM9wmMXWrMXO5us0PnRuS27CkypHrJOc75HIZF6g5X1 LqaV+9oIDXqMxwh7mJAfe8QxDmD6c0guBJPCj8FzkIHViG289Gb/4nQ/++0c3iRL IC2EnPHLJCEfPyWfZQjamFIw1dV+XCG5jOa3FSqIJ6nbtp82oCs18EHV/IoqmvVJ RIysIKhhDsE69USK/8L/Oi+9WnI58s203tXicAnGyIPZpgB5PG+Bs5d7jGfbtZGJ o9vFmKEqJbpc+ND4PFLi6zj1MneFu2fa3+I33Ao/1jFfvkVW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2kOsF02k62KvNoZheL5CjGKswcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWE1OGM0NjEtZWFjYi0z MDE2LWE2NmYtNjBlZWY3MTdhM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ718MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZCQ4FVUQVf5ZgbwiUPKwJKCYQvPn51xSWIIhzVKj/miL3W2lCVxmyM 1JoyqK5H2GHoKmO2AgbRs7HgiIcPmFe3Z6TyNIWUsv/RPRz+U0yuOiqqpLVG31VN 30i71kJ0j/UWm810qEL/4+TMnyKi+V4eTMCAd02vIhli2n86+f0VCIY25j4kiyNW bVsGFvCZLky7B1+vRfdpNwuZojZemMNDiXyYh64etWlSRLpOR5/WzePH5IPdYCIX deJ6YXRw4plGuYO4XDm8Rzgmhzym3yE42/aqHzS8+2Y+HNcKRRAskb59AdJ16qGE Y4SIGzeo4SMhPjIZpsIIDLJ/TEy5Kmg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:36 2026 by rpki-client