$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb10c0e8-0a6d-3fff-91a7-60209fc1b2c9.roa File: eb10c0e8-0a6d-3fff-91a7-60209fc1b2c9.roa (raw, json) Hash identifier: LUHJyb+SqUTMZno0uCrfio1+URDCxP414oaJi7XFbPM= Subject key identifier: 16:1E:9B:73:F5:C8:E0:5A:91:83:F1:0F:5F:68:2E:04:A4:68:6D:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC2FF07BE1FA608346FD5C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb10c0e8-0a6d-3fff-91a7-60209fc1b2c9.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 174.162.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:2f:f0:7b:e1:fa:60:83:46:fd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=359ea902-b95d-4577-8db7-e834f26e210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:9a:c5:7e:8f:c5:3e:74:f0:9a:92:85:65: c7:e5:1c:e1:79:a5:2a:de:59:e9:1f:94:33:d7:41: e9:fb:2d:c2:a3:9e:82:32:cd:84:c2:f1:8a:bb:4e: 52:c8:94:72:74:00:58:b0:45:5c:48:b3:55:45:24: 33:35:54:13:46:10:f9:f3:95:4c:ae:bf:4d:d7:e0: a2:5c:d6:26:69:7c:c2:e7:47:4c:00:92:17:61:b9: de:ca:e8:d7:bd:4d:a8:d4:b5:67:9e:64:8d:37:f6: dc:e4:76:e8:50:4a:98:1a:9d:c3:d9:73:aa:d3:9f: d2:32:11:56:03:3b:f7:5a:99:9c:4a:a0:66:9f:5e: 80:b1:d0:16:ca:01:dd:c5:1a:03:f8:39:02:44:1f: 6b:6f:49:31:b8:79:b6:91:5f:c4:df:7e:49:38:4c: a4:d8:ed:1f:d9:de:6c:c0:3c:bb:0e:f6:86:87:bb: 3c:6f:2e:9a:7a:16:95:24:fe:48:06:91:81:c9:c1: 0d:e9:56:4b:38:18:77:e5:ab:32:c4:95:c8:22:fb: 30:e7:5c:46:da:97:25:d6:fd:0e:bf:34:66:24:a6: ce:0f:50:62:09:90:a7:6f:6e:2a:e1:73:1a:b7:03: ff:47:01:e9:b0:4c:e1:b9:b4:fa:3e:03:3d:c4:09: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:9B:73:F5:C8:E0:5A:91:83:F1:0F:5F:68:2E:04:A4:68:6D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb10c0e8-0a6d-3fff-91a7-60209fc1b2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.162.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:43:d6:a2:78:69:3b:89:50:a4:93:7d:b1:06:3c:64:6d:f3: be:35:6a:79:40:91:85:40:1f:0b:a2:fc:ed:73:14:4b:be:35: ec:6b:42:6e:88:83:8c:c0:9d:fe:b8:61:41:b0:75:e0:09:48: 70:30:7e:d2:90:a1:7d:f5:00:7a:d1:37:cf:07:f0:63:19:fa: c7:8b:ad:70:63:7f:fc:3b:04:f3:55:da:c0:33:53:04:a3:ce: b7:c1:cd:d9:dc:ba:7e:36:44:6a:b4:d9:c1:4f:f9:f7:e3:e1: 02:58:b6:d3:3d:98:b5:fd:06:45:89:e7:00:40:07:a8:93:af: e7:4d:a8:51:00:a3:56:fe:ef:15:c4:1a:15:b1:81:7f:70:40: 11:15:64:24:81:28:96:54:65:9a:50:f3:bf:2d:d2:d3:55:cd: 38:3f:30:79:91:2a:1d:55:77:e5:fc:00:0b:09:6d:19:ec:71: 04:f3:0a:1e:ac:43:2d:87:d3:86:f3:bd:20:9e:a7:90:a6:4b: b0:5a:ba:9d:9d:25:f3:aa:cd:1e:d7:d4:01:b2:97:3e:2f:2e: 0b:25:34:78:49:9b:a2:2d:f0:43:02:0e:ef:8c:05:35:2b:ee: a7:4c:29:3e:5b:41:62:fd:bf:77:0e:36:dc:c6:dd:26:87:2c: 6e:8c:f6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvC/we+H6YING/VwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzU5ZWE5MDItYjk1ZC00NTc3LThkYjctZTgzNGYyNmUyMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKuaxX6PxT508JqShWXH5RzheaUq3lnpH5Qz 10Hp+y3Co56CMs2EwvGKu05SyJRydABYsEVcSLNVRSQzNVQTRhD585VMrr9N1+Ci XNYmaXzC50dMAJIXYbneyujXvU2o1LVnnmSNN/bc5HboUEqYGp3D2XOq05/SMhFW Azv3WpmcSqBmn16AsdAWygHdxRoD+DkCRB9rb0kxuHm2kV/E335JOEyk2O0f2d5s wDy7DvaGh7s8by6aehaVJP5IBpGBycEN6VZLOBh35asyxJXIIvsw51xG2pcl1v0O vzRmJKbOD1BiCZCnb24q4XMatwP/RwHpsEzhubT6PgM9xAks6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYem3P1yOBakYPxD19oLgSkaG0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWIxMGMwZTgtMGE2ZC0z ZmZmLTkxYTctNjAyMDlmYzFiMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhD1qJ4aTuJUKSTfbEGPGRt8741anlAkYVAHwui/O1zFEu+NexrQm6I g4zAnf64YUGwdeAJSHAwftKQoX31AHrRN88H8GMZ+seLrXBjf/w7BPNV2sAzUwSj zrfBzdncun42RGq02cFP+ffj4QJYttM9mLX9BkWJ5wBAB6iTr+dNqFEAo1b+7xXE GhWxgX9wQBEVZCSBKJZUZZpQ878t0tNVzTg/MHmRKh1Vd+X8AAsJbRnscQTzCh6s Qy2H04bzvSCep5CmS7Baup2dJfOqzR7X1AGylz4vLgslNHhJm6It8EMCDu+MBTUr 7qdMKT5bQWL9v3cONtzG3SaHLG6M9iA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:51:32 2026 by rpki-client