$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa File: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (raw, json) Hash identifier: sMfoEehdHqODJGyuTeGzfKoVzFKRtOzAaxf5eTJS7yQ= Subject key identifier: B9:B4:11:80:F4:5D:00:84:1B:2C:C2:F1:CD:81:1F:2C:16:31:8D:CA Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584D80FFE969EC133F94363AC2C0 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 36197 IP address blocks: 168.100.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e9:69:ec:13:3f:94:36:3a:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=b0b54a58-8784-4fb4-87dd-5ac3cff20c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:13:96:ef:62:f9:e9:2a:0c:d2:fc:18:cd:6f: 88:3f:40:98:ee:ef:83:55:ad:0c:05:48:8e:09:a0: 6a:85:cd:40:e8:19:95:92:6d:65:38:ec:26:96:d3: f7:6e:1a:0c:93:c2:8e:4f:8a:44:c7:06:fc:7f:2f: 24:bc:f8:0d:1c:af:c0:1c:8e:af:62:f9:48:89:8e: 27:71:f6:c9:5c:54:cd:9b:1e:d6:eb:da:04:eb:a9: 7a:56:9a:37:b5:c5:0f:df:fe:ab:86:ba:0d:0b:b5: 0e:ae:22:ea:34:93:32:d5:16:15:e3:3e:be:ef:00: f4:56:cd:fb:60:43:04:56:90:45:27:0c:9e:e7:b2: 38:92:2b:37:8c:22:4f:d7:54:06:52:c8:27:85:cb: 61:79:ca:c5:01:19:1b:8e:f7:42:31:e5:21:c5:2f: bc:1c:ef:15:49:ef:c9:1a:b4:51:f1:b2:dd:82:ae: 67:68:53:20:5d:16:f3:04:4d:a5:d8:a2:48:53:92: bf:67:4c:a9:00:be:c6:96:d5:e5:37:5d:a5:b4:4c: 1f:50:dd:c6:f8:e1:e6:e0:0e:cf:55:fa:eb:36:c1: ac:96:19:82:24:bb:70:65:e5:1a:d0:86:63:0a:96: 7d:59:e4:58:4d:e3:aa:8c:8c:57:70:ef:a9:31:2c: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B4:11:80:F4:5D:00:84:1B:2C:C2:F1:CD:81:1F:2C:16:31:8D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: 168.100.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:75:c2:41:83:c3:6a:9f:2a:cd:49:ec:29:7f:3e:e8:90:cf: ee:08:9d:94:50:8e:1f:2e:6d:e5:42:0d:8a:58:cf:7b:69:02: 14:e1:7e:b7:d7:30:99:8c:c4:46:28:75:40:ff:4e:2a:1d:83: 8b:12:4d:f3:97:e2:63:5f:42:88:0f:28:87:78:bc:0a:95:f9: 76:d4:1f:14:d7:21:15:ab:02:18:aa:7b:70:e4:1a:13:41:a4: b1:fe:61:7a:94:e0:f4:6b:b5:14:e2:ae:81:e5:c5:59:34:08: ec:58:f8:f7:7a:95:61:01:a5:76:b3:5d:cf:b7:42:22:07:92: 19:41:c9:79:c1:6c:ca:6b:6c:d6:7c:af:46:7d:fe:48:8d:3d: 68:bc:3f:08:b2:41:8a:64:74:33:bd:94:11:c2:e8:9b:87:46: 75:c8:1e:94:de:a7:8f:ed:a6:8b:d8:97:01:b8:40:b8:47:7d: 6f:f5:72:0f:e3:02:78:9d:b9:2e:83:bd:6d:fe:8b:ec:34:60: 1a:b6:bd:f1:42:7a:a0:bc:58:5e:0f:c1:91:3e:56:b9:d9:ff: 46:15:91:6b:29:bd:2c:79:61:1c:bc:f7:61:57:52:a5:d7:6f: ef:cc:eb:49:5a:8b:3d:fc:fd:d7:00:88:df:ee:f7:f8:9d:d6: 51:90:5b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+lp7BM/lDY6wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YjBiNTRhNTgtODc4NC00ZmI0LTg3ZGQtNWFjM2NmZjIwYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxOW72L56SoM0vwYzW+IP0CY7u+DVa0MBUiO CaBqhc1A6BmVkm1lOOwmltP3bhoMk8KOT4pExwb8fy8kvPgNHK/AHI6vYvlIiY4n cfbJXFTNmx7W69oE66l6Vpo3tcUP3/6rhroNC7UOriLqNJMy1RYV4z6+7wD0Vs37 YEMEVpBFJwye57I4kis3jCJP11QGUsgnhcthecrFARkbjvdCMeUhxS+8HO8VSe/J GrRR8bLdgq5naFMgXRbzBE2l2KJIU5K/Z0ypAL7GltXlN12ltEwfUN3G+OHm4A7P VfrrNsGslhmCJLtwZeUa0IZjCpZ9WeRYTeOqjIxXcO+pMSxujQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm0EYD0XQCEGyzC8c2BHywWMY3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvY2M3ZDE4ZDgtODMzZC0z MTkxLWFmYTEtYmRjMDhkZmEzYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ1wkGDw2qfKs1J7Cl/PuiQz+4InZRQjh8ubeVCDYpYz3tpAhThfrfX MJmMxEYodUD/Tiodg4sSTfOX4mNfQogPKId4vAqV+XbUHxTXIRWrAhiqe3DkGhNB pLH+YXqU4PRrtRTiroHlxVk0COxY+Pd6lWEBpXazXc+3QiIHkhlByXnBbMprbNZ8 r0Z9/kiNPWi8PwiyQYpkdDO9lBHC6JuHRnXIHpTep4/tpovYlwG4QLhHfW/1cg/j AniduS6DvW3+i+w0YBq2vfFCeqC8WF4PwZE+VrnZ/0YVkWspvSx5YRy892FXUqXX b+/M60laiz38/dcAiN/u9/id1lGQW80= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:59 2026 by rpki-client