$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa File: 0ccd300d-0063-3938-b57c-5b1aac3cea29.roa (raw, json) Hash identifier: DVpu8u+e/bQ5uKTvcnwzNYtWiA9KLvxPJuvJNe4mMrg= Subject key identifier: C3:52:E0:B2:3A:B3:DF:D9:42:F1:DC:07:C4:F6:AD:0D:6F:F4:B0:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF61AE17B679A39B8EC6780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.176.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:1a:e1:7b:67:9a:39:b8:ec:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=408f9de0-fd94-473d-a9e5-6b1d35aba3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:d1:01:54:4c:18:57:3f:d4:a8:2a:b2:0f: 9b:e0:9d:be:61:88:e4:89:c9:03:ee:25:e8:bd:c9: d4:78:8b:78:d3:3f:20:23:de:d1:d6:78:f4:83:db: 92:eb:9a:fc:60:37:53:08:67:37:18:34:65:f0:e7: 17:50:f2:b9:b8:4c:f5:6e:1f:6b:b6:b4:4f:bb:27: 0f:1a:90:39:70:ee:e5:48:64:95:65:56:a3:b8:be: ba:87:4c:4e:84:b4:6c:04:a6:8f:00:f4:6f:5d:6a: b2:44:6c:b4:94:ae:16:d1:da:29:50:69:95:0d:0b: 25:27:69:1a:0b:dd:1a:a3:c5:3d:73:d2:57:4d:9b: 3b:43:37:23:94:8f:b4:82:bd:2a:74:78:b9:eb:e0: c7:89:36:67:d6:e5:c5:d6:e7:fe:dd:34:5f:df:69: 3e:6f:24:22:9f:da:f3:41:b6:05:06:92:25:77:43: cc:54:26:c7:8b:e8:e8:44:f4:cf:d5:a0:4c:74:35: 87:6c:cc:61:b0:c5:71:23:b0:fb:cd:93:c3:47:ba: 56:5a:d9:fd:48:61:97:ce:bc:70:aa:cd:9f:36:dc: fb:09:ed:b7:39:8f:a7:cc:77:1f:3a:54:ca:01:85: 39:76:b7:a8:6a:f7:21:d0:53:7e:89:e1:b6:20:67: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:52:E0:B2:3A:B3:DF:D9:42:F1:DC:07:C4:F6:AD:0D:6F:F4:B0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ccd300d-0063-3938-b57c-5b1aac3cea29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:67:43:67:b6:b4:99:9e:66:6a:2d:bf:0f:ea:6f:df:c9:88: 11:36:2c:9b:ad:e1:4a:bf:fc:7b:7f:5e:88:ba:8e:58:05:d9: 07:8d:18:bc:fe:db:59:6c:4a:7a:f8:36:dd:cf:4b:c8:10:66: 7f:17:5b:ba:1a:eb:17:39:4a:bf:94:cb:67:23:5f:0e:70:8a: b5:58:ee:54:42:ee:88:9a:9c:5e:39:1f:0b:a6:3c:9e:71:eb: 79:fb:ff:61:98:fb:9c:92:97:38:d4:e2:7f:bf:9b:02:89:0d: a3:99:5f:25:f0:8f:a2:83:01:80:12:dd:7f:63:0d:eb:d7:d5: 10:f1:20:7e:be:49:13:0d:be:35:85:d6:c6:8c:16:33:dd:5c: a8:fd:81:70:d5:83:5f:56:95:52:95:45:5d:74:53:6a:7d:e0: 34:74:46:59:40:24:8e:26:70:49:bf:61:2c:4d:06:b0:37:6e: ab:cc:9d:54:3e:dc:bb:87:56:a1:bc:b5:ed:cc:97:09:22:ef: 43:24:90:be:26:d6:a3:fb:2a:7e:5b:00:da:89:5f:b2:e9:fb: 80:e1:c9:b8:31:4f:c1:2f:8b:3c:dd:e7:72:94:2d:72:83:aa: 9a:75:d9:27:44:11:a9:6f:5f:2b:71:c8:2d:27:61:9c:4f:ac: 18:c8:72:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9hrhe2eaObjsZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDA4ZjlkZTAtZmQ5NC00NzNkLWE5ZTUtNmIxZDM1YWJhM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/XRAVRMGFc/1Kgqsg+b4J2+YYjkickD7iXo vcnUeIt40z8gI97R1nj0g9uS65r8YDdTCGc3GDRl8OcXUPK5uEz1bh9rtrRPuycP GpA5cO7lSGSVZVajuL66h0xOhLRsBKaPAPRvXWqyRGy0lK4W0dopUGmVDQslJ2ka C90ao8U9c9JXTZs7QzcjlI+0gr0qdHi56+DHiTZn1uXF1uf+3TRf32k+byQin9rz QbYFBpIld0PMVCbHi+joRPTP1aBMdDWHbMxhsMVxI7D7zZPDR7pWWtn9SGGXzrxw qs2fNtz7Ce23OY+nzHcfOlTKAYU5dreoavch0FN+ieG2IGeyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNS4LI6s9/ZQvHcB8T2rQ1v9LBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGNjZDMwMGQtMDA2My0z OTM4LWI1N2MtNWIxYWFjM2NlYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJnQ2e2tJmeZmotvw/qb9/JiBE2LJut4Uq//Ht/Xoi6jlgF2QeNGLz+ 21lsSnr4Nt3PS8gQZn8XW7oa6xc5Sr+Uy2cjXw5wirVY7lRC7oianF45HwumPJ5x 63n7/2GY+5ySlzjU4n+/mwKJDaOZXyXwj6KDAYAS3X9jDevX1RDxIH6+SRMNvjWF 1saMFjPdXKj9gXDVg19WlVKVRV10U2p94DR0RllAJI4mcEm/YSxNBrA3bqvMnVQ+ 3LuHVqG8te3Mlwki70MkkL4m1qP7Kn5bANqJX7Lp+4DhybgxT8Evizzd53KULXKD qpp12SdEEalvXytxyC0nYZxPrBjIclI= -----END CERTIFICATE-----Generated at Tue Apr 21 22:05:34 2026 by rpki-client