$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d97fdfe-6466-313e-aa61-4f4756c2542e.roa File: 0d97fdfe-6466-313e-aa61-4f4756c2542e.roa (raw, json) Hash identifier: UFy3TtgQ4uqh78zs7+Jki9SdH02CXOKFlVkA6tq3670= Subject key identifier: B4:C5:46:17:AB:48:A4:A8:4E:88:4B:91:55:B6:3C:A8:20:2B:94:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF780409F1F90D0503BB880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d97fdfe-6466-313e-aa61-4f4756c2542e.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.162.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:80:40:9f:1f:90:d0:50:3b:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=dcbf10a6-05c0-49d5-87bb-d08d6252bb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:03:7f:c3:8e:98:8f:5b:4a:e7:03:dc:79: e7:1d:4c:fa:61:5f:13:45:df:89:2e:db:bc:06:7c: 34:e6:00:4f:fb:0c:9d:ee:e0:68:29:1f:e0:d9:f7: 57:c3:09:76:ea:86:5d:9b:06:b7:11:20:01:67:e6: 3f:26:7e:30:16:16:b0:b5:7f:41:d9:5c:b0:f1:61: 4e:f9:75:0b:a7:ae:9c:ff:ff:67:88:1c:36:02:c5: de:49:85:91:34:1b:a4:37:d1:27:5d:e9:37:02:97: 1f:7b:6d:63:de:fc:d8:2a:4b:75:03:0e:6b:46:53: d7:c9:7e:fa:da:b7:e6:c6:e7:26:fe:6a:18:d4:77: 57:39:e7:b9:cd:f5:d9:64:2a:2c:ed:de:1b:43:f2: d1:4b:b7:67:87:ce:ea:d7:e9:18:90:c5:30:e1:db: 91:d6:f3:3a:64:11:28:f5:ec:14:c2:62:b0:c0:7e: 55:c4:0f:e9:d7:cd:68:56:ef:ec:9f:64:10:29:77: 73:45:b9:ea:6b:c2:af:ad:65:98:ed:a1:90:42:d1: 7b:05:f2:91:cb:4e:8b:ae:c0:bf:b3:09:79:ab:88: 0a:9a:49:ee:ac:07:ba:0b:09:8d:36:cb:71:ac:bc: 35:67:0b:e0:9a:da:0f:65:5a:77:72:a1:5c:85:8c: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:46:17:AB:48:A4:A8:4E:88:4B:91:55:B6:3C:A8:20:2B:94:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d97fdfe-6466-313e-aa61-4f4756c2542e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.162.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:28:cd:63:2b:03:04:ed:97:66:15:d9:e4:cf:61:48:86:9c: ba:f4:3b:e3:72:45:cb:1c:bc:8a:6f:4b:69:b3:cf:7f:3d:64: 61:cf:23:69:c3:70:38:59:2c:29:3d:97:81:bf:06:19:87:39: 37:8b:5d:ef:30:83:9e:cc:85:f2:cc:99:73:07:66:0c:85:80: b7:0a:d9:1e:a5:4b:76:17:db:aa:3f:72:d9:c3:d6:a0:ee:7a: ec:1b:14:e1:f4:94:d8:16:0a:fd:78:15:1f:71:47:ab:2b:15: 20:64:cd:c6:fa:21:e7:57:b7:89:16:cc:dc:d3:cc:ae:26:42: a6:ff:e3:1a:59:ab:4a:d4:9b:71:48:7a:36:3d:01:57:be:6b: 94:36:11:c4:c4:30:d7:41:40:33:12:f2:e4:7a:0e:f9:32:90: fc:a0:3d:a5:ab:3b:2a:08:7a:ba:cf:0c:e9:88:f2:a1:99:7d: 0e:e5:dd:bb:c6:01:94:5c:4b:f4:da:4f:08:e6:12:26:ed:d4: da:a9:40:7d:1d:42:95:23:dc:09:ae:0d:cb:e1:9b:ef:d0:b1: 49:d4:63:d0:9f:44:53:3a:dc:87:4a:d4:c1:c4:f5:34:b3:a7: cd:4d:0e:e6:ac:79:6e:8b:11:09:75:4d:99:1f:7e:81:0e:e6: 29:59:f4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94BAnx+Q0FA7uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZGNiZjEwYTYtMDVjMC00OWQ1LTg3YmItZDA4ZDYyNTJiYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi0Df8OOmI9bSucD3HnnHUz6YV8TRd+JLtu8 Bnw05gBP+wyd7uBoKR/g2fdXwwl26oZdmwa3ESABZ+Y/Jn4wFhawtX9B2Vyw8WFO +XULp66c//9niBw2AsXeSYWRNBukN9EnXek3Apcfe21j3vzYKkt1Aw5rRlPXyX76 2rfmxucm/moY1HdXOee5zfXZZCos7d4bQ/LRS7dnh87q1+kYkMUw4duR1vM6ZBEo 9ewUwmKwwH5VxA/p181oVu/sn2QQKXdzRbnqa8KvrWWY7aGQQtF7BfKRy06LrsC/ swl5q4gKmknurAe6CwmNNstxrLw1ZwvgmtoPZVp3cqFchYxnUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTFRherSKSoTohLkVW2PKggK5RkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQ5N2ZkZmUtNjQ2Ni0z MTNlLWFhNjEtNGY0NzU2YzI1NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYozWMrAwTtl2YV2eTPYUiGnLr0O+NyRcscvIpvS2mzz389ZGHPI2nD cDhZLCk9l4G/BhmHOTeLXe8wg57MhfLMmXMHZgyFgLcK2R6lS3YX26o/ctnD1qDu euwbFOH0lNgWCv14FR9xR6srFSBkzcb6IedXt4kWzNzTzK4mQqb/4xpZq0rUm3FI ejY9AVe+a5Q2EcTEMNdBQDMS8uR6DvkykPygPaWrOyoIerrPDOmI8qGZfQ7l3bvG AZRcS/TaTwjmEibt1NqpQH0dQpUj3AmuDcvhm+/QsUnUY9CfRFM63IdK1MHE9TSz p81NDuaseW6LEQl1TZkffoEO5ilZ9J8= -----END CERTIFICATE-----Generated at Tue Apr 21 20:18:10 2026 by rpki-client