$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa File: 1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa (raw, json) Hash identifier: OQsAOPwQHS3FB+uDtqlyVd42TaEkDAloA1rEjawHp3g= Subject key identifier: 2E:50:4C:57:C1:92:D6:17:6B:CD:DA:61:89:2C:54:3E:ED:EE:58:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6A95FF67859838D0A8A30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 67.161.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:a9:5f:f6:78:59:83:8d:0a:8a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3ed48384-5019-447f-8988-ba3bae694941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:13:3a:ee:87:55:95:d1:95:2c:4a:cc:5e: b1:7e:57:13:70:6a:fb:1e:df:14:75:e4:55:f0:54: da:c8:5b:0c:26:bd:aa:89:34:9e:18:18:d2:be:6b: f4:1b:2b:c3:c3:d4:d8:9e:b2:79:0b:c9:6d:58:b7: 59:b8:c5:e2:f3:53:3a:62:08:3c:02:a3:b8:79:4f: 99:2b:fb:54:99:e3:f5:73:c1:46:0b:ff:47:98:24: f2:70:51:b6:d5:75:c9:b6:11:93:45:19:52:be:25: 6b:96:f5:57:d3:7c:6f:ba:28:3a:24:be:ed:a1:fe: 05:91:20:20:86:49:8d:d3:6a:4a:f6:98:6c:cc:c6: 06:0d:1a:c7:d4:99:16:c2:b3:f9:85:b6:25:cb:e2: 6d:d0:ac:42:04:94:1f:53:60:52:e5:28:c1:11:f2: 41:25:46:37:4d:b2:98:c9:af:3d:1c:8b:fe:ec:fd: aa:f7:6e:0e:34:65:83:34:b0:b2:b5:0b:72:b4:5e: 49:7b:32:bb:43:08:5b:84:62:7a:55:7f:40:53:0b: bd:3f:73:c0:5b:16:ee:82:36:b2:f8:94:8a:22:97: 4d:65:7d:59:3b:78:01:ce:13:32:87:68:13:39:c5: 5d:ad:53:55:28:f9:b1:64:92:4c:bd:81:f2:4c:68: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:50:4C:57:C1:92:D6:17:6B:CD:DA:61:89:2C:54:3E:ED:EE:58:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f8:5a:22:84:16:ff:22:01:c2:6b:32:05:b6:48:93:00:28: 75:2e:05:b9:ed:a3:00:c4:d3:12:be:6e:95:f5:72:58:1f:ef: 53:58:a9:a0:de:94:29:92:fc:4e:88:90:2e:9b:31:f9:9b:d0: ef:94:7c:e0:fc:28:03:a8:d1:1d:9e:2b:dd:47:77:0d:a8:a9: 12:12:95:da:b0:cb:05:05:98:6f:e7:d5:d7:b0:38:94:97:b1: 45:58:e5:f7:a3:24:92:08:c1:f9:e7:33:71:4e:c1:ae:2d:00: 21:42:89:65:2b:0b:df:68:ff:87:92:34:5c:04:ad:c1:c3:0d: 5d:94:55:b3:d9:e3:b4:3f:bf:0b:61:6a:5c:bb:59:7f:74:03: 2a:1f:f1:44:d2:98:b9:2a:a3:6e:21:bc:f3:36:bb:d8:75:1a: 27:30:4e:bc:6a:86:7c:75:f5:5f:99:c8:57:58:68:f6:dd:8f: 9f:80:db:47:1f:44:fa:46:b3:dd:8d:35:f4:52:84:96:0b:46: d2:c7:ef:f1:3a:ce:49:29:89:54:75:cb:7b:27:96:3b:1a:39: ec:bc:da:b0:70:5a:51:f4:53:6f:bc:e0:96:e6:b8:ed:c0:55: ad:43:96:bc:f4:de:27:1e:5c:dd:e5:b7:ae:cd:49:d5:a3:8c: a8:d8:43:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9qlf9nhZg40KijAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk M2VkNDgzODQtNTAxOS00NDdmLTg5ODgtYmEzYmFlNjk0OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygATOu6HVZXRlSxKzF6xflcTcGr7Ht8UdeRV 8FTayFsMJr2qiTSeGBjSvmv0GyvDw9TYnrJ5C8ltWLdZuMXi81M6Ygg8AqO4eU+Z K/tUmeP1c8FGC/9HmCTycFG21XXJthGTRRlSviVrlvVX03xvuig6JL7tof4FkSAg hkmN02pK9phszMYGDRrH1JkWwrP5hbYly+Jt0KxCBJQfU2BS5SjBEfJBJUY3TbKY ya89HIv+7P2q924ONGWDNLCytQtytF5JezK7QwhbhGJ6VX9AUwu9P3PAWxbugjay +JSKIpdNZX1ZO3gBzhMyh2gTOcVdrVNVKPmxZJJMvYHyTGjLHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5QTFfBktYXa83aYYksVD7t7ljlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWZhNTFiOTEtMGZlMy0z NTNjLWI4MTYtNWMwN2E1ZjU5YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6EEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf4WiKEFv8iAcJrMgW2SJMAKHUuBbntowDE0xK+bpX1clgf71NYqaDe lCmS/E6IkC6bMfmb0O+UfOD8KAOo0R2eK91Hdw2oqRISldqwywUFmG/n1dewOJSX sUVY5fejJJIIwfnnM3FOwa4tACFCiWUrC99o/4eSNFwErcHDDV2UVbPZ47Q/vwth aly7WX90Ayof8UTSmLkqo24hvPM2u9h1GicwTrxqhnx19V+ZyFdYaPbdj5+A20cf RPpGs92NNfRShJYLRtLH7/E6zkkpiVR1y3snljsaOey82rBwWlH0U2+84JbmuO3A Va1Dlrz03iceXN3lt67NSdWjjKjYQ1w= -----END CERTIFICATE-----Generated at Tue Apr 21 23:27:05 2026 by rpki-client