$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd871b8-3aff-39fc-81f0-03abc2828089.roa File: 4cd871b8-3aff-39fc-81f0-03abc2828089.roa (raw, json) Hash identifier: 1C2UwxEA0YD2reFmvII6CJZZtdVnGHes6tK/zos4a8Q= Subject key identifier: BE:B7:E7:5F:42:26:01:46:3A:A6:93:2C:F2:DF:84:28:02:22:F4:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF783EFDB69D855C89B2880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd871b8-3aff-39fc-81f0-03abc2828089.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.173.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:83:ef:db:69:d8:55:c8:9b:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8d11d8d7-e3c6-4c22-b459-80ae941d3ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:e2:08:23:b7:e1:75:21:9d:88:de:71:60: b0:63:6b:83:5a:40:56:ec:58:67:f2:3a:e3:40:db: 56:a6:b6:5c:9e:fe:b8:84:9d:45:3f:ff:56:d6:e1: 32:4c:aa:29:69:91:4d:df:35:32:b5:64:fc:8f:49: 38:1d:48:d4:5f:48:eb:9e:79:b0:97:e2:00:c8:99: 63:21:05:f3:d1:ee:d0:34:85:52:17:26:e9:4f:7a: 1a:4b:a1:85:dc:09:41:35:ac:e5:ce:3f:84:47:a4: 71:f1:47:1a:d8:aa:b9:81:ae:fc:30:16:f1:d6:15: 3f:4a:e3:17:e0:25:7e:2c:21:1d:86:f8:cc:c9:ee: 46:90:cb:08:88:c3:01:5d:75:72:f2:d6:4c:df:31: 3c:26:c9:6c:4b:d4:d9:65:89:6f:11:20:ab:c9:0b: 2f:1a:91:6b:cc:38:f6:3a:b2:52:3a:45:57:cf:a4: 10:34:b9:f2:af:0d:47:44:36:ed:e8:97:1f:86:41: d1:82:54:af:99:27:86:08:71:ae:ac:3f:78:76:52: e5:a9:ad:64:76:8c:5d:53:fd:ec:dc:ef:4d:94:e8: 3b:e2:69:eb:7b:ca:48:be:d1:61:50:c1:c4:dc:a5: f7:20:85:b0:72:4d:bc:df:e7:09:0a:46:f9:ee:77: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:E7:5F:42:26:01:46:3A:A6:93:2C:F2:DF:84:28:02:22:F4:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd871b8-3aff-39fc-81f0-03abc2828089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d8:85:c6:6c:e5:76:6d:61:1e:cb:0f:3c:ba:7c:e9:da:47: 32:9e:19:1d:de:62:1e:33:b2:35:fc:01:47:1c:e7:f5:23:ec: e7:60:ad:4d:5e:83:08:a3:c9:a3:26:f9:dc:7b:1a:1c:d8:ea: 7a:b5:b9:91:a4:dd:a5:05:14:6c:04:e0:6b:41:29:c2:e7:98: 3a:41:9b:2b:62:e5:5c:05:1e:f7:13:eb:9a:35:de:d1:ba:3e: 85:75:f8:d5:fd:55:ea:be:87:c9:65:25:aa:9f:00:3e:dd:e4: 47:e5:5f:3c:50:f7:12:7b:2f:28:15:a3:94:f7:b0:05:c1:42: a3:d3:32:59:3e:59:ca:09:da:76:2f:79:6b:6c:1e:bd:c0:b3: fa:1a:ec:2f:26:fc:8d:54:f3:3c:a6:e2:a6:d4:59:23:44:13: 77:c9:31:1a:ff:8f:70:6e:19:37:62:fd:5f:bb:e5:b8:cb:ee: b7:de:42:56:d6:12:05:00:4b:9d:88:16:fa:e1:70:f4:03:4e: 51:cc:15:a6:b9:52:47:2a:08:82:c5:08:c0:1e:44:13:be:fe: 04:0b:67:11:71:17:81:c1:98:92:7b:fc:63:cc:20:81:d9:df: bf:b2:db:dc:4f:69:1b:ee:10:9b:ef:35:2e:d0:e2:9b:18:36: 6d:0f:10:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94Pv22nYVcibKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGQxMWQ4ZDctZTNjNi00YzIyLWI0NTktODBhZTk0MWQzYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgfiCCO34XUhnYjecWCwY2uDWkBW7Fhn8jrj QNtWprZcnv64hJ1FP/9W1uEyTKopaZFN3zUytWT8j0k4HUjUX0jrnnmwl+IAyJlj IQXz0e7QNIVSFybpT3oaS6GF3AlBNazlzj+ER6Rx8Uca2Kq5ga78MBbx1hU/SuMX 4CV+LCEdhvjMye5GkMsIiMMBXXVy8tZM3zE8JslsS9TZZYlvESCryQsvGpFrzDj2 OrJSOkVXz6QQNLnyrw1HRDbt6JcfhkHRglSvmSeGCHGurD94dlLlqa1kdoxdU/3s 3O9NlOg74mnre8pIvtFhUMHE3KX3IIWwck283+cJCkb57nfyHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL63519CJgFGOqaTLPLfhCgCIvReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNkODcxYjgtM2FmZi0z OWZjLTgxZjAtMDNhYmMyODI4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ62AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPYhcZs5XZtYR7LDzy6fOnaRzKeGR3eYh4zsjX8AUcc5/Uj7OdgrU1e gwijyaMm+dx7GhzY6nq1uZGk3aUFFGwE4GtBKcLnmDpBmyti5VwFHvcT65o13tG6 PoV1+NX9Veq+h8llJaqfAD7d5EflXzxQ9xJ7LygVo5T3sAXBQqPTMlk+WcoJ2nYv eWtsHr3As/oa7C8m/I1U8zym4qbUWSNEE3fJMRr/j3BuGTdi/V+75bjL7rfeQlbW EgUAS52IFvrhcPQDTlHMFaa5UkcqCILFCMAeRBO+/gQLZxFxF4HBmJJ7/GPMIIHZ 37+y29xPaRvuEJvvNS7Q4psYNm0PELs= -----END CERTIFICATE-----Generated at Wed Apr 22 02:16:29 2026 by rpki-client