$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5449e404-71dd-3268-9a2a-adeee06fb907.roa File: 5449e404-71dd-3268-9a2a-adeee06fb907.roa (raw, json) Hash identifier: ssKTuxrQxBRNXH4B0eSdC1UsO3p4E+gbmLlBdqMzNLQ= Subject key identifier: 6C:99:B7:4D:54:2E:B6:27:B5:94:9D:32:D9:1B:6B:75:7E:C8:53:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF608B498BDD1D86268A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5449e404-71dd-3268-9a2a-adeee06fb907.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 174.62.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:08:b4:98:bd:d1:d8:62:68:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9cfeef95-fe51-46e3-b6a8-01047538dbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:86:a9:b9:62:10:02:7e:41:42:c9:7d:96: e0:fc:1d:94:fc:cc:8b:b3:30:5f:62:e8:af:df:84: 77:e7:79:02:1a:43:13:b0:69:36:db:c0:31:0d:bb: fe:6d:f7:e1:19:a7:2a:cc:b4:69:55:93:f1:a0:56: 95:68:25:3a:01:8e:42:ad:ae:61:e2:c1:e9:48:f3: b6:ca:6d:68:f3:ce:fa:e3:5d:9b:2a:78:ef:de:6c: 82:72:1f:f4:36:b0:a2:87:fb:78:42:94:e5:1d:86: ae:22:5e:24:a9:71:7e:cc:ec:6f:b6:ce:1b:c8:43: 52:10:e0:60:58:d0:b0:dd:7c:28:a4:33:87:2a:3b: 61:05:8c:2d:96:6b:1c:d3:8b:d3:e3:73:77:29:2e: 9e:15:a0:ac:5f:d4:f2:c3:96:55:dd:08:76:82:2b: 65:e5:80:70:84:76:81:57:7f:ef:89:24:0b:26:db: f0:b9:fa:bb:39:5c:bd:dc:3f:8a:0e:01:ad:da:5d: 0e:3d:67:a5:c2:78:a0:c3:ba:91:d4:57:00:9b:80: a0:da:12:01:b1:12:42:07:99:6e:8b:83:11:60:91: f3:c0:43:1b:96:72:93:50:77:7f:01:4a:aa:0d:a1: b9:79:c3:97:0c:ce:03:f9:14:1b:cf:52:46:fd:65: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:99:B7:4D:54:2E:B6:27:B5:94:9D:32:D9:1B:6B:75:7E:C8:53:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5449e404-71dd-3268-9a2a-adeee06fb907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c7:91:31:ef:e9:42:06:7d:37:9f:a8:ba:f2:c3:8f:0e:23: a4:69:a6:e2:c9:bd:60:35:14:19:d6:45:f1:93:db:f8:88:fe: 2b:40:08:d8:67:75:81:af:5c:b1:17:63:16:89:78:b3:f9:ac: ce:55:0a:9b:20:fc:b1:ce:05:ae:c5:ef:73:95:e1:32:25:83: 9e:52:88:50:4b:7c:f3:78:1f:4d:a6:2d:6e:d8:27:8b:de:e7: f7:a1:45:e9:91:92:d2:92:86:97:e2:5d:ae:18:a5:ed:82:6f: 69:50:76:d4:08:8c:6c:92:2e:3f:12:fc:0f:53:ae:e0:45:8c: f9:ce:28:f3:3e:79:21:0a:3b:2d:e8:50:e4:b2:c8:2e:b2:50: 19:30:71:f9:11:bc:23:60:dc:b2:18:d7:e9:0c:2c:91:93:36: f1:57:e6:06:52:55:c9:1a:48:2a:d2:f5:e0:58:90:b5:77:ec: 21:ee:b3:0f:f1:c4:81:0e:3f:a1:75:54:64:cf:74:fb:76:80: f5:38:04:9f:af:a3:66:71:7c:fe:64:3f:47:3e:df:7e:ef:8f: a0:40:ba:51:4c:b1:51:15:19:5b:59:d1:96:0f:25:60:4a:44: 41:65:0d:4d:ee:5c:7f:ca:55:73:d9:46:94:d1:40:8d:ea:c3: 73:cf:85:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gi0mL3R2GJoooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWNmZWVmOTUtZmU1MS00NmUzLWI2YTgtMDEwNDc1MzhkYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N2GqbliEAJ+QULJfZbg/B2U/MyLszBfYuiv 34R353kCGkMTsGk228AxDbv+bffhGacqzLRpVZPxoFaVaCU6AY5Cra5h4sHpSPO2 ym1o8876412bKnjv3myCch/0NrCih/t4QpTlHYauIl4kqXF+zOxvts4byENSEOBg WNCw3XwopDOHKjthBYwtlmsc04vT43N3KS6eFaCsX9Tyw5ZV3Qh2gitl5YBwhHaB V3/viSQLJtvwufq7OVy93D+KDgGt2l0OPWelwnigw7qR1FcAm4Cg2hIBsRJCB5lu i4MRYJHzwEMblnKTUHd/AUqqDaG5ecOXDM4D+RQbz1JG/WW+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyZt01ULrYntZSdMtkba3V+yFMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQ0OWU0MDQtNzFkZC0z MjY4LTlhMmEtYWRlZWUwNmZiOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrj7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvHkTHv6UIGfTefqLryw48OI6RppuLJvWA1FBnWRfGT2/iI/itACNhn dYGvXLEXYxaJeLP5rM5VCpsg/LHOBa7F73OV4TIlg55SiFBLfPN4H02mLW7YJ4ve 5/ehRemRktKShpfiXa4Ype2Cb2lQdtQIjGySLj8S/A9TruBFjPnOKPM+eSEKOy3o UOSyyC6yUBkwcfkRvCNg3LIY1+kMLJGTNvFX5gZSVckaSCrS9eBYkLV37CHusw/x xIEOP6F1VGTPdPt2gPU4BJ+vo2ZxfP5kP0c+337vj6BAulFMsVEVGVtZ0ZYPJWBK REFlDU3uXH/KVXPZRpTRQI3qw3PPheA= -----END CERTIFICATE-----Generated at Wed Apr 22 00:12:40 2026 by rpki-client