$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e44c613-8879-38e9-8a27-4eb7a02bf949.roa File: 7e44c613-8879-38e9-8a27-4eb7a02bf949.roa (raw, json) Hash identifier: d1+dAk/FA3aeMakUe9gg+oRVJcLTON4YgWny93zeQl0= Subject key identifier: 1E:6D:83:DC:A0:97:DB:0E:58:EA:9C:9C:7F:55:96:1A:20:C5:C2:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6F6F690E197FAD8F75B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e44c613-8879-38e9-8a27-4eb7a02bf949.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 67.172.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:f6:f6:90:e1:97:fa:d8:f7:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a7187fcc-7afe-4e6e-a4a0-f506f6417d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:ac:0d:2e:09:61:93:35:b1:1c:1c:45:86: 2c:89:d7:42:52:84:ff:01:29:9d:c8:95:c9:64:f9: d8:85:d3:73:c0:02:bf:bd:d1:15:ef:4b:32:17:05: b4:a2:01:11:75:af:ee:56:f0:98:2d:e7:9c:8a:b4: 41:fe:ea:75:58:80:24:be:3a:92:f6:9c:5c:74:15: 31:39:77:7c:5f:89:e6:e6:5d:85:a6:3e:ca:c8:26: cd:e8:01:fd:44:ff:ee:63:f1:84:ee:57:0b:34:bd: d9:ac:e3:95:99:52:ef:90:60:95:11:4b:f2:7e:d5: 5f:68:8f:7f:74:e6:91:f8:3a:46:2e:22:b7:80:1f: 37:cb:0a:7b:13:66:67:c5:1b:bd:ca:69:c3:b1:22: a6:f6:3d:79:6e:11:11:5b:78:c8:ff:1f:0b:1f:1f: 55:5b:d0:dd:0d:6c:4c:d8:68:a4:05:ea:ab:f4:a6: b7:84:4e:97:dc:bd:16:da:f3:b9:f0:e0:46:4e:71: 69:8b:74:24:79:46:ee:fe:bd:39:3f:69:15:7b:79: d2:a3:33:b7:d2:a7:3d:5f:c9:c1:0a:e8:8e:5f:6e: 23:c1:16:ec:ca:71:e6:02:af:86:69:b3:dc:ee:2e: ec:a8:60:a8:a0:4e:ab:24:d3:5d:e5:1e:27:d7:a7: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6D:83:DC:A0:97:DB:0E:58:EA:9C:9C:7F:55:96:1A:20:C5:C2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e44c613-8879-38e9-8a27-4eb7a02bf949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9e:ca:41:15:5a:e5:14:56:e5:b4:a0:e3:50:77:8b:bc:44: 65:a2:51:77:bb:6c:2b:11:77:7c:50:32:b6:8d:7d:95:84:a6: 5e:98:31:0c:04:0f:e5:31:38:c3:14:b9:6f:4e:8a:98:19:25: 38:9f:9a:d8:82:9a:24:9f:31:87:af:82:b8:45:e8:dd:09:6d: 93:e3:b8:4f:78:b6:cd:b3:ac:41:a2:25:6f:d3:00:44:55:b7: 73:99:24:cc:c8:3b:a8:6e:93:83:db:c0:61:32:b2:b4:8d:53: 70:77:f5:72:83:3a:23:50:96:ee:5c:d9:1c:ad:91:87:85:26: 99:2d:51:51:5f:87:37:d4:f5:d3:fd:aa:78:0b:01:46:0e:58: 9b:0e:05:2f:2a:00:60:c1:dc:1b:d2:33:bd:53:67:f7:1f:d4: 7d:ce:4d:15:27:93:84:50:99:94:21:f4:27:29:69:0c:6e:ca: 88:a2:57:c8:1f:6b:3a:36:34:14:13:0d:c7:d9:f7:8f:bd:26: ce:77:19:be:12:6f:79:ef:f8:36:fc:ea:54:ae:81:8b:ea:7b: e3:4a:c9:03:2d:56:5e:65:f2:9a:a0:d8:a4:c9:73:3e:d9:43: 02:f9:00:bc:de:c3:a2:84:54:6f:8c:21:f5:3e:b5:ef:9e:ca: 53:05:92:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9vb2kOGX+tj3W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTcxODdmY2MtN2FmZS00ZTZlLWE0YTAtZjUwNmY2NDE3ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RCsDS4JYZM1sRwcRYYsiddCUoT/ASmdyJXJ ZPnYhdNzwAK/vdEV70syFwW0ogERda/uVvCYLeecirRB/up1WIAkvjqS9pxcdBUx OXd8X4nm5l2Fpj7KyCbN6AH9RP/uY/GE7lcLNL3ZrOOVmVLvkGCVEUvyftVfaI9/ dOaR+DpGLiK3gB83ywp7E2ZnxRu9ymnDsSKm9j15bhERW3jI/x8LHx9VW9DdDWxM 2GikBeqr9Ka3hE6X3L0W2vO58OBGTnFpi3QkeUbu/r05P2kVe3nSozO30qc9X8nB CuiOX24jwRbsynHmAq+GabPc7i7sqGCooE6rJNNd5R4n16faRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5tg9ygl9sOWOqcnH9VlhogxcKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U0NGM2MTMtODg3OS0z OGU5LThhMjctNGViN2EwMmJmOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOeykEVWuUUVuW0oONQd4u8RGWiUXe7bCsRd3xQMraNfZWEpl6YMQwE D+UxOMMUuW9OipgZJTifmtiCmiSfMYevgrhF6N0JbZPjuE94ts2zrEGiJW/TAERV t3OZJMzIO6huk4PbwGEysrSNU3B39XKDOiNQlu5c2RytkYeFJpktUVFfhzfU9dP9 qngLAUYOWJsOBS8qAGDB3BvSM71TZ/cf1H3OTRUnk4RQmZQh9CcpaQxuyoiiV8gf azo2NBQTDcfZ94+9Js53Gb4Sb3nv+Db86lSugYvqe+NKyQMtVl5l8pqg2KTJcz7Z QwL5ALzew6KEVG+MIfU+te+eylMFkq4= -----END CERTIFICATE-----Generated at Wed Apr 22 00:51:00 2026 by rpki-client