$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e48a4f-04ee-347a-a150-8f746bab1687.roa File: 87e48a4f-04ee-347a-a150-8f746bab1687.roa (raw, json) Hash identifier: NIdv6/KA+SM9+P5EqxcyAUY7jozOHzB070vzql6Ap5U= Subject key identifier: B0:4C:B3:ED:71:63:61:84:C7:49:EC:0D:71:C3:3C:8B:FB:3F:BA:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF61B25C9C91709F6DB4680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e48a4f-04ee-347a-a150-8f746bab1687.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.176.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:1b:25:c9:c9:17:09:f6:db:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9baa21ed-11a0-4a7d-a1db-e56bdf48ffc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:b8:20:b8:d3:9f:04:03:dc:1a:9d:d2:e6: e5:c8:7b:c3:9b:1a:1c:53:7e:db:22:b7:ef:48:89: 79:cc:1a:02:02:83:3d:bc:41:5f:50:a5:d2:a0:69: 7e:06:d6:57:aa:97:95:ab:10:6c:21:42:68:50:13: e2:f6:51:32:4a:a2:49:56:68:90:4c:b0:f4:e4:2b: b6:33:90:61:48:07:d4:df:46:48:27:bb:f8:fb:8c: 06:87:dc:0c:1d:32:99:10:98:49:81:ed:c2:d4:70: 65:c8:e7:27:d4:90:86:66:9e:a8:19:a7:36:eb:f4: 95:40:fd:02:3d:7a:86:f7:a7:95:6b:a6:d1:c6:e6: 36:de:6f:5e:ac:fd:fc:b3:3e:68:8b:fb:ee:99:f0: ce:f3:1a:70:05:b2:22:82:91:43:b1:05:ea:c0:23: ce:56:a7:9a:e3:ac:12:0d:8b:07:c6:39:dc:65:fa: 88:80:18:e2:2e:e2:85:1d:41:ea:41:3d:ec:47:2b: b5:32:d1:b1:9a:69:f2:8a:fb:02:7c:3f:9b:c6:3e: 76:9d:55:9d:f4:03:47:1f:d7:95:78:14:35:65:0f: 5a:cf:d3:9c:a4:1b:e6:5e:3d:a5:83:c7:ee:48:f7: 37:09:78:17:47:e2:3c:64:12:a1:3c:0b:c8:91:07: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4C:B3:ED:71:63:61:84:C7:49:EC:0D:71:C3:3C:8B:FB:3F:BA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e48a4f-04ee-347a-a150-8f746bab1687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:18:b5:9e:34:e3:09:03:93:c8:98:d9:6f:8a:62:95:a1:39: d6:d8:53:41:f6:ce:82:07:6e:73:39:8c:a1:6a:02:1a:63:3f: a5:73:df:c8:97:3f:9b:12:40:27:15:93:b7:c0:fb:79:13:58: fc:db:aa:e5:cd:df:83:74:b7:76:ae:7c:d8:54:23:67:3b:f8: 6d:37:7a:c5:8a:5d:3d:e3:a5:f0:cf:18:a8:ed:ff:3b:16:8f: 7c:9f:83:8a:3d:32:8e:41:b8:b9:28:e9:12:04:4c:0d:ac:a3: 2e:88:59:66:a9:9a:4e:d4:da:b2:ad:83:7e:29:a7:bb:38:d9: 57:19:04:2e:8d:0b:89:40:2e:a3:19:a2:72:93:88:a1:7e:32: 1d:c3:bf:53:23:cc:1d:f4:d7:af:af:a4:5b:58:cc:8b:63:d8: 8a:52:64:80:5a:a7:0e:13:49:c5:55:b2:c3:00:80:b3:8a:ab: cd:0d:a0:3e:1e:3c:5e:a6:de:82:14:ac:cc:e1:f1:bd:32:4a: 78:2a:64:1e:72:2b:a3:51:6d:dd:7c:b2:fa:4c:1a:f7:d2:0f: 16:27:d1:33:ce:e8:f7:a9:94:b3:e2:61:a2:75:3f:f8:e2:02: ad:d4:7a:e2:5d:44:61:aa:b8:03:c2:de:aa:87:58:8e:72:92: 02:e7:27:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9hslyckXCfbbRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWJhYTIxZWQtMTFhMC00YTdkLWExZGItZTU2YmRmNDhmZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RG4ILjTnwQD3Bqd0ublyHvDmxocU37bIrfv SIl5zBoCAoM9vEFfUKXSoGl+BtZXqpeVqxBsIUJoUBPi9lEySqJJVmiQTLD05Cu2 M5BhSAfU30ZIJ7v4+4wGh9wMHTKZEJhJge3C1HBlyOcn1JCGZp6oGac26/SVQP0C PXqG96eVa6bRxuY23m9erP38sz5oi/vumfDO8xpwBbIigpFDsQXqwCPOVqea46wS DYsHxjncZfqIgBjiLuKFHUHqQT3sRyu1MtGxmmnyivsCfD+bxj52nVWd9ANHH9eV eBQ1ZQ9az9OcpBvmXj2lg8fuSPc3CXgXR+I8ZBKhPAvIkQeGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBMs+1xY2GEx0nsDXHDPIv7P7pnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdlNDhhNGYtMDRlZS0z NDdhLWExNTAtOGY3NDZiYWIxNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7CYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwYtZ404wkDk8iY2W+KYpWhOdbYU0H2zoIHbnM5jKFqAhpjP6Vz38iX P5sSQCcVk7fA+3kTWPzbquXN34N0t3aufNhUI2c7+G03esWKXT3jpfDPGKjt/zsW j3yfg4o9Mo5BuLko6RIETA2soy6IWWapmk7U2rKtg34pp7s42VcZBC6NC4lALqMZ onKTiKF+Mh3Dv1MjzB3016+vpFtYzItj2IpSZIBapw4TScVVssMAgLOKq80NoD4e PF6m3oIUrMzh8b0ySngqZB5yK6NRbd18svpMGvfSDxYn0TPO6PeplLPiYaJ1P/ji Aq3UeuJdRGGquAPC3qqHWI5ykgLnJwU= -----END CERTIFICATE-----Generated at Tue Apr 21 23:23:23 2026 by rpki-client