$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8916622f-0fbd-3f35-8e79-8aababdd1741.roa File: 8916622f-0fbd-3f35-8e79-8aababdd1741.roa (raw, json) Hash identifier: jjbl2jLaVQ24TG4uOoPs7jXgDDt8keXYArOGcxO+LSY= Subject key identifier: D0:E9:98:94:EE:38:2A:70:D0:D4:83:8B:4D:DF:B7:19:7F:22:8A:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF608EC7454B1B39FE05800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8916622f-0fbd-3f35-8e79-8aababdd1741.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 174.62.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:08:ec:74:54:b1:b3:9f:e0:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e8a31dbf-4000-47b4-b631-0c505199f018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:a6:3a:23:87:91:e5:dc:8c:28:c2:2d:5f: 54:23:6e:f2:03:1f:39:d2:77:18:c2:91:8d:51:46: 0b:81:6f:a0:c2:f9:a9:25:a2:27:1b:2d:0e:36:10: 86:4a:c5:36:e1:3a:38:ed:15:24:31:fb:ea:28:73: d9:88:f1:6f:87:1b:60:19:88:a7:b7:2e:50:d8:7f: ba:8a:1f:d5:be:07:93:93:a0:8b:ba:05:92:49:6c: 48:62:b4:d5:e1:00:50:61:e1:af:bb:6b:cf:37:7c: 2e:dc:66:08:9d:b2:75:88:2b:92:a8:78:c8:4d:3e: b6:d4:56:5c:54:0e:ee:02:5e:5e:fc:5c:2b:d6:85: 7a:80:d4:60:e7:12:e0:3a:3c:4a:e3:7c:65:14:87: c7:66:29:95:84:77:dd:f0:81:20:fc:62:a8:00:d2: 86:c0:db:35:20:07:65:af:37:95:5c:1a:61:c8:79: e1:72:0f:4c:da:e5:2f:4e:bf:15:d5:f5:fe:7b:1b: 05:57:d7:61:95:75:0e:80:66:24:1d:a8:ea:7b:cf: 42:1d:ba:0f:8a:56:f3:27:1e:e4:17:d9:b6:2a:06: 50:c7:57:14:9f:6f:f4:4f:10:b6:32:5b:39:95:92: 6e:99:cd:7f:dd:89:a6:a5:e0:b6:02:c1:66:f3:f4: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E9:98:94:EE:38:2A:70:D0:D4:83:8B:4D:DF:B7:19:7F:22:8A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8916622f-0fbd-3f35-8e79-8aababdd1741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.62.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:a2:a0:7e:14:e1:c2:06:fa:09:2b:c2:10:1a:e3:21:b6:cf: 15:83:f6:39:b6:c1:ee:32:3b:c6:d2:c6:70:65:d6:41:77:d4: ac:1e:a8:47:9b:f6:e1:21:f9:51:23:f5:c2:27:0e:76:e3:a1: 2c:2d:7f:fc:d3:eb:0c:1e:17:b7:06:2d:b2:d0:31:40:e9:b1: 46:35:ad:9d:a7:55:14:6c:30:8b:3d:af:db:f5:ab:df:5b:8c: f6:ee:39:75:01:5c:75:06:d1:59:dc:3e:56:8f:1f:1f:05:75: ca:f3:c4:02:50:cb:c9:e0:da:ee:19:84:b3:53:62:9a:4c:b0: 0e:bd:8b:61:c0:6a:e3:71:f7:ea:66:a7:4a:2b:be:9c:1d:ab: 50:48:f8:0b:56:87:4e:be:f5:3b:d5:3a:35:6d:b0:7a:be:bb: 81:ab:ac:8a:0f:fc:26:b3:5d:1c:52:77:30:57:55:e1:4e:34: 17:2e:91:5b:a8:c6:e0:ca:f1:37:d8:d7:ee:78:59:69:ff:5f: 6a:28:8f:94:a4:00:b5:94:a1:48:08:59:26:2d:28:6e:65:8f: 23:2c:50:f9:37:d9:b2:4c:8e:d5:bf:ed:bd:d0:34:ce:63:65: 53:86:94:89:16:6c:af:85:12:4e:9c:ce:3c:29:8c:93:30:88: 44:c6:6e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gjsdFSxs5/gWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZThhMzFkYmYtNDAwMC00N2I0LWI2MzEtMGM1MDUxOTlmMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfCmOiOHkeXcjCjCLV9UI27yAx850ncYwpGN UUYLgW+gwvmpJaInGy0ONhCGSsU24To47RUkMfvqKHPZiPFvhxtgGYinty5Q2H+6 ih/VvgeTk6CLugWSSWxIYrTV4QBQYeGvu2vPN3wu3GYInbJ1iCuSqHjITT621FZc VA7uAl5e/Fwr1oV6gNRg5xLgOjxK43xlFIfHZimVhHfd8IEg/GKoANKGwNs1IAdl rzeVXBphyHnhcg9M2uUvTr8V1fX+exsFV9dhlXUOgGYkHajqe89CHboPilbzJx7k F9m2KgZQx1cUn2/0TxC2Mls5lZJumc1/3YmmpeC2AsFm8/Ta0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDpmJTuOCpw0NSDi03ftxl/IoqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODkxNjYyMmYtMGZiZC0z ZjM1LThlNzktOGFhYmFiZGQxNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrj78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN2ioH4U4cIG+gkrwhAa4yG2zxWD9jm2we4yO8bSxnBl1kF31KweqEeb 9uEh+VEj9cInDnbjoSwtf/zT6wweF7cGLbLQMUDpsUY1rZ2nVRRsMIs9r9v1q99b jPbuOXUBXHUG0VncPlaPHx8FdcrzxAJQy8ng2u4ZhLNTYppMsA69i2HAauNx9+pm p0orvpwdq1BI+AtWh06+9TvVOjVtsHq+u4GrrIoP/CazXRxSdzBXVeFONBcukVuo xuDK8TfY1+54WWn/X2ooj5SkALWUoUgIWSYtKG5ljyMsUPk32bJMjtW/7b3QNM5j ZVOGlIkWbK+FEk6czjwpjJMwiETGbkc= -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:31 2026 by rpki-client