$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897bc634-2e44-3aea-af32-265fe8e623c2.roa File: 897bc634-2e44-3aea-af32-265fe8e623c2.roa (raw, json) Hash identifier: bITtujTYCOhhkDFatSBt/IqCBLhiavUWU3HwrNbxuik= Subject key identifier: EE:C7:1B:FE:50:CB:C3:64:F9:2F:3F:07:FA:E2:AB:68:73:B9:D3:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6AEFC8BA0A7300F8D2F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897bc634-2e44-3aea-af32-265fe8e623c2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 67.188.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:ae:fc:8b:a0:a7:30:0f:8d:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=fde9a382-06b8-409d-9ea3-48bb28edf34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:bf:29:10:b9:3b:fc:fb:c1:63:ca:aa:80: 72:38:b7:54:60:16:c9:a9:f8:c4:2a:a0:f9:33:41: fc:2f:cc:90:60:c3:5d:2c:b5:e5:61:a2:fd:11:bb: 94:65:5a:02:19:63:90:f9:45:b7:80:98:80:5a:ae: d5:7d:c5:bc:a7:d4:6b:9c:76:57:89:b8:ff:ab:77: c7:9c:b4:43:f2:50:3f:e4:42:46:34:f9:07:ef:b6: 08:83:9f:40:82:2e:c5:d4:46:a4:38:ec:7b:37:5d: 20:af:30:71:b0:f4:8e:58:a3:b4:17:f7:3a:38:4a: 88:8e:0d:4b:46:45:71:ee:58:07:99:d7:df:08:2c: b1:03:99:9c:77:2b:b3:cd:5b:ca:cf:10:4b:0b:32: 70:e3:5a:67:00:63:4c:22:ac:43:94:a7:8d:e8:d8: df:88:07:64:bb:05:97:4c:56:5e:82:38:52:8d:eb: 88:ee:cf:60:ac:48:14:56:35:32:d4:ff:13:42:50: ea:ed:57:0b:ff:bb:32:35:3a:73:d6:f3:e6:7f:d7: e5:bd:78:28:6b:4b:30:85:5f:5c:4d:67:c5:2a:bd: d6:a2:64:f3:8a:6c:2c:a4:c7:5b:2d:37:1d:10:7b: f6:8f:f9:0e:c2:42:1d:8f:25:ca:2d:28:2c:02:ea: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C7:1B:FE:50:CB:C3:64:F9:2F:3F:07:FA:E2:AB:68:73:B9:D3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/897bc634-2e44-3aea-af32-265fe8e623c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:8b:c3:71:23:86:e4:62:17:34:9a:52:6b:cd:20:84:c1:0f: b6:98:1b:73:3c:e9:43:76:b3:06:af:23:2e:67:fd:74:44:6e: 7d:a8:a5:3f:3e:f7:85:44:e4:8e:5c:71:2b:50:82:09:9e:48: a8:3d:9f:03:67:36:4e:71:b3:09:9a:fb:c2:3b:5f:c3:88:1f: 45:ac:39:91:c7:99:30:42:c8:7e:bd:a8:18:5e:c9:30:69:ff: 7b:cf:fb:25:68:85:7b:5e:80:78:0e:c8:6b:a1:32:cb:28:0b: 22:e9:e6:1f:05:e9:51:9f:ef:8d:d1:c9:75:5e:69:71:c6:04: 02:7e:94:7a:48:44:c5:0e:43:60:77:f0:7a:f9:90:30:64:3d: fd:93:53:78:88:ba:7f:5c:85:82:68:91:d9:a1:ec:d4:49:f0: 49:02:8d:d5:89:53:cb:2d:f6:50:36:7a:39:12:25:37:38:cd: 07:a8:0d:1d:dd:b5:7b:6e:4f:fe:37:2c:3f:eb:ed:9e:95:49: 38:d8:23:ba:63:54:6c:8c:d9:fc:b9:f7:78:24:9f:6c:53:b6: a3:62:f5:ee:3d:97:b9:21:86:f9:6e:5d:dc:61:fb:bf:82:e3: 0d:92:87:f5:41:d9:36:ca:17:4f:44:9d:6a:b3:b5:d0:25:e6: a7:51:2b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9q78i6CnMA+NL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZmRlOWEzODItMDZiOC00MDlkLTllYTMtNDhiYjI4ZWRmMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzW/KRC5O/z7wWPKqoByOLdUYBbJqfjEKqD5 M0H8L8yQYMNdLLXlYaL9EbuUZVoCGWOQ+UW3gJiAWq7VfcW8p9RrnHZXibj/q3fH nLRD8lA/5EJGNPkH77YIg59Agi7F1EakOOx7N10grzBxsPSOWKO0F/c6OEqIjg1L RkVx7lgHmdffCCyxA5mcdyuzzVvKzxBLCzJw41pnAGNMIqxDlKeN6NjfiAdkuwWX TFZegjhSjeuI7s9grEgUVjUy1P8TQlDq7VcL/7syNTpz1vPmf9flvXgoa0swhV9c TWfFKr3WomTzimwspMdbLTcdEHv2j/kOwkIdjyXKLSgsAur6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7HG/5Qy8Nk+S8/B/riq2hzudOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3YmM2MzQtMmU0NC0z YWVhLWFmMzItMjY1ZmU4ZTYyM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6Lw3EjhuRiFzSaUmvNIITBD7aYG3M86UN2swavIy5n/XREbn2opT8+ 94VE5I5ccStQggmeSKg9nwNnNk5xswma+8I7X8OIH0WsOZHHmTBCyH69qBheyTBp /3vP+yVohXtegHgOyGuhMssoCyLp5h8F6VGf743RyXVeaXHGBAJ+lHpIRMUOQ2B3 8Hr5kDBkPf2TU3iIun9chYJokdmh7NRJ8EkCjdWJU8st9lA2ejkSJTc4zQeoDR3d tXtuT/43LD/r7Z6VSTjYI7pjVGyM2fy593gkn2xTtqNi9e49l7khhvluXdxh+7+C 4w2Sh/VB2TbKF09EnWqztdAl5qdRKxs= -----END CERTIFICATE-----Generated at Tue Apr 21 20:21:44 2026 by rpki-client