$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa File: a39d1ddb-48ce-3f22-b315-be389b64be87.roa (raw, json) Hash identifier: xnDpfhJEFKC53gH2GCOhFFUbEGLGgFc0i99NCzqd14I= Subject key identifier: 1A:4B:C7:48:99:CA:C5:90:9A:A3:F5:61:08:CE:5F:28:67:DA:69:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6AA901F69CA755DA73700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 67.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:aa:90:1f:69:ca:75:5d:a7:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c5890f51-f9db-4ba7-b015-dc7ac8a74753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:3b:25:fd:9c:89:48:99:d3:63:57:2f:21: db:be:d2:70:5d:97:0d:22:42:79:22:d0:6d:d1:fc: 34:4e:01:29:5d:9f:fb:da:42:3c:98:28:86:a4:57: 28:b9:aa:c7:95:fd:1b:e6:7c:e6:83:76:f5:2c:09: a7:97:88:12:0a:65:1d:fc:a5:45:0a:99:c7:ea:fb: fe:4e:77:00:c6:a9:45:8f:d0:40:53:4f:93:04:35: a8:fb:ba:02:1f:db:b3:ec:46:5b:4a:4b:4c:a1:f3: b6:a9:14:d7:6b:50:26:be:68:51:fe:2d:8d:18:4a: c0:ff:53:1b:38:b9:b1:72:93:1d:4f:03:98:ef:86: 15:28:61:da:09:59:93:da:56:b0:ef:26:04:7b:44: f9:62:7f:93:6b:56:c8:77:77:6f:ed:50:b9:73:3c: 9a:ee:5b:a7:88:03:d7:7f:64:da:64:f5:f6:08:c9: 5b:6e:0a:7c:8e:be:98:75:80:f0:e3:56:b6:94:c7: f0:98:03:32:eb:b6:ec:33:80:8b:93:b4:28:ec:be: d6:65:34:9e:21:d9:99:24:96:48:e6:26:5a:24:90: 45:5f:97:5c:c9:4d:48:02:0a:f3:3a:93:cd:3c:5d: d9:df:22:49:8c:ab:56:14:f4:fd:be:20:de:06:be: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4B:C7:48:99:CA:C5:90:9A:A3:F5:61:08:CE:5F:28:67:DA:69:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a39d1ddb-48ce-3f22-b315-be389b64be87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:11:03:11:df:b2:0d:7e:f8:90:6d:0f:1b:97:ff:20:f7:37: 90:40:ee:64:a2:d1:2c:0e:dc:4b:9f:10:be:0d:3a:19:11:70: 3a:5b:a2:c5:50:15:72:2d:9d:0a:c7:c6:97:65:c9:97:7f:14: 22:b9:13:6a:86:1f:b1:af:71:a2:c4:ab:e8:bf:f0:49:51:f6: 0d:16:24:42:a7:2d:9a:49:58:fc:2c:87:c3:55:bd:0a:7e:d3: e3:bd:58:02:ca:14:73:d6:1d:3b:af:14:46:c9:3b:ec:86:67: 6c:82:84:14:47:6b:43:9e:1b:50:08:3d:7d:0e:d8:14:81:9b: c5:7b:e0:75:e4:9b:18:c3:ae:97:be:70:9c:b5:10:55:f5:9b: 09:bb:60:89:95:e4:ed:d4:90:cc:26:5a:b1:77:44:25:3b:0f: 94:01:f6:b4:3d:16:60:20:eb:86:b1:6e:ad:96:43:d1:5b:fe: d1:36:da:5b:49:a7:76:00:65:e1:34:f8:ed:ab:0d:66:42:5f: 68:fc:8d:bf:b6:d3:35:ef:70:65:01:e5:78:ce:ab:a2:bd:7d: 92:88:11:ab:42:f0:d4:3a:69:a2:91:f5:2d:f0:cf:bc:7d:ba: d9:68:44:44:d4:d7:80:bc:4a:0f:2b:b7:62:d8:c1:a9:12:d6: 7a:69:a8:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9qqQH2nKdV2nNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzU4OTBmNTEtZjlkYi00YmE3LWIwMTUtZGM3YWM4YTc0NzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/87Jf2ciUiZ02NXLyHbvtJwXZcNIkJ5ItBt 0fw0TgEpXZ/72kI8mCiGpFcouarHlf0b5nzmg3b1LAmnl4gSCmUd/KVFCpnH6vv+ TncAxqlFj9BAU0+TBDWo+7oCH9uz7EZbSktMofO2qRTXa1AmvmhR/i2NGErA/1Mb OLmxcpMdTwOY74YVKGHaCVmT2law7yYEe0T5Yn+Ta1bId3dv7VC5czya7luniAPX f2TaZPX2CMlbbgp8jr6YdYDw41a2lMfwmAMy67bsM4CLk7Qo7L7WZTSeIdmZJJZI 5iZaJJBFX5dcyU1IAgrzOpPNPF3Z3yJJjKtWFPT9viDeBr6vRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpLx0iZysWQmqP1YQjOXyhn2mlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM5ZDFkZGItNDhjZS0z ZjIyLWIzMTUtYmUzODliNjRiZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHERAxHfsg1++JBtDxuX/yD3N5BA7mSi0SwO3EufEL4NOhkRcDpbosVQ FXItnQrHxpdlyZd/FCK5E2qGH7GvcaLEq+i/8ElR9g0WJEKnLZpJWPwsh8NVvQp+ 0+O9WALKFHPWHTuvFEbJO+yGZ2yChBRHa0OeG1AIPX0O2BSBm8V74HXkmxjDrpe+ cJy1EFX1mwm7YImV5O3UkMwmWrF3RCU7D5QB9rQ9FmAg64axbq2WQ9Fb/tE22ltJ p3YAZeE0+O2rDWZCX2j8jb+20zXvcGUB5XjOq6K9fZKIEatC8NQ6aaKR9S3wz7x9 utloRETU14C8Sg8rt2LYwakS1nppqDU= -----END CERTIFICATE-----Generated at Wed Apr 22 00:21:18 2026 by rpki-client