$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0875dc-a9a0-3de9-9419-cb8a6354a993.roa File: aa0875dc-a9a0-3de9-9419-cb8a6354a993.roa (raw, json) Hash identifier: ugAj0UtlgGLBPRXTfgrHVXCGu8RFnPz+3idfaQtlsEE= Subject key identifier: F9:E0:EC:01:30:E8:74:4B:7B:0B:EC:F3:95:38:7A:8E:A4:7C:7F:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6F68315D0BA552282C820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0875dc-a9a0-3de9-9419-cb8a6354a993.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 67.166.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:f6:83:15:d0:ba:55:22:82:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f61e8473-77f4-47ed-8a69-d1960311d4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d9:5c:91:a2:9b:75:d1:65:f7:74:c9:93:f5: c3:8e:eb:9e:7e:30:8b:31:82:7c:b1:da:d4:fe:c6: e1:35:68:11:a7:b2:f7:3b:e6:b3:9e:e1:d9:ec:2f: 76:17:60:ee:2d:1d:45:37:ae:e0:9d:1d:c8:a3:ff: 2c:bf:70:5f:2b:8a:a5:7b:4a:bc:4a:d1:a1:53:fa: f3:7c:b0:18:7a:5e:e0:d6:3b:47:80:02:cd:5f:29: 0b:30:7b:8e:58:75:6b:53:61:bb:f3:54:ca:1e:20: 35:81:58:49:2c:0e:0c:09:d5:c2:ff:7c:af:51:de: 88:cb:93:b5:59:b3:c4:9f:a0:a2:bb:58:53:73:e4: af:75:5a:d0:e7:a4:32:1c:1f:52:4b:42:95:79:76: d6:b2:7f:b1:36:67:fd:70:ca:9c:2a:cd:84:eb:7a: 31:8e:c4:70:33:db:78:bf:f3:cf:39:29:2f:40:7e: 33:66:c4:bc:e7:df:54:7d:89:ce:ea:2f:3b:7c:90: 98:56:10:a0:65:59:88:22:fd:67:ed:8e:e1:86:73: c2:7e:ac:22:15:ed:e2:77:59:6f:2f:14:d9:f2:f4: c6:45:a4:03:6c:3d:a0:89:fe:39:12:b1:cd:69:93: d8:fb:0c:c0:5f:97:1b:cc:88:bf:43:c2:d4:6d:89: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:EC:01:30:E8:74:4B:7B:0B:EC:F3:95:38:7A:8E:A4:7C:7F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa0875dc-a9a0-3de9-9419-cb8a6354a993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.166.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:27:aa:67:da:b2:87:8e:0d:ed:6d:f2:30:39:14:4a:6a: 7f:3e:4b:ec:aa:0b:70:f8:55:99:73:6c:20:82:7a:69:33:45: ac:fd:fe:59:53:11:1a:5b:bd:56:80:1a:44:58:36:8c:38:6e: ed:16:76:54:c1:6f:51:4a:a2:31:e2:69:f2:db:e4:8a:78:21: d0:0c:d1:db:c7:5a:1d:e9:cb:2b:cc:a1:21:f8:33:a8:74:76: 82:7a:c9:5f:62:0b:d8:ec:49:d6:6e:af:bb:e5:0b:2e:c7:f8: b5:6d:a5:20:91:22:06:34:b7:44:e9:1a:76:48:cf:5c:11:c8: 38:51:bd:d4:07:a4:ff:6c:3d:9d:34:72:6f:6d:f2:70:8f:10: 30:96:75:6b:6b:73:7b:a7:7d:28:be:51:10:d2:be:4e:15:8b: d3:b8:68:ee:6f:ae:71:99:74:06:b5:14:e2:75:fe:a3:87:dd: 4c:2f:dc:2b:2a:f3:10:98:a6:23:a7:36:44:71:73:cb:94:7d: 24:ea:f4:0e:95:ec:29:19:de:18:ca:fa:1c:1c:e6:4e:5d:59: 33:eb:e4:b9:d6:67:08:0e:9b:6e:c1:32:d0:51:63:58:c4:d7: 9c:6e:ec:2d:12:ee:a9:b5:6d:1d:97:9c:fa:21:e5:9e:73:70: 08:73:1f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9vaDFdC6VSKCyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjYxZTg0NzMtNzdmNC00N2VkLThhNjktZDE5NjAzMTFkNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNlckaKbddFl93TJk/XDjuuefjCLMYJ8sdrU /sbhNWgRp7L3O+aznuHZ7C92F2DuLR1FN67gnR3Io/8sv3BfK4qle0q8StGhU/rz fLAYel7g1jtHgALNXykLMHuOWHVrU2G781TKHiA1gVhJLA4MCdXC/3yvUd6Iy5O1 WbPEn6Ciu1hTc+SvdVrQ56QyHB9SS0KVeXbWsn+xNmf9cMqcKs2E63oxjsRwM9t4 v/PPOSkvQH4zZsS8599UfYnO6i87fJCYVhCgZVmIIv1n7Y7hhnPCfqwiFe3id1lv LxTZ8vTGRaQDbD2gif45ErHNaZPY+wzAX5cbzIi/Q8LUbYlM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPng7AEw6HRLewvs85U4eo6kfH9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEwODc1ZGMtYTlhMC0z ZGU5LTk0MTktY2I4YTYzNTRhOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6ZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECNJ6pn2rKHjg3tbfIwORRKan8+S+yqC3D4VZlzbCCCemkzRaz9/llT ERpbvVaAGkRYNow4bu0WdlTBb1FKojHiafLb5Ip4IdAM0dvHWh3pyyvMoSH4M6h0 doJ6yV9iC9jsSdZur7vlCy7H+LVtpSCRIgY0t0TpGnZIz1wRyDhRvdQHpP9sPZ00 cm9t8nCPEDCWdWtrc3unfSi+URDSvk4Vi9O4aO5vrnGZdAa1FOJ1/qOH3Uwv3Csq 8xCYpiOnNkRxc8uUfSTq9A6V7CkZ3hjK+hwc5k5dWTPr5LnWZwgOm27BMtBRY1jE 15xu7C0S7qm1bR2XnPoh5Z5zcAhzH/c= -----END CERTIFICATE-----Generated at Wed Apr 22 00:49:51 2026 by rpki-client