$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c00898dd-0cd1-3e09-b625-a821eea1a602.roa File: c00898dd-0cd1-3e09-b625-a821eea1a602.roa (raw, json) Hash identifier: BFWLfEdC4lfxiz9sTQGK4UWnej7OSI94vMjZA4D2XBE= Subject key identifier: 7A:19:7A:26:15:21:62:31:8C:99:75:62:45:77:0D:A9:4F:B1:DB:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF87A6A481AA7A1878EDF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c00898dd-0cd1-3e09-b625-a821eea1a602.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 67.188.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:7a:6a:48:1a:a7:a1:87:8e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2e5137b4-1abd-4bf1-97d5-5a60e0cc2622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:e7:c6:39:f5:1b:59:35:74:70:ac:2f:6c: 80:73:c2:32:fb:29:45:40:c9:73:b4:f6:3c:28:85: 5c:76:42:65:34:46:2b:12:c8:d6:e8:15:f3:0b:65: d8:50:0c:18:1f:86:32:53:8f:c0:94:c7:f6:b6:a7: ff:bd:89:bd:66:0b:f7:dc:12:d3:48:79:c4:8f:17: ad:aa:f2:6c:4f:d9:3c:49:eb:99:f2:d0:41:e6:c3: 11:72:46:0a:ca:67:b5:22:39:e1:18:31:1f:fe:3e: fd:fc:1f:2f:06:ab:43:cf:21:b1:49:bd:c5:75:c2: d1:21:5f:06:62:2c:e9:cd:3a:a2:d2:46:8a:64:b2: 7c:97:b2:d7:0b:ec:df:d2:f1:b6:11:1f:10:d5:d3: 24:06:ad:0b:00:aa:78:1b:29:2c:fe:d3:4e:9f:6c: 61:32:d5:95:6f:e7:54:a3:4e:99:f9:0f:32:84:a3: 2f:d6:cf:e9:43:a1:0b:3b:75:99:30:67:5a:b2:64: a2:b3:f7:c3:69:61:11:c2:19:cc:fd:9e:2b:7c:49: fa:ec:38:a1:8a:b1:0b:52:47:29:70:e9:fb:4d:72: 7c:de:00:5e:de:94:a8:f6:3e:ee:ad:01:e0:01:98: 1a:aa:56:da:13:4b:ef:3a:88:25:eb:40:9e:38:90: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:7A:26:15:21:62:31:8C:99:75:62:45:77:0D:A9:4F:B1:DB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c00898dd-0cd1-3e09-b625-a821eea1a602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:3e:e5:a5:84:59:66:1e:ad:c2:a7:1a:bb:9f:f6:f9:4d:aa: da:f7:e0:02:d0:93:de:3e:d2:77:f3:04:4d:fd:dd:9d:79:b0: c9:ad:46:b4:f1:ba:f3:f7:2d:39:dd:bd:a5:1e:18:df:8b:22: 3c:91:55:a7:74:f4:cd:46:e1:04:15:b5:2e:6e:02:6b:db:f6: c5:24:92:9a:cc:88:2d:6f:8c:3d:69:00:01:52:65:3f:9f:95: 0a:87:af:42:17:01:a3:dd:22:a8:6f:da:00:5d:ef:b6:0c:e6: 61:ab:3c:7c:dd:e3:79:0c:0f:1b:c0:3f:95:d0:af:42:5d:f5: e9:4a:e4:d2:35:29:fa:9b:a0:ac:b9:f4:d7:7a:d7:bd:c2:6a: e0:59:87:d7:18:a1:bd:ed:a7:ae:ff:bd:78:e2:6f:c2:1e:88: bc:bf:9d:96:54:48:bd:22:45:03:5d:0e:90:bd:2f:20:5a:7b: 7e:ab:e8:32:7f:60:ba:dd:4f:75:f0:99:6e:e8:12:4a:30:80: 6e:a5:79:b9:ea:cb:da:9f:fe:46:2f:b0:38:69:c4:34:61:11: 79:49:9d:df:21:db:f0:cb:e0:5c:33:68:cf:88:c5:93:a3:07: 5e:5b:14:e1:e1:82:b9:d9:25:17:8e:67:13:e3:9d:1d:8e:4a: b3:16:1d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+HpqSBqnoYeO34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmU1MTM3YjQtMWFiZC00YmYxLTk3ZDUtNWE2MGUwY2MyNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEjnxjn1G1k1dHCsL2yAc8Iy+ylFQMlztPY8 KIVcdkJlNEYrEsjW6BXzC2XYUAwYH4YyU4/AlMf2tqf/vYm9Zgv33BLTSHnEjxet qvJsT9k8SeuZ8tBB5sMRckYKyme1IjnhGDEf/j79/B8vBqtDzyGxSb3FdcLRIV8G YizpzTqi0kaKZLJ8l7LXC+zf0vG2ER8Q1dMkBq0LAKp4Gyks/tNOn2xhMtWVb+dU o06Z+Q8yhKMv1s/pQ6ELO3WZMGdasmSis/fDaWERwhnM/Z4rfEn67DihirELUkcp cOn7TXJ83gBe3pSo9j7urQHgAZgaqlbaE0vvOogl60CeOJAE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoZeiYVIWIxjJl1YkV3DalPsdsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAwODk4ZGQtMGNkMS0z ZTA5LWI2MjUtYTgyMWVlYTFhNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANs+5aWEWWYercKnGruf9vlNqtr34ALQk94+0nfzBE393Z15sMmtRrTx uvP3LTndvaUeGN+LIjyRVad09M1G4QQVtS5uAmvb9sUkkprMiC1vjD1pAAFSZT+f lQqHr0IXAaPdIqhv2gBd77YM5mGrPHzd43kMDxvAP5XQr0Jd9elK5NI1KfqboKy5 9Nd6173CauBZh9cYob3tp67/vXjib8IeiLy/nZZUSL0iRQNdDpC9LyBae36r6DJ/ YLrdT3XwmW7oEkowgG6lebnqy9qf/kYvsDhpxDRhEXlJnd8h2/DL4FwzaM+IxZOj B15bFOHhgrnZJReOZxPjnR2OSrMWHfE= -----END CERTIFICATE-----Generated at Tue Apr 21 19:25:59 2026 by rpki-client