$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa File: c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa (raw, json) Hash identifier: ykwr9Lg/gCjxUM4qMWiu1Pquk+nMnNs+fse2Iq+k6DY= Subject key identifier: 1C:A9:61:5A:68:8B:F0:F4:A6:A7:18:F7:4B:B6:15:7A:69:D2:7A:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF617F55949AFD586AA1D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.173.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:17:f5:59:49:af:d5:86:aa:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=687175db-987d-4a1d-bbdc-08474345520e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:9d:f1:a7:1f:e9:b0:33:55:47:06:33:d5: 06:29:86:86:1c:19:a3:bc:18:5e:29:bc:5e:14:99: c2:2f:b2:61:4f:64:da:3c:07:6a:b8:1b:77:f6:59: 81:9c:0c:00:38:16:e5:3e:96:e4:a1:f7:c1:94:c6: 38:6b:f9:1f:5b:89:49:87:5f:e1:74:09:24:92:a9: ee:b4:82:98:34:3d:bc:fd:95:02:fd:27:65:30:9e: d0:c2:4f:e8:70:45:2c:25:fa:75:a2:6a:00:b5:29: c2:54:15:de:07:79:01:ae:a4:e5:29:d8:73:57:f4: b7:10:d7:8f:3c:a4:db:43:8a:16:42:e6:4c:16:a8: 3f:d9:cf:4d:db:85:aa:da:b8:dd:58:b5:11:e5:fe: ea:14:9b:8c:9e:84:b7:32:9b:51:a0:6a:07:65:62: 75:7e:23:8b:ac:b3:d3:36:2d:21:dc:81:53:83:86: 48:18:86:02:0f:98:80:7f:22:94:ce:25:55:a6:79: c4:8f:2b:f3:d9:84:a1:c9:eb:13:4f:4b:a0:34:37: 37:ca:bf:d4:91:fa:a3:0a:d6:ae:db:74:28:ed:82: ca:a4:c0:34:a6:08:34:38:9a:5c:20:af:a1:fc:9c: be:79:65:c9:8a:a9:7c:06:d4:c9:14:19:db:f4:45: 47:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A9:61:5A:68:8B:F0:F4:A6:A7:18:F7:4B:B6:15:7A:69:D2:7A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ea:af:cc:c8:00:d2:10:8a:de:3e:31:65:75:23:22:8e:21: c7:54:ca:39:d7:9b:a7:9c:c4:53:02:2d:c6:fb:f0:31:b4:08: 94:6b:b6:0d:7e:dd:9d:64:11:67:9f:cf:d5:1f:79:a1:9d:26: fc:6e:a0:04:4d:0f:1c:f3:8e:ee:95:6e:46:c4:98:42:43:cf: 85:3a:d7:31:8b:ff:eb:08:02:b7:49:3d:50:53:7d:49:36:3b: e8:86:7d:a8:7d:9d:c9:4d:d6:30:4a:74:9a:d8:6a:6d:98:f7: 05:cc:b4:64:85:e2:3f:3f:8d:9d:d4:a4:bf:2c:7b:88:2e:aa: eb:82:1d:e7:91:97:ed:ef:c4:df:0d:28:74:65:7a:d3:4f:a1: dc:36:34:c3:3a:cb:64:5a:c1:6f:3b:d7:2f:98:46:ae:76:ab: 36:c0:88:a2:fe:bb:41:c3:b3:6e:f0:db:a4:75:54:db:4a:ef: bb:36:4e:90:e6:b6:b8:e5:dc:01:f3:70:c7:c5:cb:86:34:6b: 87:28:e0:46:b9:65:1c:5d:21:87:ba:60:5c:9f:03:26:95:6d: dc:76:9e:0f:24:4c:6a:93:d7:f4:2f:5d:f0:1f:1e:56:34:b6: dd:c6:9c:32:88:66:e6:63:fd:ba:cf:50:65:86:48:5a:d8:7a: 74:97:be:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9hf1WUmv1YaqHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Njg3MTc1ZGItOTg3ZC00YTFkLWJiZGMtMDg0NzQzNDU1MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3ed8acf6bAzVUcGM9UGKYaGHBmjvBheKbxe FJnCL7JhT2TaPAdquBt39lmBnAwAOBblPpbkoffBlMY4a/kfW4lJh1/hdAkkkqnu tIKYND28/ZUC/SdlMJ7Qwk/ocEUsJfp1omoAtSnCVBXeB3kBrqTlKdhzV/S3ENeP PKTbQ4oWQuZMFqg/2c9N24Wq2rjdWLUR5f7qFJuMnoS3MptRoGoHZWJ1fiOLrLPT Ni0h3IFTg4ZIGIYCD5iAfyKUziVVpnnEjyvz2YShyesTT0ugNDc3yr/UkfqjCtau 23Qo7YLKpMA0pgg0OJpcIK+h/Jy+eWXJiql8BtTJFBnb9EVHEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBypYVpoi/D0pqcY90u2FXpp0nr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFjMjk2N2MtODIwMS0z ZjIyLThhYTctNmI3NjI0ZmE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ62kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXqr8zIANIQit4+MWV1IyKOIcdUyjnXm6ecxFMCLcb78DG0CJRrtg1+ 3Z1kEWefz9UfeaGdJvxuoARNDxzzju6VbkbEmEJDz4U61zGL/+sIArdJPVBTfUk2 O+iGfah9nclN1jBKdJrYam2Y9wXMtGSF4j8/jZ3UpL8se4guquuCHeeRl+3vxN8N KHRletNPodw2NMM6y2RawW871y+YRq52qzbAiKL+u0HDs27w26R1VNtK77s2TpDm trjl3AHzcMfFy4Y0a4co4Ea5ZRxdIYe6YFyfAyaVbdx2ng8kTGqT1/QvXfAfHlY0 tt3GnDKIZuZj/brPUGWGSFrYenSXvtQ= -----END CERTIFICATE-----Generated at Tue Apr 21 23:02:34 2026 by rpki-client