$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa File: c8a03884-4588-3194-bc2b-cdd44f9536b1.roa (raw, json) Hash identifier: udzK6lOvB4MdBDrPWf7ofN1laAPO16aKmsUtDhnvd9Y= Subject key identifier: 8D:94:8B:28:F3:82:65:A4:E3:B0:73:4B:4D:7C:2D:C9:EB:44:06:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5A39FF27FA32110B3C7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 174.52.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:a3:9f:f2:7f:a3:21:10:b3:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d7a59910-5c04-41b2-aa13-e85d04cc8ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:25:f9:23:bf:00:c1:22:83:3f:9b:13:11: 90:05:ea:c9:1c:9a:1f:e3:c1:3a:cd:f4:bd:75:0f: 99:f8:44:8e:9e:dc:cb:8b:33:69:fb:18:cf:ea:86: 59:52:cb:20:3e:4c:20:d8:06:a8:8b:bf:60:59:6f: 98:31:63:f2:9b:a7:77:a9:2b:ed:06:b8:de:d6:d6: db:e7:35:f9:3d:f5:25:36:b0:2b:24:23:7a:e1:30: ed:7e:0d:3e:8f:13:4b:59:94:48:d8:15:c0:08:f9: 91:59:26:27:26:83:59:2b:f4:06:1c:f0:f6:67:6d: 44:33:ee:35:5e:76:ec:55:85:ee:8f:66:78:2b:41: 16:76:d7:1e:41:17:a7:a7:a1:37:95:0f:ef:80:c2: f5:82:bb:32:d6:98:98:6c:c6:be:83:a8:5b:39:18: 58:b7:f3:88:cc:7e:40:49:44:55:c9:27:ba:ad:11: b4:85:bc:d6:b6:2a:8d:8f:9f:11:0a:15:03:63:8c: 66:9d:9d:e9:f8:07:9d:25:eb:a5:2e:cb:33:2d:c6: f8:c9:45:66:c3:5f:47:d4:d6:9a:1e:fa:bc:b7:45: 84:22:35:53:ec:bb:b5:06:b3:47:09:06:7b:4f:25: 49:38:8f:79:84:70:40:48:35:22:9e:2f:55:df:de: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:94:8B:28:F3:82:65:A4:E3:B0:73:4B:4D:7C:2D:C9:EB:44:06:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a03884-4588-3194-bc2b-cdd44f9536b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.52.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:1d:95:a6:72:36:9b:b6:a0:7f:07:1c:3c:e8:6c:7b:a6:22: 52:90:26:1d:35:81:55:84:10:02:ce:df:59:18:6c:eb:b6:7a: 94:6b:9e:51:13:09:3a:02:ce:8a:2a:ed:29:93:97:58:af:b2: cb:97:b3:01:b4:8e:52:b5:60:eb:ba:8a:65:cf:71:f5:e1:0c: 81:c9:76:8b:e8:48:43:e5:82:58:61:b2:b7:e8:af:6b:a0:73: d2:3f:e1:29:7c:c8:50:f3:b7:b1:7f:41:f6:b2:85:82:3e:3a: 1a:0f:83:ce:5f:43:64:c6:af:51:c7:0c:26:19:e0:14:19:f7: 0c:40:6e:4c:ce:3b:34:0b:77:57:7a:c2:bc:2a:a3:50:63:ed: bf:7b:9a:d9:9f:60:77:df:b4:42:ab:97:52:0f:62:13:a8:c6: 59:2b:19:2f:3c:bd:4a:ba:57:30:fc:78:88:2f:56:9a:cf:d2: 65:09:bb:bf:05:67:06:4d:ef:7f:c1:7b:d6:5e:44:ee:2d:4f: 7f:5b:52:7c:6e:cc:67:a9:0d:35:63:b0:1d:07:b8:d7:98:a3: 31:67:94:e7:c1:04:cb:26:c2:f7:65:e8:d4:9e:41:d7:80:0e: 79:fd:ca:d6:f6:be:42:c3:3a:fc:73:85:ff:6e:15:6e:4d:81: 24:0a:35:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9aOf8n+jIRCzx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDdhNTk5MTAtNWMwNC00MWIyLWFhMTMtZTg1ZDA0Y2M4ZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokMl+SO/AMEigz+bExGQBerJHJof48E6zfS9 dQ+Z+ESOntzLizNp+xjP6oZZUssgPkwg2Aaoi79gWW+YMWPym6d3qSvtBrje1tbb 5zX5PfUlNrArJCN64TDtfg0+jxNLWZRI2BXACPmRWSYnJoNZK/QGHPD2Z21EM+41 XnbsVYXuj2Z4K0EWdtceQRenp6E3lQ/vgML1grsy1piYbMa+g6hbORhYt/OIzH5A SURVySe6rRG0hbzWtiqNj58RChUDY4xmnZ3p+AedJeulLsszLcb4yUVmw19H1Naa Hvq8t0WEIjVT7Lu1BrNHCQZ7TyVJOI95hHBASDUini9V394RQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2UiyjzgmWk47BzS018LcnrRAZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhhMDM4ODQtNDU4OC0z MTk0LWJjMmItY2RkNDRmOTUzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrjSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4dlaZyNpu2oH8HHDzobHumIlKQJh01gVWEEALO31kYbOu2epRrnlET CToCzooq7SmTl1ivssuXswG0jlK1YOu6imXPcfXhDIHJdovoSEPlglhhsrfor2ug c9I/4Sl8yFDzt7F/QfayhYI+OhoPg85fQ2TGr1HHDCYZ4BQZ9wxAbkzOOzQLd1d6 wrwqo1Bj7b97mtmfYHfftEKrl1IPYhOoxlkrGS88vUq6VzD8eIgvVprP0mUJu78F ZwZN73/Be9ZeRO4tT39bUnxuzGepDTVjsB0HuNeYozFnlOfBBMsmwvdl6NSeQdeA Dnn9ytb2vkLDOvxzhf9uFW5NgSQKNek= -----END CERTIFICATE-----Generated at Tue Apr 21 20:31:08 2026 by rpki-client