$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8fda56-b1c0-3b56-b0b2-7f995ef87019.roa File: cc8fda56-b1c0-3b56-b0b2-7f995ef87019.roa (raw, json) Hash identifier: x7iJksQBdFMw85m6j9G1WtBIVXV04+RTaSFWr1YJ664= Subject key identifier: DE:F4:D4:44:CF:64:AC:E9:0A:C5:F4:E9:75:3F:5F:0D:DB:75:53:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7836624734BF304C8C8F0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8fda56-b1c0-3b56-b0b2-7f995ef87019.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.167.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:83:66:24:73:4b:f3:04:c8:c8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2fbd1196-5d65-499f-9e09-14dcaf14f332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5c:90:d2:9b:5e:c1:ec:b0:2a:f1:97:1a:b4: 48:5f:9b:71:ad:c7:05:1c:53:df:84:d4:1e:15:bf: 38:62:16:66:f3:96:a4:c6:d4:bb:60:85:70:e1:97: 47:60:b6:ad:3d:a6:83:4a:d5:5b:35:8d:c1:c1:e5: 8c:7d:28:66:ad:d2:6b:c3:45:be:dc:2d:0f:b4:8a: c9:5a:b3:62:ea:4d:e2:0f:0c:da:8d:6a:4f:10:d2: 86:72:7a:af:30:db:0c:5e:2c:4d:6b:6f:63:4f:cd: fc:c5:82:d9:c8:f4:87:b3:4e:00:00:fb:21:57:20: 77:31:83:ab:be:87:3c:0d:b6:fb:1a:59:65:c6:8d: dd:6f:e8:ba:1d:86:67:90:9a:65:c6:a2:94:4a:dd: aa:3a:2a:57:d8:73:03:6e:a7:d2:61:51:a1:ad:6a: c4:00:f2:3f:fc:78:83:2c:8b:85:c2:af:bf:da:d6: 5d:31:35:9a:8e:ad:54:ad:34:c4:c5:1c:43:4c:e1: 1f:52:e7:14:0b:bc:19:6a:99:b2:e4:24:bd:ff:94: 8d:be:18:b1:83:7c:c3:fa:c0:2a:d8:8f:ba:89:a5: e9:ab:e0:ca:25:78:78:35:ef:5a:f7:37:83:f8:a3: 2d:c8:ab:ad:10:d3:12:01:1f:6e:fb:aa:d0:cd:35: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F4:D4:44:CF:64:AC:E9:0A:C5:F4:E9:75:3F:5F:0D:DB:75:53:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc8fda56-b1c0-3b56-b0b2-7f995ef87019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.167.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:22:2b:73:a2:95:0b:7f:fd:d3:47:77:6f:0f:e2:da:4a:ed: b4:34:6d:29:20:5d:5c:3d:a8:87:9a:bf:77:fb:ac:59:b8:f8: 33:2e:c0:3d:f8:3b:13:98:ca:3b:61:53:c9:6d:e0:00:b0:10: 99:8b:e8:d3:13:78:8e:e8:2c:24:a8:7d:5a:6b:fd:b6:34:c6: 5d:73:e4:d3:33:68:2d:70:f9:80:71:67:dd:37:78:90:f6:63: df:e5:e4:a0:0b:2a:6b:c6:38:4c:8c:bc:25:04:5f:f5:3d:5d: 1f:e6:e8:e6:91:51:50:3e:e4:ad:87:af:9a:f0:d7:0b:c5:9a: 8f:41:01:8a:7a:a6:4e:15:a3:98:fc:6e:f5:91:95:62:95:ba: fc:cc:2f:e8:9c:f2:f1:4f:05:78:c9:7f:95:23:d1:2d:63:6d: c2:98:57:36:68:d5:aa:c9:c4:0d:66:f1:89:a6:c1:00:f2:df: b9:c1:d4:01:0f:51:40:4f:21:5c:0a:08:41:8c:c6:d0:fe:a2: d1:2d:0d:26:ad:45:3f:f1:c4:9d:c5:92:03:e6:1c:04:af:52: 75:9f:f2:9a:a0:df:3f:c3:9d:84:ad:7a:1c:41:52:1f:ab:75: 19:d7:63:aa:c4:97:4f:04:d1:e6:23:ab:15:8c:ea:2a:2b:1e: c4:6e:6a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94NmJHNL8wTIyPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmZiZDExOTYtNWQ2NS00OTlmLTllMDktMTRkY2FmMTRmMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlyQ0pteweywKvGXGrRIX5txrccFHFPfhNQe Fb84YhZm85akxtS7YIVw4ZdHYLatPaaDStVbNY3BweWMfShmrdJrw0W+3C0PtIrJ WrNi6k3iDwzajWpPENKGcnqvMNsMXixNa29jT838xYLZyPSHs04AAPshVyB3MYOr voc8Dbb7Glllxo3db+i6HYZnkJplxqKUSt2qOipX2HMDbqfSYVGhrWrEAPI//HiD LIuFwq+/2tZdMTWajq1UrTTExRxDTOEfUucUC7wZapmy5CS9/5SNvhixg3zD+sAq 2I+6iaXpq+DKJXh4Ne9a9zeD+KMtyKutENMSAR9u+6rQzTVeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN701ETPZKzpCsX06XU/Xw3bdVOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M4ZmRhNTYtYjFjMC0z YjU2LWIwYjItN2Y5OTVlZjg3MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQiK3OilQt//dNHd28P4tpK7bQ0bSkgXVw9qIeav3f7rFm4+DMuwD34 OxOYyjthU8lt4ACwEJmL6NMTeI7oLCSofVpr/bY0xl1z5NMzaC1w+YBxZ903eJD2 Y9/l5KALKmvGOEyMvCUEX/U9XR/m6OaRUVA+5K2Hr5rw1wvFmo9BAYp6pk4Vo5j8 bvWRlWKVuvzML+ic8vFPBXjJf5Uj0S1jbcKYVzZo1arJxA1m8YmmwQDy37nB1AEP UUBPIVwKCEGMxtD+otEtDSatRT/xxJ3FkgPmHASvUnWf8pqg3z/DnYStehxBUh+r dRnXY6rEl08E0eYjqxWM6iorHsRuajg= -----END CERTIFICATE-----Generated at Wed Apr 22 00:15:03 2026 by rpki-client