$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa File: da3efcbd-c437-355f-9d1a-208bd26f5250.roa (raw, json) Hash identifier: yXSnKBwRZDGpkXK/zPxL6TjYDH3DOdTR3XSdmIDYMFo= Subject key identifier: 28:4E:16:16:10:42:DC:46:B8:40:A5:4B:3F:47:D9:72:7E:82:A0:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF602A9755274CB2100F780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 174.173.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:02:a9:75:52:74:cb:21:00:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f58073a1-0fa2-4c02-bee9-ff254d07a370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:bf:61:91:ea:2b:c6:cc:87:b1:07:20:f3: f3:26:d6:53:96:90:a0:26:34:01:62:bd:45:87:cd: 28:9a:a0:d9:23:d0:15:b4:3a:d2:2a:88:6d:7b:dd: 1d:90:24:ed:8f:29:d0:f6:37:55:f2:ce:33:11:b3: 3a:8f:4b:0f:e3:e5:f9:8d:47:41:e7:62:05:e9:a1: a8:f3:ee:da:6f:50:c4:23:bb:82:00:36:bb:54:f9: 9e:58:7a:e0:4f:a2:e7:43:17:46:1c:ef:7d:8a:62: 6e:3e:00:e1:58:8f:b9:f0:77:42:80:af:ed:fc:07: 17:af:07:f0:b5:37:cd:2b:9c:b4:2d:a3:2e:64:7c: 44:89:4f:67:5f:7e:77:f0:41:f1:81:e7:f9:f3:8e: a6:31:82:57:bf:87:e2:da:ba:a2:7b:0c:19:82:2b: 9f:34:a2:f4:ab:5d:1d:e7:be:55:1e:97:23:70:d9: 6a:42:46:ea:e0:e8:5a:4e:78:0b:d3:78:b4:d4:89: 86:e8:bb:94:88:39:36:e3:14:77:4a:25:cf:e6:38: 1c:67:21:f3:ef:18:61:19:c6:c0:5c:4f:32:c0:04: 83:bb:42:6e:02:d2:87:eb:73:86:84:d2:ff:f3:1b: 43:2b:43:85:e6:19:db:63:3c:e0:fc:23:ba:f6:46: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:16:16:10:42:DC:46:B8:40:A5:4B:3F:47:D9:72:7E:82:A0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da3efcbd-c437-355f-9d1a-208bd26f5250.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:25:b5:39:88:b2:e0:c0:6f:cb:e3:3a:fc:f8:da:32:7a:03: 70:90:28:71:68:7e:94:44:9d:2e:89:6b:b3:ec:db:93:90:b0: 83:25:91:d6:95:02:5b:3d:a3:62:05:2c:1f:4f:b8:cd:c8:2e: 25:e2:74:b0:83:c5:b0:98:73:43:84:42:b2:16:81:ab:b0:07: 31:1e:82:b2:cc:3d:0f:f8:7a:70:ac:b9:cc:34:f3:42:9d:d6: 1b:42:73:4e:f7:ea:6e:b0:16:f5:dc:19:e8:dd:66:4f:c2:c4: e7:71:28:07:ac:65:25:ea:7a:3a:c7:81:4d:c9:57:e8:39:44: bc:38:e8:54:d6:41:23:b6:70:18:4e:16:1a:6e:65:3a:3e:db: 55:48:9b:74:3e:7f:f6:6f:f8:60:20:c3:d4:2b:55:b6:4b:49: b2:dd:6f:e0:e3:41:fa:c4:29:84:8a:7b:ef:35:e3:5b:9f:f0: 6b:19:b0:c2:7d:f3:94:84:d6:04:ed:10:4e:11:b0:3e:a1:a3: bd:c8:ac:51:ea:74:f8:38:ce:7b:75:cf:78:2f:8b:bc:1b:a4: 06:e2:32:12:f0:36:1b:6b:30:d4:b5:4d:41:5a:8e:03:9c:3b: c5:88:19:44:c2:71:9a:9d:4a:3a:26:81:9f:90:bc:38:60:b3: 8c:e7:d1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gKpdVJ0yyEA94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjU4MDczYTEtMGZhMi00YzAyLWJlZTktZmYyNTRkMDdhMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOK/YZHqK8bMh7EHIPPzJtZTlpCgJjQBYr1F h80omqDZI9AVtDrSKohte90dkCTtjynQ9jdV8s4zEbM6j0sP4+X5jUdB52IF6aGo 8+7ab1DEI7uCADa7VPmeWHrgT6LnQxdGHO99imJuPgDhWI+58HdCgK/t/AcXrwfw tTfNK5y0LaMuZHxEiU9nX3538EHxgef5846mMYJXv4fi2rqiewwZgiufNKL0q10d 575VHpcjcNlqQkbq4OhaTngL03i01ImG6LuUiDk24xR3SiXP5jgcZyHz7xhhGcbA XE8ywASDu0JuAtKH63OGhNL/8xtDK0OF5hnbYzzg/CO69kbZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChOFhYQQtxGuEClSz9H2XJ+gqD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGEzZWZjYmQtYzQzNy0z NTVmLTlkMWEtMjA4YmQyNmY1MjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEltTmIsuDAb8vjOvz42jJ6A3CQKHFofpREnS6Ja7Ps25OQsIMlkdaV Als9o2IFLB9PuM3ILiXidLCDxbCYc0OEQrIWgauwBzEegrLMPQ/4enCsucw080Kd 1htCc0736m6wFvXcGejdZk/CxOdxKAesZSXqejrHgU3JV+g5RLw46FTWQSO2cBhO FhpuZTo+21VIm3Q+f/Zv+GAgw9QrVbZLSbLdb+DjQfrEKYSKe+8141uf8GsZsMJ9 85SE1gTtEE4RsD6ho73IrFHqdPg4znt1z3gvi7wbpAbiMhLwNhtrMNS1TUFajgOc O8WIGUTCcZqdSjomgZ+QvDhgs4zn0fE= -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:06 2026 by rpki-client