$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3c7ca5-34b9-3669-a609-a4f9f31cceb9.roa File: ff3c7ca5-34b9-3669-a609-a4f9f31cceb9.roa (raw, json) Hash identifier: nEMXp4o9NmD7I2cwefdEGhFJWHKDFn8leTZR++Wf0o0= Subject key identifier: 47:A2:A9:BC:AE:9D:F5:45:37:F9:2D:E0:46:26:B6:FD:2C:40:AC:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6163C9B8A95B13D483CF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3c7ca5-34b9-3669-a609-a4f9f31cceb9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 67.163.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:16:3c:9b:8a:95:b1:3d:48:3c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7a4c68fe-dad0-4d0f-b7b9-a01ebf2533ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:a1:fd:c3:07:4a:3b:c2:da:88:09:24:20: 0e:cc:85:1c:d5:22:79:be:8e:e9:82:d2:d3:b3:46: b3:8c:21:78:60:6d:2c:3d:ad:e9:89:59:b8:3e:9f: 6d:1d:8b:c8:d1:32:22:d6:dd:74:13:0f:d1:09:e6: 17:46:db:23:92:f1:7a:83:b5:d2:2c:cd:d1:8a:72: c1:62:20:ff:d8:e0:43:dd:0d:d9:9f:40:37:6d:c4: d7:6d:d1:02:95:27:d0:f8:80:b8:76:ff:30:3b:88: fb:ec:bb:6a:d4:e7:f6:e2:e4:c9:d8:ca:74:af:b9: 0c:4e:6f:89:82:cc:70:6a:45:ad:ba:8d:37:d3:18: 23:80:86:d8:00:41:af:f4:fd:f1:56:7f:8f:12:e3: fa:96:bc:6d:b5:e2:40:f6:a5:06:af:bc:0f:d3:14: 3e:da:89:a3:9b:71:30:8f:b7:7a:f8:0e:ab:8f:c2: fa:f4:61:ea:04:19:3c:d1:60:fa:d8:45:e0:8e:20: bb:aa:fe:7c:71:c3:3b:53:fc:47:26:f8:11:10:d0: 7e:10:13:45:2f:e1:c5:4c:7a:a0:58:77:2c:c4:96: 72:3a:c3:6b:88:56:f3:fc:5d:85:6b:12:8e:44:6a: d6:cf:63:65:89:09:21:90:fd:2e:75:bf:8c:04:de: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A2:A9:BC:AE:9D:F5:45:37:F9:2D:E0:46:26:B6:FD:2C:40:AC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff3c7ca5-34b9-3669-a609-a4f9f31cceb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.163.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8a:18:af:4d:d7:c3:05:ca:9c:91:e1:3e:bd:f0:36:9e:8c: ac:ce:e8:02:c4:25:9c:8e:20:69:69:01:0f:37:37:bb:0b:9b: 5c:b2:1e:be:f2:3f:48:27:58:54:5b:02:16:8e:8c:80:54:2b: db:8d:df:7b:e7:a9:96:23:eb:3d:75:29:ee:2f:2f:37:9b:3a: 94:4f:58:56:2d:33:49:74:d5:79:b9:f6:7f:6c:a3:e0:91:28: a0:d6:74:1e:3e:43:59:90:fb:9c:19:d4:d0:74:7f:17:75:99: a1:1a:29:38:e4:a3:6c:63:77:f6:60:fe:a0:4b:97:c7:43:ef: 39:9b:76:9f:e6:df:d9:0a:fb:46:fe:ee:4f:f6:f0:b0:00:be: 23:0f:03:58:6a:e4:5a:9b:d2:89:7b:ab:90:ec:7f:9c:cd:cf: 37:7d:95:26:c4:78:a5:ba:f4:8e:26:a3:8b:7b:d4:53:22:96: 63:49:1d:53:8b:ec:92:5b:c7:31:50:e5:d5:4a:18:3d:42:0e: 77:de:c0:ef:0a:f4:5a:a3:7d:ee:70:11:f1:6b:03:d9:4c:5f: 76:25:fa:9e:17:7e:ed:43:ba:2c:c7:f7:c5:34:41:32:1a:95: 3b:9d:b0:61:c7:f8:5e:ec:1b:59:ef:61:f1:b7:d9:55:9d:09: 81:63:f7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9hY8m4qVsT1IPPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2E0YzY4ZmUtZGFkMC00ZDBmLWI3YjktYTAxZWJmMjUzM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRSh/cMHSjvC2ogJJCAOzIUc1SJ5vo7pgtLT s0azjCF4YG0sPa3piVm4Pp9tHYvI0TIi1t10Ew/RCeYXRtsjkvF6g7XSLM3RinLB YiD/2OBD3Q3Zn0A3bcTXbdEClSfQ+IC4dv8wO4j77Ltq1Of24uTJ2Mp0r7kMTm+J gsxwakWtuo030xgjgIbYAEGv9P3xVn+PEuP6lrxtteJA9qUGr7wP0xQ+2omjm3Ew j7d6+A6rj8L69GHqBBk80WD62EXgjiC7qv58ccM7U/xHJvgRENB+EBNFL+HFTHqg WHcsxJZyOsNriFbz/F2FaxKORGrWz2NliQkhkP0udb+MBN7qMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeiqbyunfVFN/kt4EYmtv0sQKwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmYzYzdjYTUtMzRiOS0z NjY5LWE2MDktYTRmOWYzMWNjZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICKGK9N18MFypyR4T698DaejKzO6ALEJZyOIGlpAQ83N7sLm1yyHr7y P0gnWFRbAhaOjIBUK9uN33vnqZYj6z11Ke4vLzebOpRPWFYtM0l01Xm59n9so+CR KKDWdB4+Q1mQ+5wZ1NB0fxd1maEaKTjko2xjd/Zg/qBLl8dD7zmbdp/m39kK+0b+ 7k/28LAAviMPA1hq5Fqb0ol7q5Dsf5zNzzd9lSbEeKW69I4mo4t71FMilmNJHVOL 7JJbxzFQ5dVKGD1CDnfewO8K9Fqjfe5wEfFrA9lMX3Yl+p4Xfu1DuizH98U0QTIa lTudsGHH+F7sG1nvYfG32VWdCYFj96k= -----END CERTIFICATE-----Generated at Tue Apr 21 19:20:06 2026 by rpki-client