$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa File: 28f935d3-57e6-314d-95ed-7c825db00b08.roa (raw, json) Hash identifier: Bud6xnlGMWYuPaeB4/bi3ja6yVZ6f6fSnNKNUMwDdpo= Subject key identifier: 2B:4C:27:BF:DD:16:0D:10:FA:93:1B:AC:7E:B2:95:BC:81:E7:0F:B2 Certificate issuer: /CN=0be9634a-0674-471a-bb54-7866e12ded7a Certificate serial: 010D0C9F4328584DAAE0362EF4534404F6A99C00 Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 18888 IP address blocks: 64.42.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:36:2e:f4:53:44:04:f6:a9:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=f1a56499-90e0-4862-9999-52a263b0bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:33:86:63:bb:4d:ad:cf:33:02:07:bc:24: 31:cd:6d:d6:b3:dd:d6:f4:29:cd:f8:1f:b5:6c:7f: 6c:08:48:80:8f:4d:9c:e6:0b:b0:bd:4b:46:db:f6: fd:c0:b1:0d:67:6c:2e:31:e2:11:fb:8c:aa:1d:cd: 4a:9b:85:b0:de:17:e3:6a:24:db:60:70:32:d3:5c: 2c:a8:7a:b5:07:0e:2c:21:a7:d6:38:67:20:2a:47: a6:a4:5c:6e:cb:fc:94:de:85:e1:d1:db:59:c1:0b: 50:6b:38:b7:67:16:9e:7a:d6:f4:33:0f:2d:9a:a9: d5:f7:1a:0f:42:c5:ce:79:75:6f:e1:20:bd:73:d0: 37:45:47:7c:55:d3:05:56:87:e0:39:64:32:ba:ab: fb:f5:90:bc:1c:ad:13:c4:5e:15:9f:fc:2b:07:c6: b0:c4:43:84:1b:2d:8f:52:41:75:26:70:e6:7d:d7: 6d:02:aa:98:e7:31:a3:08:1a:ea:6e:a9:76:83:56: c7:fd:1c:56:b8:6a:8b:1c:80:dd:00:0e:7a:a9:ad: bb:a3:90:7b:b8:2c:fe:1f:83:e9:47:6b:ea:ee:eb: be:18:7f:3d:24:df:ac:9a:72:81:84:50:b2:36:35: 14:a5:57:a4:45:82:87:a9:77:77:a8:64:e4:95:d4: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4C:27:BF:DD:16:0D:10:FA:93:1B:AC:7E:B2:95:BC:81:E7:0F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/28f935d3-57e6-314d-95ed-7c825db00b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl X509v3 Authority Key Identifier: keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer sbgp-ipAddrBlock: critical IPv4: 64.42.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7f:93:ce:f2:cb:a1:6a:08:de:0b:fc:87:04:84:0b:70:65: b6:c7:9a:c0:c7:f2:cc:5c:72:01:e7:5e:c1:fa:31:14:80:5c: 71:bd:44:9a:bc:ab:d5:c6:0c:08:9d:6e:46:2e:29:11:f5:67: 24:30:d0:77:e3:e4:1c:23:03:f2:e6:20:34:6e:0c:27:58:a0: 09:ca:de:82:b0:2f:40:5c:54:ac:c9:5f:ae:b9:81:0f:be:81: f2:a6:73:81:1f:2d:25:0c:17:5d:b0:68:43:65:90:dd:eb:4b: 3b:fb:64:8f:49:1d:33:d7:b1:65:72:ca:60:82:21:61:d3:1e: 19:09:f3:f5:a6:a9:fd:24:5c:98:35:74:67:99:5f:1f:81:90: 04:e7:42:55:8e:6a:f8:98:4e:39:17:c8:39:3b:9c:04:93:31: d0:31:28:be:48:de:8c:c6:bb:bf:50:92:60:4b:c5:c9:37:ed: a3:c4:36:fa:a6:55:81:89:02:67:76:28:50:db:c7:c6:55:36: f7:93:d6:25:ca:3e:3a:e2:ed:f9:a9:bd:f5:cf:ca:85:b3:95: af:ba:63:46:81:7f:b1:67:da:83:5b:14:73:12:ca:76:9e:69: 5a:9c:0f:8a:09:ed:4e:39:98:b1:5f:cc:ba:08:e7:04:4e:a6: 6c:71:d6:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DYu9FNEBPapnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl ZDdhMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZjFhNTY0OTktOTBlMC00ODYyLTk5OTktNTJhMjYzYjBiYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojAzhmO7Ta3PMwIHvCQxzW3Ws93W9CnN+B+1 bH9sCEiAj02c5guwvUtG2/b9wLENZ2wuMeIR+4yqHc1Km4Ww3hfjaiTbYHAy01ws qHq1Bw4sIafWOGcgKkempFxuy/yU3oXh0dtZwQtQazi3Zxaeetb0Mw8tmqnV9xoP QsXOeXVv4SC9c9A3RUd8VdMFVofgOWQyuqv79ZC8HK0TxF4Vn/wrB8awxEOEGy2P UkF1JnDmfddtAqqY5zGjCBrqbql2g1bH/RxWuGqLHIDdAA56qa27o5B7uCz+H4Pp R2vq7uu+GH89JN+smnKBhFCyNjUUpVekRYKHqXd3qGTkldTcIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtMJ7/dFg0Q+pMbrH6ylbyB5w+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5 NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvMjhmOTM1ZDMtNTdlNi0z MTRkLTk1ZWQtN2M4MjVkYjAwYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2 ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR/k87yy6FqCN4L/IcEhAtwZbbHmsDH8sxccgHnXsH6MRSAXHG9RJq8 q9XGDAidbkYuKRH1ZyQw0Hfj5BwjA/LmIDRuDCdYoAnK3oKwL0BcVKzJX665gQ++ gfKmc4EfLSUMF12waENlkN3rSzv7ZI9JHTPXsWVyymCCIWHTHhkJ8/Wmqf0kXJg1 dGeZXx+BkATnQlWOaviYTjkXyDk7nASTMdAxKL5I3ozGu79QkmBLxck37aPENvqm VYGJAmd2KFDbx8ZVNveT1iXKPjri7fmpvfXPyoWzla+6Y0aBf7Fn2oNbFHMSynae aVqcD4oJ7U45mLFfzLoI5wROpmxx1lA= -----END CERTIFICATE-----Generated at Sun May 3 17:53:49 2026 by rpki-client