$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3f968f35-1e78-3e22-99d7-1f30c6074eb3.roa File: 3f968f35-1e78-3e22-99d7-1f30c6074eb3.roa (raw, json) Hash identifier: NHjPwgHY6eg8WbWFQRxWJzsnwtnqKBjlAEwYaDH3ymU= Subject key identifier: BB:91:C4:6A:E2:13:2E:13:8E:6C:9E:00:0B:D5:A6:3E:BA:90:C3:FB Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584D8D900306E21664730E808980 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3f968f35-1e78-3e22-99d7-1f30c6074eb3.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 19901 IP address blocks: 67.147.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:90:03:06:e2:16:64:73:0e:80:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=7cab9cb7-bfab-4f3d-90e4-f0556c7bc1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:b2:d5:c7:18:ac:44:d0:ca:a6:79:85:65: e5:b5:61:ba:80:c6:28:3c:d0:e3:e9:cb:f7:3a:fa: 4b:1b:ca:ef:96:8a:81:39:5b:9b:ef:08:4d:cf:18: c8:56:50:7d:72:cc:f3:58:7e:e0:13:e2:8a:b8:59: 94:2d:f8:2c:1d:36:79:2a:eb:67:f5:c0:5e:4c:f3: 1c:fa:65:02:c5:5d:8f:a7:3a:96:66:58:5a:8e:aa: 24:f0:aa:b1:ed:d0:e5:94:25:0a:56:0f:5e:07:8d: a8:24:a6:53:0a:15:66:e7:7f:f8:67:43:5c:cc:32: 4e:a1:38:bd:80:b4:98:71:d2:5f:92:80:12:f3:b3: 9f:70:73:5d:d9:ef:8e:de:ab:5e:f4:29:1c:34:90: 48:00:2f:d3:48:0c:ef:1e:99:82:ee:70:7e:df:21: c5:6b:8e:3f:30:0b:c9:88:cf:52:4f:f9:8d:dd:64: 9d:ed:82:0a:b7:c4:57:07:71:de:c5:a1:84:1b:00: 1e:fa:fb:fb:62:10:69:de:fa:7d:b6:1e:fd:38:d3: 16:60:cb:91:21:02:30:5e:c4:4c:35:59:80:f3:1c: 01:fa:26:9e:95:3c:43:0b:93:44:7d:06:3d:1b:8b: 41:f3:ea:bb:fb:50:ef:7e:af:a1:e1:4a:47:e6:02: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:91:C4:6A:E2:13:2E:13:8E:6C:9E:00:0B:D5:A6:3E:BA:90:C3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/3f968f35-1e78-3e22-99d7-1f30c6074eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 67.147.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9c:cc:22:38:9c:57:fe:16:b0:4c:c4:e9:bf:1d:b2:c7:c4: f7:53:0a:c2:bd:b7:06:65:96:3e:f2:c0:ae:e3:01:59:e0:5c: 7c:a3:ea:9d:12:26:41:0e:24:f9:c7:8f:7f:81:2f:e6:9b:46: 97:9d:76:59:65:63:b5:a9:3e:6a:c3:76:99:ae:bc:89:97:bb: 0c:6b:f2:45:68:09:8e:36:56:da:9d:bc:7a:17:db:47:b1:17: 42:87:7b:e7:b5:0b:5a:cb:7b:d0:06:c5:f7:a0:04:67:a1:a8: 98:ad:65:1f:3d:15:1f:2a:db:c5:c8:4c:4f:f2:ef:8c:4d:9f: 8b:39:b7:72:6e:ac:21:b1:d6:5b:20:fb:3e:3d:16:f8:e1:1f: 9d:37:45:26:16:33:99:6d:d6:3c:26:c1:62:c2:c6:0e:08:5c: 4d:6b:77:c3:39:f7:0e:3c:46:59:67:64:14:ce:d8:61:de:20: 33:7e:5e:03:0d:01:ee:a0:76:55:0c:98:2c:28:2f:be:b3:9b: 8d:4c:12:0e:f3:ec:7d:51:fc:a7:40:b7:0b:2d:84:64:88:a7: dd:c0:68:4c:e4:85:d1:8c:1f:88:fe:cf:03:fc:22:af:d5:20: 41:ae:82:13:95:69:49:1a:f9:0a:85:bd:12:2a:ca:54:c3:93: 35:fe:f2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkAMG4hZkcw6AiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk N2NhYjljYjctYmZhYi00ZjNkLTkwZTQtZjA1NTZjN2JjMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Sy1ccYrETQyqZ5hWXltWG6gMYoPNDj6cv3 OvpLG8rvloqBOVub7whNzxjIVlB9cszzWH7gE+KKuFmULfgsHTZ5Kutn9cBeTPMc +mUCxV2PpzqWZlhajqok8Kqx7dDllCUKVg9eB42oJKZTChVm53/4Z0NczDJOoTi9 gLSYcdJfkoAS87OfcHNd2e+O3qte9CkcNJBIAC/TSAzvHpmC7nB+3yHFa44/MAvJ iM9ST/mN3WSd7YIKt8RXB3HexaGEGwAe+vv7YhBp3vp9th79ONMWYMuRIQIwXsRM NVmA8xwB+iaelTxDC5NEfQY9G4tB8+q7+1Dvfq+h4UpH5gJWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuRxGriEy4TjmyeAAvVpj66kMP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvM2Y5NjhmMzUtMWU3OC0z ZTIyLTk5ZDctMWYzMGM2MDc0ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ5PEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOczCI4nFf+FrBMxOm/HbLHxPdTCsK9twZllj7ywK7jAVngXHyj6p0S JkEOJPnHj3+BL+abRpeddlllY7WpPmrDdpmuvImXuwxr8kVoCY42VtqdvHoX20ex F0KHe+e1C1rLe9AGxfegBGehqJitZR89FR8q28XITE/y74xNn4s5t3JurCGx1lsg +z49FvjhH503RSYWM5lt1jwmwWLCxg4IXE1rd8M59w48RllnZBTO2GHeIDN+XgMN Ae6gdlUMmCwoL76zm41MEg7z7H1R/KdAtwsthGSIp93AaEzkhdGMH4j+zwP8Iq/V IEGughOVaUka+QqFvRIqylTDkzX+8ro= -----END CERTIFICATE-----Generated at Wed Apr 29 15:34:44 2026 by rpki-client