$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/067095b4-e3c7-3f0f-85d9-8497d09dbc2c.roa File: 067095b4-e3c7-3f0f-85d9-8497d09dbc2c.roa (raw, json) Hash identifier: Vw6JC89CpMo8yu4iYtNu+X02VB75LGhPikRXXfYmkHY= Subject key identifier: F5:1F:8E:1F:89:4E:11:51:86:B8:43:8B:05:82:9D:57:95:C7:90:24 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D75F932CAC0BDB278657C5E40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/067095b4-e3c7-3f0f-85d9-8497d09dbc2c.roa Signing time: Fri 10 Apr 2026 14:13:15 +0000 ROA not before: Fri 10 Apr 2026 14:13:15 +0000 ROA not after: Thu 09 Jul 2026 14:13:15 +0000 asID: 401856 IP address blocks: 173.44.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:f9:32:ca:c0:bd:b2:78:65:7c:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 10 14:13:15 2026 GMT Not After : Jul 9 14:13:15 2026 GMT Subject: CN=9dfa07b0-e8ab-4593-a3d9-d1e23c414689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:14:ab:3f:b7:9d:27:4f:e0:24:9a:e0:ae: 8d:84:2e:b7:0a:78:12:cf:6a:0f:56:65:8a:dd:c3: 4c:af:b8:96:94:b5:93:71:c4:6e:95:50:b8:5d:17: 78:d6:11:7b:71:92:c8:13:90:2b:15:5e:09:2b:28: e2:0d:7f:fc:f3:44:7e:56:9b:08:b6:c1:b1:70:06: a6:23:0a:5b:eb:b0:69:f4:af:41:1f:47:72:44:82: f5:60:0c:51:73:98:1c:99:0d:a7:7e:98:bf:55:24: c1:34:8e:ab:c4:18:35:54:f5:23:42:51:24:28:9a: 9b:5e:a8:db:76:38:78:9f:9d:8e:2b:1c:19:5e:70: 14:34:a6:73:57:63:06:39:e2:3d:f4:31:68:60:af: 05:a6:66:3e:a7:98:bb:ad:71:79:63:a7:ce:32:73: 03:f7:64:23:38:cd:0c:e1:b5:31:41:6e:42:3e:34: da:8f:3e:39:04:76:5f:8b:2e:be:5b:c9:21:c4:2f: 07:6a:66:da:44:66:4d:5e:fc:3c:3f:84:58:ec:a1: 55:1f:e3:de:34:c5:ea:d3:56:1b:b0:93:85:e9:e8: 5b:aa:04:ed:fa:23:20:e2:37:a4:65:59:2b:ad:c4: 11:46:67:7d:d7:a9:f6:e4:ab:0a:3e:dd:30:1a:9e: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1F:8E:1F:89:4E:11:51:86:B8:43:8B:05:82:9D:57:95:C7:90:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/067095b4-e3c7-3f0f-85d9-8497d09dbc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.44.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9a:26:bd:0a:b2:d7:58:14:85:db:24:c9:ab:d5:61:4e:a5: ab:7c:fb:e9:bd:80:05:2e:45:fb:8e:b1:60:97:41:8f:f0:28: b4:2f:4e:ee:aa:8b:c1:42:d9:8a:6b:e6:e2:2c:fd:44:ca:e1: e2:a6:a1:62:01:e3:b9:66:ac:d4:c1:91:b6:6d:d8:cb:cb:22: 0b:17:1d:88:28:e7:d0:ce:3e:c9:11:a6:5d:d6:af:31:0c:46: 4d:09:42:f0:c0:0d:cd:ce:9a:cb:e1:82:e8:a5:3a:c7:d2:89: b8:da:33:89:b1:dc:8b:20:db:96:fd:f6:cd:fe:97:d2:79:2e: 89:83:44:c0:9e:95:8f:9b:8f:e7:5b:ce:f2:b2:c8:01:89:4f: 64:dc:45:29:4c:05:9b:ce:b4:65:b5:04:43:b1:4f:7a:5d:0e: ed:9e:01:78:da:a2:06:df:2b:55:e2:fd:6c:d1:6c:a2:67:3a: 3f:f4:16:9a:81:d3:03:b4:b3:3b:d1:35:96:cd:25:98:5d:9d: 94:fa:8e:67:ec:70:08:1b:ba:94:2a:10:92:84:3e:bf:45:f0: 97:9b:17:f8:00:83:d4:c3:99:9c:24:08:0b:2a:9f:ab:c1:07: c5:9c:e6:47:bf:4a:b0:27:c4:d5:aa:17:7a:5b:33:1e:a0:82: 73:40:29:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE11+TLKwL2yeGV8XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDQxMDE0MTMxNVoXDTI2MDcwOTE0MTMxNVowLzEtMCsGA1UEAxMk OWRmYTA3YjAtZThhYi00NTkzLWEzZDktZDFlMjNjNDE0Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlIUqz+3nSdP4CSa4K6NhC63CngSz2oPVmWK 3cNMr7iWlLWTccRulVC4XRd41hF7cZLIE5ArFV4JKyjiDX/880R+VpsItsGxcAam Iwpb67Bp9K9BH0dyRIL1YAxRc5gcmQ2nfpi/VSTBNI6rxBg1VPUjQlEkKJqbXqjb djh4n52OKxwZXnAUNKZzV2MGOeI99DFoYK8FpmY+p5i7rXF5Y6fOMnMD92QjOM0M 4bUxQW5CPjTajz45BHZfiy6+W8khxC8HambaRGZNXvw8P4RY7KFVH+PeNMXq01Yb sJOF6ehbqgTt+iMg4jekZVkrrcQRRmd916n25KsKPt0wGp7EXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUfjh+JThFRhrhDiwWCnVeVx5AkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDY3MDk1YjQtZTNjNy0z ZjBmLTg1ZDktODQ5N2QwOWRiYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArSzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6aJr0KstdYFIXbJMmr1WFOpat8++m9gAUuRfuOsWCXQY/wKLQvTu6q i8FC2Ypr5uIs/UTK4eKmoWIB47lmrNTBkbZt2MvLIgsXHYgo59DOPskRpl3WrzEM Rk0JQvDADc3OmsvhguilOsfSibjaM4mx3Isg25b99s3+l9J5LomDRMCelY+bj+db zvKyyAGJT2TcRSlMBZvOtGW1BEOxT3pdDu2eAXjaogbfK1Xi/WzRbKJnOj/0FpqB 0wO0szvRNZbNJZhdnZT6jmfscAgbupQqEJKEPr9F8JebF/gAg9TDmZwkCAsqn6vB B8Wc5ke/SrAnxNWqF3pbMx6ggnNAKSw= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:28 2026 by rpki-client