$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa File: e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa (raw, json) Hash identifier: DpeiwyvN0wHp+vIjyMREPuErACNgBGtfhx9E2IxaSjs= Subject key identifier: F5:A9:2C:E6:18:BD:F0:72:19:99:A3:15:E2:1F:AC:1C:7B:57:1F:64 Certificate issuer: /CN=4298b6ff-8a6d-4135-b127-80a55c0919df Certificate serial: 010D0C9F4328584D8EF54DA473A56A23992E998B Authority key identifier: 4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30241 IP address blocks: 69.194.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4d:a4:73:a5:6a:23:99:2e:99:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4298b6ff-8a6d-4135-b127-80a55c0919df Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b45106a9-4e0b-4348-8067-59d398e10dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:52:49:42:4a:2c:31:9b:5c:95:83:ac:93: c6:03:be:6c:be:2a:f2:69:01:5e:9d:15:30:3e:23: 45:d1:54:12:4c:36:56:eb:05:f1:ea:d9:42:68:c5: 75:73:0a:29:e0:34:9f:41:42:c1:4b:2a:19:00:90: f5:bd:f4:d6:cd:03:30:30:4e:bb:84:30:74:39:86: 23:9d:17:19:80:67:ec:67:8e:d7:d5:d9:f4:1e:cb: f3:36:1d:e9:f1:97:51:dd:ce:09:41:55:6a:bc:8e: a1:8a:c9:dd:79:af:fb:d1:b1:33:59:c8:d1:6f:2f: 68:1a:f0:a5:ce:dc:0d:49:ff:08:c9:2f:84:9e:f6: b3:01:21:a0:1b:16:dd:be:d9:a2:93:dd:6b:34:92: 41:98:38:5c:79:35:fc:bd:0e:c1:ea:0c:f5:ae:9f: f9:4b:bf:6f:65:c3:55:7a:23:11:29:02:03:12:3a: 03:12:31:67:66:5e:7c:81:77:26:be:28:0a:42:89: c6:3f:34:7c:38:54:7a:ff:b0:71:61:fc:d2:94:cd: 86:d3:f2:b4:73:d9:89:03:eb:e4:93:0f:99:a3:cc: d6:ee:8d:97:8f:11:81:5e:f7:37:94:ca:25:ec:33: 68:72:24:08:4a:8a:03:74:3a:13:73:a3:82:8a:56: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A9:2C:E6:18:BD:F0:72:19:99:A3:15:E2:1F:AC:1C:7B:57:1F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl X509v3 Authority Key Identifier: keyid:4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer sbgp-ipAddrBlock: critical IPv4: 69.194.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ff:05:c2:1e:c4:b5:dd:83:e8:eb:f4:c8:96:77:88:bc:5e: c4:04:77:f2:5b:91:51:a6:45:63:53:f5:f1:c5:8f:ac:ce:b7: c4:60:9d:d9:cc:c1:7a:60:24:96:bb:6f:6a:01:13:72:80:40: f5:66:c1:86:cc:06:5c:86:50:03:41:b3:8f:2e:a1:fb:76:28: ca:9f:a5:2d:25:74:8b:e7:16:d6:6e:1b:70:7a:9b:e0:c1:3d: c6:59:5e:c6:a2:d4:e1:09:f1:11:ab:31:de:68:a9:54:54:4f: 2f:b1:b8:6e:2a:af:dd:7e:cd:62:e7:1d:f0:4a:b6:2d:51:fb: 76:e9:dd:33:90:3d:1a:41:f9:49:51:84:f4:c9:a1:3a:ae:33: b1:79:05:ba:87:81:3f:b9:cd:c1:0c:b2:6c:dd:02:ea:03:a3: af:f0:84:83:14:d0:6e:f5:3f:78:ca:43:28:2c:31:64:da:2d: 03:9b:86:27:5b:73:b4:05:e1:76:e9:fb:96:73:1c:6a:16:a4: 1c:f4:47:01:ff:c8:9a:cb:90:fc:a1:74:7c:70:00:57:fe:85: ec:ea:0e:67:92:b4:5c:39:11:bb:25:a9:b3:65:af:68:c3:87: ff:45:af:94:6d:50:f7:08:fa:c6:4a:72:cd:37:58:00:f9:76: 67:8c:40:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9U2kc6VqI5kumYswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5OGI2ZmYtOGE2ZC00MTM1LWIxMjctODBhNTVjMDkx OWRmMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjQ1MTA2YTktNGUwYi00MzQ4LTgwNjctNTlkMzk4ZTEwZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3BSSUJKLDGbXJWDrJPGA75sviryaQFenRUw PiNF0VQSTDZW6wXx6tlCaMV1cwop4DSfQULBSyoZAJD1vfTWzQMwME67hDB0OYYj nRcZgGfsZ47X1dn0HsvzNh3p8ZdR3c4JQVVqvI6hisndea/70bEzWcjRby9oGvCl ztwNSf8IyS+EnvazASGgGxbdvtmik91rNJJBmDhceTX8vQ7B6gz1rp/5S79vZcNV eiMRKQIDEjoDEjFnZl58gXcmvigKQonGPzR8OFR6/7BxYfzSlM2G0/K0c9mJA+vk kw+Zo8zW7o2XjxGBXvc3lMol7DNociQISooDdDoTc6OCilZlsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWpLOYYvfByGZmjFeIfrBx7Vx9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4 YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1NWMwOTE5ZGYvZTFjOTUxNjYtZTNmZS0z ZmFjLTkxMDktNTZhOGU0YjlmNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDI5OGI2ZmYtOGE2ZC00MTM1LWIx MjctODBhNTVjMDkxOWRmLzQyOThiNmZmLThhNmQtNDEzNS1iMTI3LTgwYTU1YzA5 MTlkZi5jcmwwHwYDVR0jBBgwFoAUSvxhLzvXMotl0gpuNJs/CWuEbzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80Mjk4YjZmZi04YTZkLTQxMzUtYjEyNy04MGE1 NWMwOTE5ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD/BcIexLXdg+jr9MiWd4i8XsQEd/JbkVGmRWNT9fHFj6zOt8RgndnM wXpgJJa7b2oBE3KAQPVmwYbMBlyGUANBs48uoft2KMqfpS0ldIvnFtZuG3B6m+DB PcZZXsai1OEJ8RGrMd5oqVRUTy+xuG4qr91+zWLnHfBKti1R+3bp3TOQPRpB+UlR hPTJoTquM7F5BbqHgT+5zcEMsmzdAuoDo6/whIMU0G71P3jKQygsMWTaLQObhidb c7QF4Xbp+5ZzHGoWpBz0RwH/yJrLkPyhdHxwAFf+hezqDmeStFw5EbslqbNlr2jD h/9Fr5RtUPcI+sZKcs03WAD5dmeMQB4= -----END CERTIFICATE-----Generated at Mon Apr 20 04:56:05 2026 by rpki-client