$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa File: 40a22eee-4031-3336-8b2d-96d68d61d8a9.roa (raw, json) Hash identifier: SRlHVjUJI9h26DnzqMEUmSSCjSPHuwRB8jzpmBDwt7s= Subject key identifier: D9:70:74:63:E3:DE:51:91:76:E4:2F:85:05:E0:C3:B1:56:1D:E1:B7 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584D8EF5605372144978364B6C00 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 35998 IP address blocks: 67.21.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:60:53:72:14:49:78:36:4b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=56a33a88-85e3-46ac-90fa-047116c8a6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:1c:5a:c3:f4:e1:be:6c:a4:00:1e:df:84: 9d:88:58:97:ba:5a:41:ce:b4:94:34:e1:62:d9:c2: 28:4f:f5:92:0b:6c:c1:1b:83:16:aa:e7:a2:84:0a: 35:2b:e9:66:11:22:3b:9e:fb:97:7f:e5:4c:4c:60: d7:4f:4f:9e:d7:1e:db:94:ff:a4:d4:e2:db:30:5c: ed:05:22:d0:f6:83:1b:bd:6c:43:bc:ce:7b:f8:43: b3:ac:5c:9b:c4:f9:c7:d2:c8:15:d4:3a:0f:f5:a7: 0c:68:f2:e5:85:57:fd:2a:1b:3c:5a:84:4d:a4:97: 19:e2:d5:36:bc:59:07:c8:e5:b7:7b:75:73:df:8c: 10:a9:f9:91:c0:6d:d5:f1:8d:3a:c6:b8:46:fa:23: b2:a0:4a:aa:54:d8:59:01:23:94:23:ec:0a:7e:07: 31:71:8a:35:1b:3d:21:de:6d:3d:3c:37:ae:9f:bf: c4:bb:f0:71:ae:b8:6d:c4:9c:84:f7:73:fc:09:81: 3b:80:f2:a9:78:3c:17:29:9a:e3:9b:b6:bf:3d:b8: c0:78:37:87:46:7b:65:f9:9c:e3:3d:b6:ba:f3:40: 7d:b4:bd:02:e7:02:65:c5:2e:01:38:da:d6:15:a1: eb:33:56:e4:d6:f6:6d:75:17:60:c4:85:eb:45:75: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:74:63:E3:DE:51:91:76:E4:2F:85:05:E0:C3:B1:56:1D:E1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f5:66:ba:45:22:a1:33:86:e8:04:56:f7:d2:a7:3c:94:10: 6f:09:9e:79:5a:76:ab:2f:2a:fc:22:40:d2:7a:4b:0d:49:18: 52:ae:96:f8:49:e6:44:d9:d3:e0:29:42:d4:ac:4a:65:36:e4: e2:8e:94:5c:05:53:12:43:f2:f1:a2:8b:95:ea:f2:62:1d:8a: aa:92:6d:22:11:14:35:e8:c0:49:e9:15:73:f3:c4:f4:c3:c8: 13:f0:3e:57:3e:0f:f3:c9:b6:d6:3c:9c:8b:d7:05:99:dc:3a: 9e:f7:6c:fa:65:00:f8:a5:69:55:89:dc:07:a8:55:fa:b2:15: cb:11:d1:ba:75:a7:fb:c3:32:c9:fa:e7:af:0c:5e:9d:94:32: 85:08:ef:a5:93:3a:e8:fd:28:f3:57:d4:b1:8c:85:bc:17:5c: bc:71:5c:81:1d:11:01:b8:13:8a:04:5f:76:fd:98:c4:af:b6: 87:72:6f:43:8b:9e:27:b0:0a:44:33:19:49:ff:eb:ac:58:63: d1:e8:c9:e7:a4:75:74:aa:b1:53:e2:97:20:5a:13:0c:b1:c6: ee:30:bb:ef:de:13:cf:93:88:d4:22:f7:78:7b:9a:78:b4:13: 66:d8:3c:fa:d6:95:c7:65:58:8b:1a:40:82:97:79:0f:67:e3: 06:fe:89:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WBTchRJeDZLbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTZhMzNhODgtODVlMy00NmFjLTkwZmEtMDQ3MTE2YzhhNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3scWsP04b5spAAe34SdiFiXulpBzrSUNOFi 2cIoT/WSC2zBG4MWqueihAo1K+lmESI7nvuXf+VMTGDXT0+e1x7blP+k1OLbMFzt BSLQ9oMbvWxDvM57+EOzrFybxPnH0sgV1DoP9acMaPLlhVf9Khs8WoRNpJcZ4tU2 vFkHyOW3e3Vz34wQqfmRwG3V8Y06xrhG+iOyoEqqVNhZASOUI+wKfgcxcYo1Gz0h 3m09PDeun7/Eu/BxrrhtxJyE93P8CYE7gPKpeDwXKZrjm7a/PbjAeDeHRntl+Zzj Pba680B9tL0C5wJlxS4BONrWFaHrM1bk1vZtdRdgxIXrRXXxsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlwdGPj3lGRduQvhQXgw7FWHeG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvNDBhMjJlZWUtNDAzMS0z MzM2LThiMmQtOTZkNjhkNjFkOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv1ZrpFIqEzhugEVvfSpzyUEG8JnnladqsvKvwiQNJ6Sw1JGFKulvhJ 5kTZ0+ApQtSsSmU25OKOlFwFUxJD8vGii5Xq8mIdiqqSbSIRFDXowEnpFXPzxPTD yBPwPlc+D/PJttY8nIvXBZncOp73bPplAPilaVWJ3AeoVfqyFcsR0bp1p/vDMsn6 568MXp2UMoUI76WTOuj9KPNX1LGMhbwXXLxxXIEdEQG4E4oEX3b9mMSvtodyb0OL niewCkQzGUn/66xYY9HoyeekdXSqsVPilyBaEwyxxu4wu+/eE8+TiNQi93h7mni0 E2bYPPrWlcdlWIsaQIKXeQ9n4wb+iWo= -----END CERTIFICATE-----Generated at Wed May 13 12:20:52 2026 by rpki-client