$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205c4623-c1f8-3842-9d90-7402d8a401a5.roa File: 205c4623-c1f8-3842-9d90-7402d8a401a5.roa (raw, json) Hash identifier: nYbzOtoofETFdjo7ZBSy5o+KWic3/0+L633eB3Cdw6U= Subject key identifier: B9:83:B1:53:26:AD:54:20:B6:D6:93:F7:CB:F2:F0:4D:B6:1D:5C:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79D520D07954CE0539580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205c4623-c1f8-3842-9d90-7402d8a401a5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9d:52:0d:07:95:4c:e0:53:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d9351e71-4634-4a95-a775-38cdf602fc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:16:d0:79:94:dc:99:fb:a5:c6:33:2c:a3: 4c:1d:98:3c:1b:72:a1:89:1d:37:a0:6e:5d:11:e6: 08:8b:52:f8:2a:aa:bb:9a:f8:2a:6d:db:9d:c5:3a: de:82:a9:0a:db:f1:cb:b0:4f:59:a9:f4:04:d4:6b: 50:73:4a:77:41:38:ea:40:02:3a:e5:e5:dd:f4:09: 36:61:2a:cd:26:3f:fa:16:e5:97:7c:1a:42:c1:6c: 28:6c:05:0a:9a:21:81:49:8b:5e:8a:30:fe:07:38: db:f3:11:f3:44:2b:29:bc:47:97:80:7e:81:68:b7: 82:1d:1a:14:e9:b2:f5:7b:b6:95:a7:61:63:0e:32: b3:b7:71:b0:f6:99:ba:67:8a:8f:73:5b:e3:13:c0: 0a:c1:c0:04:3f:b2:8a:9a:c5:6e:43:eb:b8:ae:68: 06:cc:bf:4d:43:b7:96:0c:2d:5c:ec:5b:f0:6f:f3: 9a:43:3b:c2:bf:e6:0d:da:3b:93:34:e7:16:f7:37: 91:59:43:8b:e0:a7:03:84:62:eb:fb:a1:1e:bd:9f: 58:fa:b6:f1:7b:1d:92:e1:db:43:81:e5:ca:fb:9f: b2:de:da:9f:f3:73:ec:80:d6:fb:dc:63:15:bb:fd: 32:25:dd:82:f9:26:c7:1a:42:1b:a0:d2:4e:45:d9: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:B1:53:26:AD:54:20:B6:D6:93:F7:CB:F2:F0:4D:B6:1D:5C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205c4623-c1f8-3842-9d90-7402d8a401a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:5d:e8:49:27:1e:16:7d:67:74:99:82:92:06:a8:5f:37:64: fc:32:30:78:eb:49:46:db:38:d6:03:17:b2:58:3a:45:41:7b: 98:ec:8c:74:88:30:0f:02:57:a9:2f:f5:e3:0e:00:43:a6:68: 72:7c:ad:c9:d2:5b:53:08:d5:5e:5f:9b:7c:45:4f:89:9a:91: 7e:03:ab:44:70:e3:71:b8:0a:2d:5e:a3:58:bc:98:74:f7:aa: e2:fa:17:ef:c7:42:cf:44:6b:f2:72:84:11:f8:47:a7:4c:95: ba:39:3f:01:73:9b:89:14:f7:ff:e2:c0:be:39:0e:70:35:7e: 47:cc:bb:37:d7:ab:57:11:f7:cd:19:cf:f2:b3:3f:24:da:4d: 37:b8:2b:ba:10:2e:65:3c:7e:78:c6:5e:8b:de:5a:2d:45:c3: 13:ba:64:7c:cb:7f:4c:1d:9a:3f:48:73:b4:f7:91:29:c9:88: 53:63:ae:51:f4:3b:da:15:01:85:66:13:c4:0b:17:a7:5f:26: e3:95:66:fa:c8:bb:26:8d:20:ba:35:b8:18:a2:ac:c3:89:9a: 65:d2:99:8a:45:8b:43:0b:7c:32:de:6a:c0:30:6f:00:c5:63: aa:11:f2:9d:95:b2:ca:6b:bd:0d:fb:78:05:11:e0:cb:9e:73: 57:72:8e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O951SDQeVTOBTlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDkzNTFlNzEtNDYzNC00YTk1LWE3NzUtMzhjZGY2MDJmYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt50W0HmU3Jn7pcYzLKNMHZg8G3KhiR03oG5d EeYIi1L4Kqq7mvgqbdudxTregqkK2/HLsE9ZqfQE1GtQc0p3QTjqQAI65eXd9Ak2 YSrNJj/6FuWXfBpCwWwobAUKmiGBSYteijD+Bzjb8xHzRCspvEeXgH6BaLeCHRoU 6bL1e7aVp2FjDjKzt3Gw9pm6Z4qPc1vjE8AKwcAEP7KKmsVuQ+u4rmgGzL9NQ7eW DC1c7Fvwb/OaQzvCv+YN2juTNOcW9zeRWUOL4KcDhGLr+6EevZ9Y+rbxex2S4dtD geXK+5+y3tqf83PsgNb73GMVu/0yJd2C+SbHGkIboNJORdmw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmDsVMmrVQgttaT98vy8E22HVzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA1YzQ2MjMtYzFmOC0z ODQyLTlkOTAtNzQwMmQ4YTQwMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR++IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJd6EknHhZ9Z3SZgpIGqF83ZPwyMHjrSUbbONYDF7JYOkVBe5jsjHSI MA8CV6kv9eMOAEOmaHJ8rcnSW1MI1V5fm3xFT4makX4Dq0Rw43G4Ci1eo1i8mHT3 quL6F+/HQs9Ea/JyhBH4R6dMlbo5PwFzm4kU9//iwL45DnA1fkfMuzfXq1cR980Z z/KzPyTaTTe4K7oQLmU8fnjGXoveWi1FwxO6ZHzLf0wdmj9Ic7T3kSnJiFNjrlH0 O9oVAYVmE8QLF6dfJuOVZvrIuyaNILo1uBiirMOJmmXSmYpFi0MLfDLeasAwbwDF Y6oR8p2VssprvQ37eAUR4Muec1dyjqU= -----END CERTIFICATE-----Generated at Wed Apr 22 00:54:51 2026 by rpki-client