$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa File: 23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa (raw, json) Hash identifier: bC4MebJJJc1bQwoN5wa6G3upWrIpfwoC7O7MKXlEp5I= Subject key identifier: D8:80:67:85:8A:36:23:8C:57:29:D0:27:F7:FD:68:01:67:8E:82:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E614505F791C4611EF5E73F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 33287 IP address blocks: 71.225.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:05:f7:91:c4:61:1e:f5:e7:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=11053ae6-92f1-4810-b771-51199024fc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:a2:e3:fc:37:1c:b0:d0:95:0c:d9:99:3b: 27:52:81:77:3f:96:89:94:14:3d:0c:b3:9a:25:c1: c6:98:e8:87:0d:3d:66:3e:d9:6c:ed:a5:27:3d:d5: 43:54:f0:29:64:cc:9a:45:c5:c8:1f:3b:cb:59:76: 9a:c7:2a:5f:5f:6d:80:89:da:c4:62:fd:6a:88:a8: 5c:a9:81:79:31:0b:a4:9e:76:36:e8:b1:ef:10:b1: 89:4e:12:47:ec:61:c7:31:dd:d1:cc:51:9e:22:85: da:6b:69:fe:ed:c1:1e:1c:22:6e:21:c7:73:e9:5f: b7:59:bb:0b:2c:b8:e3:1c:de:ca:25:ba:87:cc:00: c9:1c:97:b0:25:bc:7f:c0:14:b9:a0:e3:14:ef:b0: 2f:d5:d2:8e:28:14:12:64:1f:cb:f5:ee:7b:dc:f7: 3c:fc:f9:5b:0a:81:48:52:03:89:44:0f:f4:ed:ed: 20:8c:38:02:0a:6c:b7:45:70:7b:d1:2c:51:56:a9: 43:08:19:e2:ed:ae:44:c9:41:2d:0d:56:5a:d6:5a: bb:35:32:d3:dd:31:c8:d2:7d:6e:0f:b5:51:ea:a8: 9b:3a:e1:e4:4d:02:97:a3:4a:bc:89:4e:7b:ea:62: d5:21:17:d5:6b:5b:56:ce:62:76:f9:a3:45:d9:07: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:80:67:85:8A:36:23:8C:57:29:D0:27:F7:FD:68:01:67:8E:82:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5c:55:fc:f0:e4:ab:19:df:86:d3:7a:9b:98:d4:0f:9f:cf: f4:ce:a1:a4:a7:9a:50:8c:c5:b3:3b:13:ec:5c:6c:99:91:ab: 9f:fe:f7:4e:90:be:e3:18:e3:3a:f3:d8:0e:67:f8:c5:4a:dd: 0d:50:0e:88:0e:bb:ed:d0:52:ac:27:f8:6f:de:1b:08:29:71: a2:bf:2a:17:73:d6:bc:4d:3d:c5:6d:cf:30:07:8e:c9:23:37: ab:f8:09:67:83:a0:d8:69:14:bc:75:c5:6a:76:88:00:0f:56: 97:73:82:fa:22:0a:74:b1:18:72:d7:58:60:a1:62:2b:40:5f: 55:95:c2:b9:d7:2d:fc:1d:bd:48:37:fd:fd:85:7e:68:6a:a1: af:b0:e0:c7:cb:61:7e:a9:3e:13:b3:6b:46:cd:a9:6c:ed:26: 41:e7:c8:48:c1:1d:86:98:56:25:69:33:38:e5:a1:93:40:8a: 03:67:13:b5:57:c7:3f:ac:6c:90:ae:93:78:a3:8e:74:28:c7: 04:c9:39:8b:ca:9c:b4:e1:95:f7:8c:70:79:b8:42:2d:bc:0c: 9d:46:00:4b:47:66:90:57:0f:eb:b5:da:1a:dc:56:79:17:0d: 29:75:76:c5:2b:06:c6:8f:4b:10:16:08:c7:7f:fc:65:fe:85: 42:95:94:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRQX3kcRhHvXnP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MTEwNTNhZTYtOTJmMS00ODEwLWI3NzEtNTExOTkwMjRmYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZei4/w3HLDQlQzZmTsnUoF3P5aJlBQ9DLOa JcHGmOiHDT1mPtls7aUnPdVDVPApZMyaRcXIHzvLWXaaxypfX22AidrEYv1qiKhc qYF5MQuknnY26LHvELGJThJH7GHHMd3RzFGeIoXaa2n+7cEeHCJuIcdz6V+3WbsL LLjjHN7KJbqHzADJHJewJbx/wBS5oOMU77Av1dKOKBQSZB/L9e573Pc8/PlbCoFI UgOJRA/07e0gjDgCCmy3RXB70SxRVqlDCBni7a5EyUEtDVZa1lq7NTLT3THI0n1u D7VR6qibOuHkTQKXo0q8iU576mLVIRfVa1tWzmJ2+aNF2Qcz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiAZ4WKNiOMVynQJ/f9aAFnjoInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNlN2ZiYjctNDNhNi0z ZDU4LTkwZGYtNWE1YjRhMTdjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxcVfzw5KsZ34bTepuY1A+fz/TOoaSnmlCMxbM7E+xcbJmRq5/+906Q vuMY4zrz2A5n+MVK3Q1QDogOu+3QUqwn+G/eGwgpcaK/Khdz1rxNPcVtzzAHjskj N6v4CWeDoNhpFLx1xWp2iAAPVpdzgvoiCnSxGHLXWGChYitAX1WVwrnXLfwdvUg3 /f2Ffmhqoa+w4MfLYX6pPhOza0bNqWztJkHnyEjBHYaYViVpMzjloZNAigNnE7VX xz+sbJCuk3ijjnQoxwTJOYvKnLThlfeMcHm4Qi28DJ1GAEtHZpBXD+u12hrcVnkX DSl1dsUrBsaPSxAWCMd//GX+hUKVlFY= -----END CERTIFICATE-----Generated at Wed Jul 22 21:41:46 2026 by rpki-client