$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28eb495d-65ef-3269-a19a-fb8a6502b2f2.roa File: 28eb495d-65ef-3269-a19a-fb8a6502b2f2.roa (raw, json) Hash identifier: tEgV3BJ96M/E4mXFuMRAy131bKQCz7n1c+CoS6SE/h4= Subject key identifier: F2:97:B7:F6:95:57:42:CF:AB:F1:13:53:BB:FE:6F:60:13:36:EB:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3C3CE9B21ABCE8C168D5E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28eb495d-65ef-3269-a19a-fb8a6502b2f2.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 71.239.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3c:3c:e9:b2:1a:bc:e8:c1:68:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=8913f6f4-ea34-497b-a1a5-95199eb0f263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:0e:82:3c:94:df:55:b1:7a:06:63:50:3e: b0:87:6a:bb:17:bd:5a:de:70:a4:e6:66:bb:1a:64: 2d:f9:a6:c4:88:d8:69:db:8b:73:1d:71:7b:49:fb: a6:ed:78:00:1a:ca:3d:fb:31:0a:ea:bb:2f:85:c8: df:db:26:9d:6d:64:00:62:e7:d3:c1:aa:86:02:67: 90:e6:3d:36:35:18:a0:f8:1c:89:f2:8e:10:fe:e2: 14:df:ba:f6:9e:92:17:83:e2:f0:91:fe:95:0f:a5: 79:b1:06:2c:c5:62:df:0c:63:b6:21:12:da:c5:07: 6e:9f:1c:ba:4e:09:3a:57:fd:64:91:0e:b7:28:21: 0e:30:e3:0e:b3:3d:85:11:f5:62:43:3b:46:35:24: 1c:77:da:da:0d:5b:ef:d1:6f:7f:9e:7d:d4:7c:e9: c8:3b:ec:fe:44:26:b6:68:66:29:a9:6f:92:b4:11: 25:cd:e8:80:87:2a:e4:01:4e:59:d3:1c:0f:30:53: d2:f2:e4:b7:d0:22:e6:48:ca:fa:a0:66:9a:e6:29: 89:cb:c4:cf:03:c8:97:92:0c:40:83:4f:5e:11:0d: 25:ca:6b:1f:7c:0e:9d:24:a3:da:47:cd:1b:d1:78: b2:83:d7:a5:3e:6c:0b:64:71:de:14:2f:bd:bb:2d: 4e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:B7:F6:95:57:42:CF:AB:F1:13:53:BB:FE:6F:60:13:36:EB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28eb495d-65ef-3269-a19a-fb8a6502b2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:bf:b5:bb:87:a9:62:cd:02:f3:2b:22:cb:ef:d4:2b:7a:59: 6a:b6:20:7d:a1:49:da:e5:21:fc:c8:46:a1:6e:21:e8:4b:1b: 9f:3a:3c:39:4b:b7:28:97:74:cc:81:06:51:59:09:45:93:d4: ce:f8:85:2b:8d:80:47:39:97:11:b5:7c:1b:8a:f4:63:b1:30: 98:ab:99:ad:3a:3d:78:92:7f:e3:18:71:f2:54:f5:8b:79:1d: 0f:ca:fc:8f:fe:6d:9a:4f:d6:70:43:2e:85:82:d6:59:b6:4e: a6:9a:0a:50:d6:0e:15:46:0d:09:2d:bf:4e:d6:a2:ee:06:2a: 1c:61:ed:eb:16:a1:78:15:f2:40:f0:28:92:21:19:c5:6a:cd: c6:46:51:31:53:d5:5a:ef:bf:1d:1c:fb:4e:4a:70:8d:01:86: 61:3e:45:ae:0a:4c:fb:c7:20:06:ea:d7:43:06:b5:68:06:50: 83:c7:44:fa:01:56:0d:28:d5:72:ac:72:92:b5:9d:eb:05:71: 85:d2:22:d2:61:81:d1:93:ae:cb:08:27:fa:93:58:e3:24:04: 2e:05:01:ff:7d:54:22:dd:b0:b2:5b:af:d2:46:80:46:49:d1: b8:95:45:4a:b6:05:b3:5b:18:89:09:19:98:1f:2f:85:6a:6e: 12:63:4b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPDzpshq86MFo1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ODkxM2Y2ZjQtZWEzNC00OTdiLWExYTUtOTUxOTllYjBmMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4OgjyU31WxegZjUD6wh2q7F71a3nCk5ma7 GmQt+abEiNhp24tzHXF7Sfum7XgAGso9+zEK6rsvhcjf2yadbWQAYufTwaqGAmeQ 5j02NRig+ByJ8o4Q/uIU37r2npIXg+Lwkf6VD6V5sQYsxWLfDGO2IRLaxQdunxy6 Tgk6V/1kkQ63KCEOMOMOsz2FEfViQztGNSQcd9raDVvv0W9/nn3UfOnIO+z+RCa2 aGYpqW+StBElzeiAhyrkAU5Z0xwPMFPS8uS30CLmSMr6oGaa5imJy8TPA8iXkgxA g09eEQ0lymsffA6dJKPaR80b0Xiyg9elPmwLZHHeFC+9uy1O3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKXt/aVV0LPq/ETU7v+b2ATNusaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhlYjQ5NWQtNjVlZi0z MjY5LWExOWEtZmI4YTY1MDJiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR++YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq/tbuHqWLNAvMrIsvv1Ct6WWq2IH2hSdrlIfzIRqFuIehLG586PDlL tyiXdMyBBlFZCUWT1M74hSuNgEc5lxG1fBuK9GOxMJirma06PXiSf+MYcfJU9Yt5 HQ/K/I/+bZpP1nBDLoWC1lm2TqaaClDWDhVGDQktv07Wou4GKhxh7esWoXgV8kDw KJIhGcVqzcZGUTFT1Vrvvx0c+05KcI0BhmE+Ra4KTPvHIAbq10MGtWgGUIPHRPoB Vg0o1XKscpK1nesFcYXSItJhgdGTrssIJ/qTWOMkBC4FAf99VCLdsLJbr9JGgEZJ 0biVRUq2BbNbGIkJGZgfL4VqbhJjSzo= -----END CERTIFICATE-----Generated at Wed Jul 22 00:13:21 2026 by rpki-client