$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d3d74e-6e71-39ea-ae52-9ef1bfe2ffc6.roa File: 33d3d74e-6e71-39ea-ae52-9ef1bfe2ffc6.roa (raw, json) Hash identifier: 3H2DCvy+FYFh8ZGEDlaWK2TT15GuG+fVrSfJdvd2RpA= Subject key identifier: 31:30:2E:2A:2F:9B:B5:02:D1:AF:5E:74:CA:EE:1A:15:60:F8:08:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E35FF3102486B5A0CED144680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d3d74e-6e71-39ea-ae52-9ef1bfe2ffc6.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33490 IP address blocks: 71.237.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:31:02:48:6b:5a:0c:ed:14:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=30d09f70-873b-4ea2-92e0-ef1472f48008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dd:ba:5e:32:61:45:a7:df:dd:0a:43:0c:52: 76:ea:c2:b8:16:05:a8:d5:2a:f2:41:ac:ad:16:b9: 54:1d:49:81:ff:8f:be:cb:da:9a:1d:4f:7f:80:c9: f9:58:a1:64:0d:18:dd:3b:b4:97:59:f8:23:22:38: 2e:1c:c5:1d:f8:62:c7:23:d3:0d:d8:fb:0e:70:6d: 11:79:2b:0e:5d:37:86:99:3f:50:0e:16:65:f9:6e: 35:3d:df:f7:23:7c:4a:60:54:0d:bf:6c:3c:15:6e: 4f:30:e8:55:ed:2b:53:d1:af:13:2b:87:52:37:70: d9:a7:ac:a9:5c:64:70:13:82:e0:1b:13:c3:a3:73: 05:7f:18:ad:87:a4:5d:67:0b:c4:f0:2f:46:1f:e0: d1:05:a0:3b:79:2f:78:03:3a:78:e8:6e:a2:07:dc: 91:08:d4:63:a5:48:5e:dd:eb:37:c0:65:b7:82:b9: f5:fc:c6:0c:88:80:dd:45:b1:08:80:8d:c7:e0:c7: 33:d4:66:8a:f6:1f:1c:f6:a0:d0:52:7e:71:85:52: 97:2a:d5:5a:be:cc:f9:80:a1:90:f6:ad:d8:0c:01: 9b:7b:25:b6:a5:de:57:ba:04:63:0e:ad:89:19:e3: 9e:fb:7f:8f:31:21:b1:57:b7:25:60:69:0f:f8:1b: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:30:2E:2A:2F:9B:B5:02:D1:AF:5E:74:CA:EE:1A:15:60:F8:08:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d3d74e-6e71-39ea-ae52-9ef1bfe2ffc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2c:24:73:94:94:c9:c9:35:ac:77:68:f7:42:27:46:ac:7a: b1:e3:b4:4f:f9:6b:de:09:5b:fc:4c:57:b3:a7:00:07:f6:26: 2f:7c:67:11:61:ce:97:dc:dd:bb:1e:b2:c4:2b:9b:09:70:6b: c0:d4:68:5d:49:55:f5:72:65:38:d0:dd:f4:33:cc:ed:5d:35: 92:23:cd:ba:dc:42:a0:02:3a:3a:9e:e7:66:a1:25:14:94:e9: 5d:52:55:ce:16:c0:4c:e0:f2:0c:73:e0:77:71:19:af:35:8d: b4:f9:c6:51:9f:6d:32:a1:1d:82:5c:b2:c8:de:ac:f0:42:fa: 58:be:b0:d4:73:8a:76:c2:7a:4c:8e:65:db:26:5c:f2:51:cc: e2:de:f6:bd:e5:d0:69:f5:c8:6c:fe:31:31:06:77:fd:83:d3: 42:c8:65:53:7c:53:da:87:99:91:4d:30:11:c7:28:a0:44:52: 06:76:f7:d0:bb:e2:9e:4d:0c:b2:bf:02:39:b4:b3:cc:90:83: 37:af:09:41:57:62:54:bf:d9:bf:ea:7c:4b:6e:d4:5b:37:af: 63:2d:08:f1:a9:2c:f8:e4:9e:42:b6:c1:b2:57:6e:fb:db:6a: cf:99:68:2c:80:14:69:d2:5a:44:db:95:5d:77:8b:c3:59:31: 94:fb:04:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/zECSGtaDO0URoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MzBkMDlmNzAtODczYi00ZWEyLTkyZTAtZWYxNDcyZjQ4MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht26XjJhRaff3QpDDFJ26sK4FgWo1SryQayt FrlUHUmB/4++y9qaHU9/gMn5WKFkDRjdO7SXWfgjIjguHMUd+GLHI9MN2PsOcG0R eSsOXTeGmT9QDhZl+W41Pd/3I3xKYFQNv2w8FW5PMOhV7StT0a8TK4dSN3DZp6yp XGRwE4LgGxPDo3MFfxith6RdZwvE8C9GH+DRBaA7eS94Azp46G6iB9yRCNRjpUhe 3es3wGW3grn1/MYMiIDdRbEIgI3H4Mcz1GaK9h8c9qDQUn5xhVKXKtVavsz5gKGQ 9q3YDAGbeyW2pd5XugRjDq2JGeOe+3+PMSGxV7clYGkP+BuNKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEwLiovm7UC0a9edMruGhVg+AiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNkM2Q3NGUtNmU3MS0z OWVhLWFlNTItOWVmMWJmZTJmZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAsJHOUlMnJNax3aPdCJ0aserHjtE/5a94JW/xMV7OnAAf2Ji98ZxFh zpfc3bsessQrmwlwa8DUaF1JVfVyZTjQ3fQzzO1dNZIjzbrcQqACOjqe52ahJRSU 6V1SVc4WwEzg8gxz4HdxGa81jbT5xlGfbTKhHYJcssjerPBC+li+sNRzinbCekyO ZdsmXPJRzOLe9r3l0Gn1yGz+MTEGd/2D00LIZVN8U9qHmZFNMBHHKKBEUgZ299C7 4p5NDLK/Ajm0s8yQgzevCUFXYlS/2b/qfEtu1Fs3r2MtCPGpLPjknkK2wbJXbvvb as+ZaCyAFGnSWkTblV13i8NZMZT7BBg= -----END CERTIFICATE-----Generated at Wed Jul 22 00:21:15 2026 by rpki-client