$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa File: 3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa (raw, json) Hash identifier: 6a1FshRY8aGKTELOS4o5dneddF86+D6InR4k+pneaRw= Subject key identifier: 14:81:89:97:49:EE:8B:10:70:17:9D:96:52:9F:7B:52:F1:78:94:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79F3F52659F8034094FA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.57.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9f:3f:52:65:9f:80:34:09:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=97525eaf-56a3-44a7-9ea5-15c48db53b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:0b:fb:75:70:d0:50:26:d1:ab:fd:c7:ba: 4d:65:1f:48:ef:11:bb:8f:61:6a:90:55:90:28:89: 30:f9:be:a9:fc:fb:33:91:77:13:92:a5:c1:18:cc: 6d:c4:ec:00:11:7c:9d:de:20:8d:1c:6a:7b:23:d2: ff:da:ad:dd:6c:46:e8:39:2c:d0:8e:c1:7f:8b:e8: be:a3:ff:09:b3:0b:8e:3b:87:62:e6:1f:3d:c7:96: 47:f8:e4:e6:27:64:9d:5a:9c:c7:67:1b:1a:04:8b: bc:f8:ec:79:68:ef:f6:6d:81:ba:df:27:66:9d:a7: 3a:c6:64:7f:7c:9d:f8:97:1f:63:1e:fb:4f:8d:60: 64:3e:cd:69:7a:ad:50:51:6b:da:53:63:a2:d8:ad: 3a:68:02:2a:b0:66:a2:bd:e8:d7:2b:56:5a:e9:b2: 70:58:5e:38:ac:77:2b:6f:c1:30:10:f6:90:fc:41: b1:c3:e7:d8:e5:04:bb:95:f7:7d:81:e0:a8:aa:9a: 07:8b:5a:60:3a:ca:5a:6e:b7:5a:49:f8:11:b1:d1: c5:75:75:01:e2:98:10:0a:ea:b7:26:8f:e1:fb:40: 02:72:b4:17:6c:c3:41:cf:2c:58:a0:68:c9:6e:e7: 77:ea:39:fb:ae:4a:cd:70:72:50:37:c4:97:78:f9: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:81:89:97:49:EE:8B:10:70:17:9D:96:52:9F:7B:52:F1:78:94:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3981c5f8-c9e4-3891-9cb6-18d8c2c8e686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:70:2d:7d:ec:e4:fc:e1:76:4c:0b:08:7e:2c:19:8c:55:2a: 56:13:28:f9:58:2d:34:7f:ee:29:6a:10:a5:e6:41:c9:c4:fc: f6:94:f2:f0:32:8b:db:fa:22:16:0e:39:9d:ab:98:78:e7:4b: 94:94:93:4d:49:11:28:36:0e:5e:ee:1e:19:1b:91:a3:ba:6f: 67:c0:15:4d:a2:72:0c:a5:d8:08:1b:64:1b:41:25:c9:b1:37: a1:a9:73:73:77:14:3c:21:71:a5:f7:dd:71:e6:14:04:5a:03: 7e:dd:fe:ef:4e:d6:5e:dc:b8:6f:5d:0d:a8:7b:94:47:00:74: 6a:91:1b:80:af:e1:64:86:a8:fc:61:0c:f5:cd:d0:83:e4:7b: ad:9b:cd:c9:50:8c:3e:8f:dd:ab:94:b0:c0:88:8c:2e:76:8c: b7:81:a1:c6:e1:5a:a7:98:ad:5b:d2:7d:d7:70:a7:9a:88:14: ae:67:db:d5:b5:7a:75:95:af:be:c1:31:a5:7e:46:dd:61:ee: 35:de:6f:be:f6:79:af:1b:40:a4:32:b4:16:e6:82:79:b5:a3: 2f:f8:13:1f:43:08:58:86:1f:7d:de:6f:4a:b9:ce:0a:ee:0b: a5:43:b1:a5:11:79:76:11:91:02:7e:00:9a:20:32:68:fa:72: ee:04:d1:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O958/UmWfgDQJT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTc1MjVlYWYtNTZhMy00NGE3LTllYTUtMTVjNDhkYjUzYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPUL+3Vw0FAm0av9x7pNZR9I7xG7j2FqkFWQ KIkw+b6p/PszkXcTkqXBGMxtxOwAEXyd3iCNHGp7I9L/2q3dbEboOSzQjsF/i+i+ o/8JswuOO4di5h89x5ZH+OTmJ2SdWpzHZxsaBIu8+Ox5aO/2bYG63ydmnac6xmR/ fJ34lx9jHvtPjWBkPs1peq1QUWvaU2Oi2K06aAIqsGaivejXK1Za6bJwWF44rHcr b8EwEPaQ/EGxw+fY5QS7lfd9geCoqpoHi1pgOspabrdaSfgRsdHFdXUB4pgQCuq3 Jo/h+0ACcrQXbMNBzyxYoGjJbud36jn7rkrNcHJQN8SXePlefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSBiZdJ7osQcBedllKfe1LxeJRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4MWM1ZjgtYzllNC0z ODkxLTljYjYtMThkOGMyYzhlNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBwLX3s5PzhdkwLCH4sGYxVKlYTKPlYLTR/7ilqEKXmQcnE/PaU8vAy i9v6IhYOOZ2rmHjnS5SUk01JESg2Dl7uHhkbkaO6b2fAFU2icgyl2AgbZBtBJcmx N6Gpc3N3FDwhcaX33XHmFARaA37d/u9O1l7cuG9dDah7lEcAdGqRG4Cv4WSGqPxh DPXN0IPke62bzclQjD6P3auUsMCIjC52jLeBocbhWqeYrVvSfddwp5qIFK5n29W1 enWVr77BMaV+Rt1h7jXeb772ea8bQKQytBbmgnm1oy/4Ex9DCFiGH33eb0q5zgru C6VDsaUReXYRkQJ+AJogMmj6cu4E0d8= -----END CERTIFICATE-----Generated at Tue Apr 21 19:20:00 2026 by rpki-client