$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d1b26d1-80de-3ed9-805e-7a8f862b2f7e.roa File: 4d1b26d1-80de-3ed9-805e-7a8f862b2f7e.roa (raw, json) Hash identifier: oBp6hxY9R+OfQMvmYK3zcjH79XLOT6krQbxG4Y3sc6o= Subject key identifier: AC:BF:40:4C:8E:2F:74:51:59:F2:B3:D2:88:5A:4A:CB:AB:BC:18:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3BF026885B9ED9CCE4A180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d1b26d1-80de-3ed9-805e-7a8f862b2f7e.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33287 IP address blocks: 71.225.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:f0:26:88:5b:9e:d9:cc:e4:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=668c42f7-1c18-4335-a25a-9779b71109e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:41:a5:74:db:08:c0:71:ea:80:d9:c0:91: 2b:75:f9:b1:f6:b0:d7:7b:6a:ce:ae:d9:1d:27:f3: 75:09:55:93:43:12:c4:d4:80:fa:6a:3a:ea:c5:21: fd:42:d4:95:78:14:f4:62:c8:b8:c9:b7:99:41:95: 16:0b:eb:93:ca:c1:cd:40:7a:e3:9c:e9:9f:1c:50: a9:46:4e:bf:a5:3f:cd:30:05:04:57:b6:2a:b9:43: a8:47:5a:c2:87:ae:2a:68:f7:36:23:3c:3c:7c:b3: 02:bc:30:5e:28:2c:cd:66:3e:2e:03:be:ff:5d:a0: b1:69:33:58:93:ae:46:8f:e7:9d:4b:9e:90:c6:23: b7:be:2f:9f:b1:cd:bc:4a:92:4e:df:69:5e:f7:8b: 3e:df:62:1b:17:8f:c4:42:7c:cb:33:29:a9:5f:2d: f3:c8:2e:08:3a:06:a5:b9:fb:5d:21:07:0d:fd:74: 34:4d:40:35:a4:75:30:b3:18:11:58:ea:4d:a1:fd: fa:80:80:52:75:15:dd:21:c9:d8:d2:1b:fa:b4:bc: 75:6e:1d:93:7a:eb:e1:f2:01:b7:86:f4:26:38:83: c2:ad:33:8a:8f:c0:ec:ed:25:3c:57:50:8a:7d:bc: af:a5:6d:cd:1a:c3:25:35:34:b1:5e:3b:6b:b1:eb: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:40:4C:8E:2F:74:51:59:F2:B3:D2:88:5A:4A:CB:AB:BC:18:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d1b26d1-80de-3ed9-805e-7a8f862b2f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a5:30:5a:03:cd:b3:dd:88:06:5b:9d:1f:68:bd:e6:86:a6: 6d:1f:37:bb:a6:98:34:55:be:b8:0d:f0:2c:68:e4:9f:3b:87: 17:a3:4d:85:05:cb:52:b8:f7:67:b2:19:fe:9c:f1:39:0f:27: 0a:90:5f:05:89:a1:bf:cb:fe:27:dc:7e:24:b0:46:ca:b4:7f: ac:13:19:90:8d:de:39:65:7f:94:43:7e:15:29:b3:35:39:5d: 6e:14:78:38:bf:63:1b:d0:6c:28:27:30:c4:f6:6d:56:90:92: 39:23:16:0d:3d:10:5d:57:8d:cf:98:61:78:ef:cf:64:ba:57: 25:53:a2:17:d3:49:98:a3:e8:5c:70:7a:54:3d:93:c1:ae:01: b3:3f:68:d8:81:4b:e9:0b:4a:39:0d:94:39:7c:7f:c9:e0:f5: c2:b3:17:55:f8:cb:b7:6e:9c:61:d0:a9:01:8e:1c:6d:35:3d: e0:3e:05:07:64:45:64:c0:1e:02:65:fe:e3:1d:12:cc:a2:70: 5a:81:0d:a9:f1:99:09:7c:ad:8e:4b:5b:3f:84:39:40:28:63: f5:29:2c:08:df:f3:40:1c:c4:fa:df:72:07:af:11:02:dc:4f: 05:60:60:8c:b3:44:c8:9c:f1:17:9c:8e:25:fc:32:bc:8e:30: 2b:42:ca:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO/AmiFue2czkoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NjY4YzQyZjctMWMxOC00MzM1LWEyNWEtOTc3OWI3MTEwOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwdBpXTbCMBx6oDZwJErdfmx9rDXe2rOrtkd J/N1CVWTQxLE1ID6ajrqxSH9QtSVeBT0Ysi4ybeZQZUWC+uTysHNQHrjnOmfHFCp Rk6/pT/NMAUEV7YquUOoR1rCh64qaPc2Izw8fLMCvDBeKCzNZj4uA77/XaCxaTNY k65Gj+edS56QxiO3vi+fsc28SpJO32le94s+32IbF4/EQnzLMympXy3zyC4IOgal uftdIQcN/XQ0TUA1pHUwsxgRWOpNof36gIBSdRXdIcnY0hv6tLx1bh2Teuvh8gG3 hvQmOIPCrTOKj8Ds7SU8V1CKfbyvpW3NGsMlNTSxXjtrsevRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy/QEyOL3RRWfKz0ohaSsurvBhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQxYjI2ZDEtODBkZS0z ZWQ5LTgwNWUtN2E4Zjg2MmIyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGlMFoDzbPdiAZbnR9oveaGpm0fN7ummDRVvrgN8Cxo5J87hxejTYUF y1K492eyGf6c8TkPJwqQXwWJob/L/ifcfiSwRsq0f6wTGZCN3jllf5RDfhUpszU5 XW4UeDi/YxvQbCgnMMT2bVaQkjkjFg09EF1Xjc+YYXjvz2S6VyVTohfTSZij6Fxw elQ9k8GuAbM/aNiBS+kLSjkNlDl8f8ng9cKzF1X4y7dunGHQqQGOHG01PeA+BQdk RWTAHgJl/uMdEsyicFqBDanxmQl8rY5LWz+EOUAoY/UpLAjf80AcxPrfcgevEQLc TwVgYIyzRMic8RecjiX8MryOMCtCylk= -----END CERTIFICATE-----Generated at Wed Jul 22 21:40:36 2026 by rpki-client