$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53155f1a-55a5-395f-a563-4c85a39e37ea.roa File: 53155f1a-55a5-395f-a563-4c85a39e37ea.roa (raw, json) Hash identifier: plxNdRqNDTqtyjog7U+n8LNjUYHcMhxWFYzMBG5TuvA= Subject key identifier: 77:83:2B:9F:CC:10:98:4E:5E:9A:9E:C9:82:AD:51:12:35:FA:8F:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF752F8DECDE5EF282A9200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53155f1a-55a5-395f-a563-4c85a39e37ea.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 71.230.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:52:f8:de:cd:e5:ef:28:2a:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=451611df-d2e0-443e-ae2c-61441cbdb5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:5d:2c:e4:5a:09:bd:e5:87:49:08:59:ec: 10:d6:3a:c5:c9:ef:7f:94:c3:10:fb:97:de:67:e1: 6b:db:24:58:e4:60:9c:47:71:f1:02:23:54:da:68: 19:89:99:ae:90:f7:28:d4:1a:02:62:33:10:48:0b: 18:2d:15:4b:40:83:79:6f:7a:73:e3:42:e9:2e:22: 4c:50:0c:db:93:f8:76:2f:59:7e:75:f1:88:f3:90: 53:cb:8d:a3:42:f5:b8:20:27:1a:26:b0:9e:37:93: fb:2a:7f:90:b5:a7:c8:41:a6:d0:b1:86:ed:e4:55: ec:34:85:c4:27:8d:3e:6c:ed:da:49:81:10:da:6f: 3c:83:e9:b8:80:09:58:e2:ff:24:42:c9:85:ec:90: 73:59:a2:77:2c:6b:05:cf:24:4f:90:eb:20:f0:40: 8d:b0:6d:f8:90:56:0f:0e:f8:cd:46:2e:1d:d3:3d: 78:f2:e0:52:9f:e8:01:52:37:03:0b:1e:20:0d:0c: 34:68:28:06:39:c0:fb:29:db:8b:39:e4:f4:3a:c9: f1:df:87:56:c4:ea:50:c5:f3:1c:a1:ae:ce:0d:65: 67:62:e9:b8:26:4b:4c:d4:59:1b:7a:c4:60:7d:1d: 61:14:98:dd:39:dd:5e:70:da:ba:22:10:25:92:82: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:2B:9F:CC:10:98:4E:5E:9A:9E:C9:82:AD:51:12:35:FA:8F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53155f1a-55a5-395f-a563-4c85a39e37ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:54:d2:c9:6d:28:dc:c1:e0:4a:db:63:18:aa:d1:d3:64:c8: 64:66:0d:93:5f:41:86:1e:f7:0f:99:b5:c9:58:0a:84:24:69: d1:6d:1e:c9:ae:73:b8:47:cb:35:cc:8e:fb:1c:a3:44:0f:b9: 05:9d:1b:72:69:19:79:24:7b:65:3e:78:11:3d:5f:29:88:e6: be:ac:96:e8:d5:c3:38:8d:98:f0:cc:b4:eb:d7:f3:89:09:81: 2e:51:58:2f:1a:95:35:51:6d:24:ba:58:c2:d1:9c:1f:a1:9b: e2:ea:57:56:36:a1:0a:b5:fa:ba:51:85:61:ab:47:79:94:24: 32:be:75:d3:d0:91:67:04:4a:bc:cf:f2:f0:43:93:0d:7b:01: e3:e2:c0:3b:37:6f:12:51:bc:25:e5:73:98:e6:c7:96:49:52: ed:8b:70:64:80:1f:a1:bb:ef:d8:86:77:82:ed:1b:49:c6:0c: aa:d2:a4:b1:01:2a:a8:9f:5c:fd:8e:e3:16:36:f8:5c:c2:e1: 49:64:5c:82:30:a1:cd:f3:d9:bd:e0:fc:a1:42:63:ca:8e:52: b0:95:ce:3f:12:1b:c7:74:b9:06:a5:ac:84:02:de:30:b6:a0: f5:b1:e7:40:9a:1e:a4:3a:77:40:66:17:e2:d4:53:46:68:f2: 05:7a:e7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O91L43s3l7ygqkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDUxNjExZGYtZDJlMC00NDNlLWFlMmMtNjE0NDFjYmRiNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuJdLORaCb3lh0kIWewQ1jrFye9/lMMQ+5fe Z+Fr2yRY5GCcR3HxAiNU2mgZiZmukPco1BoCYjMQSAsYLRVLQIN5b3pz40LpLiJM UAzbk/h2L1l+dfGI85BTy42jQvW4ICcaJrCeN5P7Kn+QtafIQabQsYbt5FXsNIXE J40+bO3aSYEQ2m88g+m4gAlY4v8kQsmF7JBzWaJ3LGsFzyRPkOsg8ECNsG34kFYP DvjNRi4d0z148uBSn+gBUjcDCx4gDQw0aCgGOcD7KduLOeT0Osnx34dWxOpQxfMc oa7ODWVnYum4JktM1FkbesRgfR1hFJjdOd1ecNq6IhAlkoLoUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeDK5/MEJhOXpqeyYKtURI1+o83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTMxNTVmMWEtNTVhNS0z OTVmLWE1NjMtNGM4NWEzOWUzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRU0sltKNzB4ErbYxiq0dNkyGRmDZNfQYYe9w+ZtclYCoQkadFtHsmu c7hHyzXMjvsco0QPuQWdG3JpGXkke2U+eBE9XymI5r6slujVwziNmPDMtOvX84kJ gS5RWC8alTVRbSS6WMLRnB+hm+LqV1Y2oQq1+rpRhWGrR3mUJDK+ddPQkWcESrzP 8vBDkw17AePiwDs3bxJRvCXlc5jmx5ZJUu2LcGSAH6G779iGd4LtG0nGDKrSpLEB KqifXP2O4xY2+FzC4UlkXIIwoc3z2b3g/KFCY8qOUrCVzj8SG8d0uQalrIQC3jC2 oPWx50CaHqQ6d0BmF+LUU0Zo8gV65wM= -----END CERTIFICATE-----Generated at Tue Apr 21 22:00:15 2026 by rpki-client