$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559daa82-d479-31c4-aba2-ca420c91b35a.roa File: 559daa82-d479-31c4-aba2-ca420c91b35a.roa (raw, json) Hash identifier: NwdjI1HJrZ7+TDTKtATJFkoDC6r1EVIN44BNO8da5P8= Subject key identifier: 26:A1:E4:1E:94:55:34:DC:65:AA:DE:C6:BC:BC:C6:92:BE:3B:87:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3AEEC678A479332E985560 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559daa82-d479-31c4-aba2-ca420c91b35a.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 71.239.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:ee:c6:78:a4:79:33:2e:98:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=cb063fb7-2d02-4ae8-a933-83a2ad851a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:c7:47:07:c9:d3:26:cf:5e:a9:a6:a4:53: 87:63:65:95:f1:b3:6d:b2:68:f0:97:36:a1:e9:ab: 72:2c:67:19:8f:d7:35:c4:e9:48:d4:48:f4:d3:b7: d8:b9:5d:55:bb:fb:f7:be:ae:98:85:51:d2:60:77: b0:ca:f6:17:5d:69:13:35:06:d3:e5:b7:a8:87:63: 9d:89:98:5a:33:79:08:5c:9a:8c:a7:1b:f1:f5:28: b3:98:2b:f8:e2:bb:6b:43:dc:8c:48:6b:75:4e:40: a7:f0:74:f6:ab:41:82:ae:a5:52:11:5f:0b:4c:0f: 4a:b7:61:12:6f:51:97:f6:de:cc:7e:9a:ba:b4:0f: f1:83:25:6a:17:f9:7f:d0:9f:2a:a8:b9:64:5f:b8: 5e:33:a3:19:4f:4e:12:29:b9:6b:8b:c1:b2:6f:26: c8:f6:53:2c:63:23:ce:c3:14:aa:58:f5:c1:9c:14: 94:ab:d1:2f:be:77:03:a3:50:8c:81:4b:6a:ec:31: 3f:92:bc:75:32:06:88:40:fd:95:9c:e4:62:e0:10: 55:54:db:e5:cd:a2:ec:2a:d3:50:ff:ce:1b:9d:80: 16:c8:06:41:5d:d1:bf:a7:55:6f:0e:c8:6a:a9:c1: 26:b8:be:00:c7:dd:1f:4c:0c:f1:31:42:aa:f6:05: c5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A1:E4:1E:94:55:34:DC:65:AA:DE:C6:BC:BC:C6:92:BE:3B:87:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559daa82-d479-31c4-aba2-ca420c91b35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:68:49:19:43:36:50:5f:ac:5a:3c:a6:c9:d1:ab:be:75:40: 26:01:22:64:97:00:74:a0:9f:65:6f:de:2e:6e:96:43:65:60: e4:97:70:19:9f:2f:db:69:32:04:e8:6d:96:79:f2:5d:df:a1: 4e:b3:e0:01:85:72:04:54:2d:02:f6:71:a0:46:ca:4f:c7:65: d5:28:c0:25:4c:21:7c:bf:43:2a:f1:a4:c4:03:8e:83:40:a8: ab:10:a0:23:5a:ab:29:3d:15:da:12:04:6c:0c:e5:6b:72:ee: 4e:08:73:94:c6:bb:ae:df:1e:00:fd:a2:12:98:8d:d8:2e:ef: ce:d1:0d:d3:78:00:6c:3a:40:21:80:54:5c:ec:fb:55:af:f4: 10:17:11:73:70:f1:35:45:23:ee:d6:57:99:0b:08:26:2c:5d: de:5e:45:70:aa:f0:65:e7:df:e1:cc:e6:71:0b:73:0f:9e:cb: dd:61:a9:3e:64:0d:84:1c:2b:2b:e8:80:17:40:c7:59:f5:b1: 78:84:0a:39:57:01:23:5a:6b:30:72:35:60:57:59:bf:8c:49: 69:16:c3:c8:56:a4:90:bf:84:91:e4:e3:20:0d:7b:d7:45:24: cd:d6:ca:8c:d1:c0:4d:7c:73:c4:69:ea:f4:44:38:f2:73:8b: cd:3e:76:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOu7GeKR5My6YVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk Y2IwNjNmYjctMmQwMi00YWU4LWE5MzMtODNhMmFkODUxYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSLHRwfJ0ybPXqmmpFOHY2WV8bNtsmjwlzah 6atyLGcZj9c1xOlI1Ej007fYuV1Vu/v3vq6YhVHSYHewyvYXXWkTNQbT5beoh2Od iZhaM3kIXJqMpxvx9SizmCv44rtrQ9yMSGt1TkCn8HT2q0GCrqVSEV8LTA9Kt2ES b1GX9t7Mfpq6tA/xgyVqF/l/0J8qqLlkX7heM6MZT04SKblri8GybybI9lMsYyPO wxSqWPXBnBSUq9EvvncDo1CMgUtq7DE/krx1MgaIQP2VnORi4BBVVNvlzaLsKtNQ /84bnYAWyAZBXdG/p1VvDshqqcEmuL4Ax90fTAzxMUKq9gXFQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCah5B6UVTTcZarexry8xpK+O4dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU5ZGFhODItZDQ3OS0z MWM0LWFiYTItY2E0MjBjOTFiMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNoSRlDNlBfrFo8psnRq751QCYBImSXAHSgn2Vv3i5ulkNlYOSXcBmf L9tpMgTobZZ58l3foU6z4AGFcgRULQL2caBGyk/HZdUowCVMIXy/QyrxpMQDjoNA qKsQoCNaqyk9FdoSBGwM5Wty7k4Ic5TGu67fHgD9ohKYjdgu787RDdN4AGw6QCGA VFzs+1Wv9BAXEXNw8TVFI+7WV5kLCCYsXd5eRXCq8GXn3+HM5nELcw+ey91hqT5k DYQcKyvogBdAx1n1sXiECjlXASNaazByNWBXWb+MSWkWw8hWpJC/hJHk4yANe9dF JM3WyozRwE18c8Rp6vREOPJzi80+dpI= -----END CERTIFICATE-----Generated at Wed Jul 22 03:08:43 2026 by rpki-client