$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa File: 560928c0-5ebd-31b5-b3ee-2747aad927e5.roa (raw, json) Hash identifier: d45Kxk/t2ku3blzDNCDICUcpdHX67UxGou0y1h6q3IM= Subject key identifier: AB:EC:BC:8A:F6:B3:A5:31:55:96:D7:EE:85:BB:10:0F:54:32:CF:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF636D642D5C5779AEA5A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:36:d6:42:d5:c5:77:9a:ea:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=bf789b1c-afa1-4a8e-9302-e74df9c2385b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:5b:66:a9:b8:b4:8b:30:c8:31:c3:f0:67: 33:2f:98:e8:b5:6d:30:aa:9f:e5:b1:f9:1c:7e:de: 10:ab:6f:bd:65:76:f6:e0:fd:5a:0c:71:10:3a:f1: d0:d7:b7:33:77:9b:88:6c:46:64:b4:e1:f7:fd:38: cd:36:d9:2e:25:c0:d0:91:1f:34:10:92:24:50:ec: 53:d9:30:7a:6e:23:57:87:79:91:3d:80:ab:d6:3a: 5d:67:9b:6d:80:b4:40:b5:e7:de:be:e8:32:e5:a9: 85:c6:50:bc:6c:5c:c0:ff:28:b3:3d:24:fc:c0:55: 15:6d:60:78:8e:ac:12:f6:aa:a6:20:cd:c5:34:7e: d0:36:46:77:08:a5:28:a0:fb:73:f1:f8:87:7b:31: 26:d2:e0:77:b9:0f:41:10:7c:a2:6e:77:be:92:6a: 48:f7:8a:ed:bf:2e:c2:60:25:61:1e:ce:9f:09:ce: e4:c1:d5:d2:0d:51:c4:8b:f9:37:da:9b:48:ac:f0: 2f:0a:28:f8:56:38:11:cc:e2:4d:1d:4d:02:f3:16: a6:26:42:0d:d2:9b:ac:d8:3a:20:30:49:de:10:f5: e6:a9:20:16:22:3f:0e:03:7a:29:70:cd:60:d1:49: 44:cf:6d:c6:4c:a2:06:23:12:6f:6f:7c:8b:92:ff: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EC:BC:8A:F6:B3:A5:31:55:96:D7:EE:85:BB:10:0F:54:32:CF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:de:59:94:c5:38:f4:22:42:09:ad:a8:d6:6c:5a:39:cd:de: 19:0a:1c:06:a3:ba:de:7e:68:67:87:dd:d0:1e:5d:e0:16:b9: 06:c8:cc:57:87:e0:8a:d9:c2:a4:51:f9:0a:8d:45:8f:4e:c6: 02:4f:9c:49:9c:86:0c:bd:c1:c9:3d:e9:9a:f8:b1:da:e4:36: 7b:ee:d8:e2:68:b9:4a:87:5e:0f:70:9f:de:c3:05:7a:96:74: 04:04:5a:e9:5a:4e:57:3d:79:a9:68:cd:57:bf:81:90:65:79: 77:48:ee:3b:1c:9f:9e:47:33:7e:85:3f:81:4d:0a:26:87:1d: 36:4c:9f:84:e9:d3:03:5f:64:95:b1:fe:fc:94:7b:8b:43:09: 3f:13:72:95:75:f2:63:08:c1:cd:1e:f1:f6:32:44:52:5f:68: 35:fe:d2:ba:3b:d5:22:b8:c2:8a:98:b8:24:db:18:f8:e6:8e: 55:7c:bf:01:7d:66:10:a4:69:95:61:08:00:11:fa:ea:60:6a: 66:24:57:10:c1:88:cd:ba:c8:f9:31:a0:4a:b2:41:22:dd:85: a9:13:7d:c7:23:01:ec:25:80:ce:16:5b:88:1f:81:62:33:f8: 62:e4:5f:d5:98:6c:ad:3b:c4:ee:fc:ae:70:5e:fe:c0:82:37: 3f:75:ae:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9jbWQtXFd5rqWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmY3ODliMWMtYWZhMS00YThlLTkzMDItZTc0ZGY5YzIzODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjExbZqm4tIswyDHD8GczL5jotW0wqp/lsfkc ft4Qq2+9ZXb24P1aDHEQOvHQ17czd5uIbEZktOH3/TjNNtkuJcDQkR80EJIkUOxT 2TB6biNXh3mRPYCr1jpdZ5ttgLRAtefevugy5amFxlC8bFzA/yizPST8wFUVbWB4 jqwS9qqmIM3FNH7QNkZ3CKUooPtz8fiHezEm0uB3uQ9BEHyibne+kmpI94rtvy7C YCVhHs6fCc7kwdXSDVHEi/k32ptIrPAvCij4VjgRzOJNHU0C8xamJkIN0pus2Dog MEneEPXmqSAWIj8OA3opcM1g0UlEz23GTKIGIxJvb3yLkv/oTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvsvIr2s6UxVZbX7oW7EA9UMs9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYwOTI4YzAtNWViZC0z MWI1LWIzZWUtMjc0N2FhZDkyN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3eWZTFOPQiQgmtqNZsWjnN3hkKHAajut5+aGeH3dAeXeAWuQbIzFeH 4IrZwqRR+QqNRY9OxgJPnEmchgy9wck96Zr4sdrkNnvu2OJouUqHXg9wn97DBXqW dAQEWulaTlc9ealozVe/gZBleXdI7jscn55HM36FP4FNCiaHHTZMn4Tp0wNfZJWx /vyUe4tDCT8TcpV18mMIwc0e8fYyRFJfaDX+0ro71SK4woqYuCTbGPjmjlV8vwF9 ZhCkaZVhCAAR+upgamYkVxDBiM26yPkxoEqyQSLdhakTfccjAewlgM4WW4gfgWIz +GLkX9WYbK07xO78rnBe/sCCNz91rkE= -----END CERTIFICATE-----Generated at Tue Apr 21 22:03:59 2026 by rpki-client