$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa File: 60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa (raw, json) Hash identifier: Js1RYvt7EVcdIT9XdppFG/ESbWbKS65sG7C1nK8C068= Subject key identifier: 81:A1:57:3B:CE:3A:FB:6C:E7:84:C4:92:6E:4E:EF:08:9C:E1:3D:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3BF1291EDCA0DA489ED800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33287 IP address blocks: 71.225.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:f1:29:1e:dc:a0:da:48:9e:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=9bc45592-85fc-44be-9a95-875fe357696b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:9e:0d:68:da:d1:49:94:b4:1b:b1:88:33: 24:80:89:e0:74:a0:7e:55:a5:62:d3:c0:58:80:fe: f4:db:02:3f:7e:fd:9d:71:76:fa:b7:31:b8:2e:f5: 05:46:67:1c:a9:53:d1:99:c7:ed:5b:5b:fa:a0:d7: 72:83:8e:f9:02:6b:7d:6d:ef:b0:4a:07:cb:d7:10: 37:38:4c:62:77:37:f2:66:f5:03:bf:06:81:11:c0: 6a:24:54:74:ad:8b:85:75:20:80:ff:75:81:77:64: ad:91:0f:29:e3:5a:3d:66:21:5f:67:85:dc:46:68: 3d:81:7a:43:a5:47:c2:a4:c1:12:f2:fa:47:cd:4b: 9a:eb:02:1c:54:36:fb:78:d8:cb:7b:e2:b5:1a:50: 01:09:7e:a6:63:31:53:5b:34:e9:ca:de:aa:1f:d8: 59:ce:41:41:19:bf:00:06:72:f2:24:a1:b9:b8:e2: 1d:32:56:c1:27:58:df:4b:d8:67:48:d1:43:d3:3c: db:9c:65:3a:ba:7b:43:06:58:f2:7d:0e:a2:3e:ca: ee:f6:36:40:40:d0:bb:ac:f7:9c:93:95:56:c3:ba: b0:ff:ca:b1:26:98:4f:b8:81:8d:33:61:6f:10:29: bc:c9:bb:2b:b8:0f:72:5a:2e:0c:df:88:26:8d:eb: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A1:57:3B:CE:3A:FB:6C:E7:84:C4:92:6E:4E:EF:08:9C:E1:3D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9a:94:27:56:85:78:14:dc:57:51:c6:13:05:a8:18:49:56: ee:a0:ee:8d:f3:bd:17:bd:03:87:9a:87:be:b4:9f:4c:1b:11: fb:0e:a3:e6:28:3d:38:92:5a:13:04:e8:18:a8:15:fb:ae:2a: b0:59:d4:d6:6f:ce:62:27:8b:bf:c9:ca:f2:97:1b:a2:8c:70: d7:92:a1:d1:cd:a7:48:4f:df:f0:aa:11:0b:b2:52:04:36:7e: 54:11:96:ae:44:91:e9:2c:78:05:c2:cd:2f:49:8f:75:b6:5a: 79:b3:d6:cc:9c:fe:ab:0a:32:0d:81:00:87:58:fd:8d:0c:7b: 0a:90:57:80:40:43:3e:79:f5:5b:2b:1d:be:a9:78:a5:e1:0d: f3:e4:10:14:73:81:da:09:fd:a5:b0:d9:d5:a1:74:85:79:8e: b0:52:4a:94:43:6a:a5:28:3e:45:77:06:be:6b:71:f1:5a:8d: 82:5a:d6:a8:ee:f2:15:c9:d2:e3:20:36:fb:cc:0d:db:38:07: b1:76:cc:68:77:71:16:26:71:2a:3e:eb:ce:43:d6:d1:73:7f: 57:3b:0f:fd:a8:d5:f4:4d:cd:58:3d:94:be:30:36:3e:01:cc: aa:d3:bf:a3:cb:3a:37:f1:8d:bd:04:ff:47:65:06:a4:9a:d8: 18:38:22:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO/EpHtyg2kie2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OWJjNDU1OTItODVmYy00NGJlLTlhOTUtODc1ZmUzNTc2OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeGeDWja0UmUtBuxiDMkgIngdKB+VaVi08BY gP702wI/fv2dcXb6tzG4LvUFRmccqVPRmcftW1v6oNdyg475Amt9be+wSgfL1xA3 OExidzfyZvUDvwaBEcBqJFR0rYuFdSCA/3WBd2StkQ8p41o9ZiFfZ4XcRmg9gXpD pUfCpMES8vpHzUua6wIcVDb7eNjLe+K1GlABCX6mYzFTWzTpyt6qH9hZzkFBGb8A BnLyJKG5uOIdMlbBJ1jfS9hnSNFD0zzbnGU6untDBljyfQ6iPsru9jZAQNC7rPec k5VWw7qw/8qxJphPuIGNM2FvECm8ybsruA9yWi4M34gmjeuQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGhVzvOOvts54TEkm5O7wic4T3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBmOTZmMmItODRmZS0z MTJmLTg4MTktMGU3ZWQ2N2ExZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6alCdWhXgU3FdRxhMFqBhJVu6g7o3zvRe9A4eah760n0wbEfsOo+Yo PTiSWhME6BioFfuuKrBZ1NZvzmIni7/JyvKXG6KMcNeSodHNp0hP3/CqEQuyUgQ2 flQRlq5EkekseAXCzS9Jj3W2Wnmz1syc/qsKMg2BAIdY/Y0MewqQV4BAQz559Vsr Hb6peKXhDfPkEBRzgdoJ/aWw2dWhdIV5jrBSSpRDaqUoPkV3Br5rcfFajYJa1qju 8hXJ0uMgNvvMDds4B7F2zGh3cRYmcSo+685D1tFzf1c7D/2o1fRNzVg9lL4wNj4B zKrTv6PLOjfxjb0E/0dlBqSa2Bg4Ilk= -----END CERTIFICATE-----Generated at Wed Jul 22 21:45:48 2026 by rpki-client