$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/789ce8bf-aea6-3781-9416-080c3b036065.roa File: 789ce8bf-aea6-3781-9416-080c3b036065.roa (raw, json) Hash identifier: ccq8yqMUHFxMhSnzswqSNR70pfXQKGjj7ayUycxJRRs= Subject key identifier: 13:1C:C3:63:B0:54:8F:1D:87:56:11:D0:4C:22:23:B9:59:0C:76:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF752104EB9882AB80DCC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/789ce8bf-aea6-3781-9416-080c3b036065.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 71.225.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:52:10:4e:b9:88:2a:b8:0d:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=04a370b9-3ebe-48f0-ad3a-9e1a74815c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:87:a4:62:86:07:a7:c7:ee:a2:c8:56:64: 14:3d:f3:37:02:e6:db:44:19:ad:43:51:27:71:51: 55:46:20:ec:8b:43:4e:2f:e2:60:a7:0c:00:8d:8d: 15:bc:c3:1a:31:80:bf:6d:c5:52:cf:69:c7:e9:00: dc:96:d3:0c:a2:76:95:db:28:c6:9c:f8:50:7a:23: 38:a8:6c:b4:bd:24:f4:32:cf:ab:2e:31:38:37:c0: 4e:31:ca:d9:d5:e9:da:cb:16:e2:c8:48:15:dc:56: ac:c9:ba:77:a5:b8:11:25:90:84:f1:c1:31:65:05: 74:60:b0:62:a5:4c:a0:ce:28:d4:de:69:53:cb:57: 27:91:dd:d6:f9:fb:2f:53:79:a9:04:9d:3a:42:0a: eb:05:51:49:56:cc:aa:52:3a:57:9c:57:8f:24:84: 0d:ad:1e:b9:4d:a0:eb:dc:03:1c:0c:8b:b5:dd:a5: 70:69:42:96:7a:62:f0:8d:86:23:32:5d:aa:33:96: 5a:07:0c:72:2a:04:e0:bd:d4:8f:5d:d6:83:3a:e8: 00:91:0e:ba:eb:9a:1f:5a:c3:c6:eb:cd:da:a6:03: 76:35:ed:fe:86:c0:11:cf:7f:e8:d5:94:2b:cf:bc: 55:b7:0b:d8:04:d8:18:e6:55:e9:0b:13:ba:2a:c8: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:C3:63:B0:54:8F:1D:87:56:11:D0:4C:22:23:B9:59:0C:76:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/789ce8bf-aea6-3781-9416-080c3b036065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ab:a8:3f:b3:5d:d7:72:53:73:95:8b:02:02:7b:c4:5f:59: df:7c:69:93:da:f9:55:bd:db:80:2d:8b:5d:79:59:a4:08:a2: 93:8b:90:f6:db:ad:6d:84:2a:bd:84:99:d2:f8:96:8a:47:35: 1d:84:4e:d0:af:ba:37:ad:1b:20:8b:4c:f2:98:fa:68:da:8c: b3:ea:c2:08:8f:67:d6:87:bb:35:13:6c:e0:eb:de:24:4d:6a: b7:5a:9b:8f:3f:94:bb:30:a4:6b:6d:c5:32:44:86:1b:53:10: 9f:1d:b0:93:c7:fd:6d:40:7f:92:d2:54:81:cb:52:dc:1e:27: 95:6e:b4:b2:c1:f7:70:44:67:71:66:7c:48:8f:e1:ba:4d:ed: 1c:55:dd:97:fd:89:95:74:3a:9b:5f:ad:62:17:b7:02:d9:6f: f7:2b:6b:39:51:f6:fe:82:8f:02:1d:40:6b:ce:7a:c5:be:4e: 18:5b:75:7d:38:44:15:fa:90:7b:8c:fa:33:82:65:6c:87:34: a6:42:ac:06:22:eb:99:6e:48:b1:2d:a5:f0:5d:4d:94:d8:94: 60:7c:91:bd:02:ed:0a:ee:17:1d:c8:58:ee:10:e5:a6:f2:90: 10:fe:62:62:6c:f4:97:bc:88:76:22:39:1a:48:f6:1a:33:28: 44:b0:c8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O91IQTrmIKrgNzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDRhMzcwYjktM2ViZS00OGYwLWFkM2EtOWUxYTc0ODE1YzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUSHpGKGB6fH7qLIVmQUPfM3AubbRBmtQ1En cVFVRiDsi0NOL+JgpwwAjY0VvMMaMYC/bcVSz2nH6QDcltMMonaV2yjGnPhQeiM4 qGy0vST0Ms+rLjE4N8BOMcrZ1enayxbiyEgV3Fasybp3pbgRJZCE8cExZQV0YLBi pUygzijU3mlTy1cnkd3W+fsvU3mpBJ06QgrrBVFJVsyqUjpXnFePJIQNrR65TaDr 3AMcDIu13aVwaUKWemLwjYYjMl2qM5ZaBwxyKgTgvdSPXdaDOugAkQ6665ofWsPG 683apgN2Ne3+hsARz3/o1ZQrz7xVtwvYBNgY5lXpCxO6Ksi7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMcw2OwVI8dh1YR0EwiI7lZDHalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzg5Y2U4YmYtYWVhNi0z NzgxLTk0MTYtMDgwYzNiMDM2MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMarqD+zXddyU3OViwICe8RfWd98aZPa+VW924Ati115WaQIopOLkPbb rW2EKr2EmdL4lopHNR2ETtCvujetGyCLTPKY+mjajLPqwgiPZ9aHuzUTbODr3iRN ardam48/lLswpGttxTJEhhtTEJ8dsJPH/W1Af5LSVIHLUtweJ5VutLLB93BEZ3Fm fEiP4bpN7RxV3Zf9iZV0OptfrWIXtwLZb/crazlR9v6CjwIdQGvOesW+ThhbdX04 RBX6kHuM+jOCZWyHNKZCrAYi65luSLEtpfBdTZTYlGB8kb0C7QruFx3IWO4Q5aby kBD+YmJs9Je8iHYiORpI9hozKESwyC4= -----END CERTIFICATE-----Generated at Tue Apr 21 22:07:45 2026 by rpki-client