$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa File: aeb322da-5bb5-3229-af8d-91ef5f48781d.roa (raw, json) Hash identifier: g9gdGmkGNwKSu2E+JymxVWvs/GAodOeGXTHTybUDVHg= Subject key identifier: 2E:71:E0:35:FE:82:3C:E5:6F:8D:A6:2C:73:D6:7D:DE:53:0B:8A:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79B2AB91F5BBEB13A8880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.201.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9b:2a:b9:1f:5b:be:b1:3a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=91a99f01-0506-4d35-84de-81b094f48489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:e0:69:97:42:87:60:9f:a1:80:eb:66:02: 67:e6:23:1a:23:50:bb:c0:75:8d:d7:61:b2:44:8e: 97:ea:91:95:08:56:ae:41:1a:ff:06:a9:38:de:f7: 3a:d6:fc:b4:84:9b:bd:58:d6:6c:8a:ec:e9:84:84: 8b:6e:a6:94:86:52:5c:56:71:10:b8:d7:82:7c:21: d0:82:a0:4d:e6:c5:59:cd:53:18:cd:0a:bb:35:02: e3:ea:df:4d:31:56:52:b4:05:64:c9:c6:75:1c:47: df:12:03:19:07:a9:d4:d7:32:72:60:e1:fc:01:dc: be:41:7a:a5:7c:78:97:f2:af:cf:4c:c3:a9:fc:92: 42:0e:68:0e:37:b2:bd:df:ef:b6:5b:eb:87:5e:d4: d3:0c:bd:12:97:16:af:b0:89:11:1a:04:e2:4a:8f: e7:e3:e2:be:ec:92:83:58:27:03:22:f3:34:20:3e: 2d:8c:7d:5e:68:13:31:ea:fd:4f:3a:51:88:72:f7: c5:ae:78:64:da:40:ca:0c:83:f5:f5:22:ac:cf:b4: 18:f8:63:65:cb:42:30:b8:21:46:12:c4:65:fe:03: 06:bd:a9:fb:6b:a1:23:4d:8d:e1:54:2d:80:28:cc: 39:dd:d2:6e:6d:a5:cd:e5:a6:87:1d:e0:6e:f2:2b: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:E0:35:FE:82:3C:E5:6F:8D:A6:2C:73:D6:7D:DE:53:0B:8A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e4:c1:65:af:3a:7a:84:47:27:5e:19:44:d2:70:13:73:81: f5:76:d6:1c:20:de:8f:2e:7e:12:fc:4a:14:a7:69:2f:54:84: 70:4b:08:3e:71:87:59:cf:98:e4:cb:77:8b:ab:9a:1d:a5:27: e8:7e:44:f1:eb:d9:3a:4a:b4:01:b1:24:83:3f:7e:1a:70:45: b5:ac:09:08:d0:55:df:c8:08:5a:7b:cf:84:62:b5:3c:c7:78: ab:2f:ae:d1:aa:6c:15:6c:d3:3a:50:44:d8:48:53:be:bb:84: eb:d5:5d:73:5a:1b:ec:46:ea:a8:32:63:73:10:06:61:31:75: 8e:0c:3a:e5:73:26:fc:d7:82:b6:bb:7d:c6:42:43:7b:71:f4: 05:49:24:68:c2:29:ad:ad:0d:2e:e7:35:98:d0:25:54:26:0e: f9:cd:10:6e:22:d0:28:e2:0f:b5:95:62:8b:16:3a:66:b9:29: 76:6f:be:a7:38:d5:fb:3e:c3:79:d0:7f:af:19:e4:92:84:b0: bf:45:dc:8c:be:11:99:4c:aa:f1:19:ca:d1:09:41:a5:ac:33: aa:00:f7:2c:dc:c5:b5:30:85:33:5d:45:1b:a5:b6:8f:03:ed: 3c:29:e4:5a:32:eb:c8:7d:4a:1f:7f:ba:43:3f:0a:03:06:d0: d1:e6:2a:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O95squR9bvrE6iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTFhOTlmMDEtMDUwNi00ZDM1LTg0ZGUtODFiMDk0ZjQ4NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojrgaZdCh2CfoYDrZgJn5iMaI1C7wHWN12Gy RI6X6pGVCFauQRr/Bqk43vc61vy0hJu9WNZsiuzphISLbqaUhlJcVnEQuNeCfCHQ gqBN5sVZzVMYzQq7NQLj6t9NMVZStAVkycZ1HEffEgMZB6nU1zJyYOH8Ady+QXql fHiX8q/PTMOp/JJCDmgON7K93++2W+uHXtTTDL0SlxavsIkRGgTiSo/n4+K+7JKD WCcDIvM0ID4tjH1eaBMx6v1POlGIcvfFrnhk2kDKDIP19SKsz7QY+GNly0IwuCFG EsRl/gMGvan7a6EjTY3hVC2AKMw53dJubaXN5aaHHeBu8isRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5x4DX+gjzlb42mLHPWfd5TC4qVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWViMzIyZGEtNWJiNS0z MjI5LWFmOGQtOTFlZjVmNDg3ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8mcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/kwWWvOnqERydeGUTScBNzgfV21hwg3o8ufhL8ShSnaS9UhHBLCD5x h1nPmOTLd4urmh2lJ+h+RPHr2TpKtAGxJIM/fhpwRbWsCQjQVd/ICFp7z4RitTzH eKsvrtGqbBVs0zpQRNhIU767hOvVXXNaG+xG6qgyY3MQBmExdY4MOuVzJvzXgra7 fcZCQ3tx9AVJJGjCKa2tDS7nNZjQJVQmDvnNEG4i0CjiD7WVYosWOma5KXZvvqc4 1fs+w3nQf68Z5JKEsL9F3Iy+EZlMqvEZytEJQaWsM6oA9yzcxbUwhTNdRRulto8D 7Twp5Foy68h9Sh9/ukM/CgMG0NHmKr8= -----END CERTIFICATE-----Generated at Tue Apr 21 19:14:13 2026 by rpki-client