$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b930bcf9-d6d7-3d18-a6a6-bd759e1fd781.roa File: b930bcf9-d6d7-3d18-a6a6-bd759e1fd781.roa (raw, json) Hash identifier: Y6Qf15wynQ1zGonwkeWJxXYNbJplkx71yS1PTruiJR0= Subject key identifier: E9:FE:E1:3D:82:BD:31:BD:09:54:AF:FF:48:4B:7F:42:99:38:29:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3DADD3536BB133C8CD8500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b930bcf9-d6d7-3d18-a6a6-bd759e1fd781.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 71.198.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3d:ad:d3:53:6b:b1:33:c8:cd:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=56e90508-7e7a-4986-8374-04e00d3d6b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:ed:4d:b1:37:c7:46:6a:75:3d:8c:c2:ed: ac:87:82:ef:a9:f9:56:3f:87:f0:4f:14:7c:89:50: d9:57:65:df:b5:3f:40:49:24:d7:46:5f:e1:d9:a8: 29:fc:7b:b1:e3:16:12:fd:1b:b8:be:d2:88:95:be: 2a:62:0f:31:ce:ed:57:e7:6e:f9:13:03:56:cb:c8: 01:43:12:a0:89:36:fe:61:9e:fc:76:40:7c:00:fd: 68:7c:ac:52:8b:ee:d1:18:d8:77:2d:b6:0c:20:cc: c8:b8:c2:6f:f7:f5:a4:29:97:84:37:65:6f:ff:ef: 67:98:5a:b2:f8:26:07:64:e0:40:ce:b0:b7:d5:66: 64:63:3b:ed:ec:c0:24:61:71:e6:e5:f0:67:65:51: d5:a5:68:7f:63:89:1a:07:48:93:59:25:db:eb:f2: a8:ad:0e:15:51:ea:f3:30:56:76:c6:ad:86:88:a9: 18:da:e6:43:e1:35:46:9b:98:b3:61:68:2c:4c:02: 14:38:ff:80:12:2a:b5:eb:ce:df:47:99:38:96:49: 00:10:df:c2:6e:07:40:ab:f8:b9:37:20:81:ce:78: 92:8b:5f:9a:a7:48:5d:97:2c:cd:81:d1:9a:51:b5: b9:0c:be:61:ac:43:0e:3e:e4:69:d9:59:b7:dc:9b: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:E1:3D:82:BD:31:BD:09:54:AF:FF:48:4B:7F:42:99:38:29:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b930bcf9-d6d7-3d18-a6a6-bd759e1fd781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a1:5d:13:31:9d:82:f0:6c:2c:f6:69:4b:3c:d9:ad:03:f9: f6:cd:53:74:c7:0b:dd:ee:b1:f9:d2:3e:14:db:35:1c:3c:c9: b7:3c:85:21:3e:bf:d5:0f:69:9a:23:8f:b8:c5:64:0b:d0:d1: 5f:bf:6d:9f:51:af:9d:e3:02:89:49:12:9d:87:e4:37:33:da: 89:88:e5:ee:4e:11:ec:aa:11:92:31:65:88:3b:87:d6:d2:c8: 79:b7:85:53:6c:64:c9:19:bb:c5:d8:21:cb:f9:d8:98:57:4f: f6:1e:1e:61:f2:40:1d:86:56:23:ea:8b:bf:20:78:36:57:f4: d9:12:35:dd:1b:dd:77:5d:42:f6:96:60:fd:7f:21:85:51:62: 55:24:29:82:df:65:fa:2e:35:0d:27:57:83:86:de:77:93:45: 9b:92:d5:85:b4:1a:d1:80:58:17:6b:11:9e:f2:de:38:7f:56: cc:58:b8:ab:13:9b:0d:d3:19:86:94:1d:45:15:02:83:83:42: 8e:27:3a:cf:f4:63:1d:c5:53:45:35:c7:1f:22:8d:95:dd:e5: ba:95:cd:b1:8d:12:01:cc:75:c3:fe:76:44:e3:66:02:c6:5e: 2f:5c:b4:9a:3c:93:e4:8c:3f:e7:ba:f0:24:6b:fb:0d:01:0c: 23:92:79:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPa3TU2uxM8jNhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NTZlOTA1MDgtN2U3YS00OTg2LTgzNzQtMDRlMDBkM2Q2YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxLtTbE3x0ZqdT2Mwu2sh4LvqflWP4fwTxR8 iVDZV2XftT9ASSTXRl/h2agp/Hux4xYS/Ru4vtKIlb4qYg8xzu1X5275EwNWy8gB QxKgiTb+YZ78dkB8AP1ofKxSi+7RGNh3LbYMIMzIuMJv9/WkKZeEN2Vv/+9nmFqy +CYHZOBAzrC31WZkYzvt7MAkYXHm5fBnZVHVpWh/Y4kaB0iTWSXb6/KorQ4VUerz MFZ2xq2GiKkY2uZD4TVGm5izYWgsTAIUOP+AEiq1687fR5k4lkkAEN/CbgdAq/i5 NyCBzniSi1+ap0hdlyzNgdGaUbW5DL5hrEMOPuRp2Vm33Jua9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn+4T2CvTG9CVSv/0hLf0KZOCmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjkzMGJjZjktZDZkNy0z ZDE4LWE2YTYtYmQ3NTllMWZkNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImhXRMxnYLwbCz2aUs82a0D+fbNU3THC93usfnSPhTbNRw8ybc8hSE+ v9UPaZojj7jFZAvQ0V+/bZ9Rr53jAolJEp2H5Dcz2omI5e5OEeyqEZIxZYg7h9bS yHm3hVNsZMkZu8XYIcv52JhXT/YeHmHyQB2GViPqi78geDZX9NkSNd0b3XddQvaW YP1/IYVRYlUkKYLfZfouNQ0nV4OG3neTRZuS1YW0GtGAWBdrEZ7y3jh/VsxYuKsT mw3TGYaUHUUVAoODQo4nOs/0Yx3FU0U1xx8ijZXd5bqVzbGNEgHMdcP+dkTjZgLG Xi9ctJo8k+SMP+e68CRr+w0BDCOSeXY= -----END CERTIFICATE-----Generated at Tue Jul 21 20:07:10 2026 by rpki-client