$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8800f71-08fd-383a-88ae-6815f7192bd8.roa File: c8800f71-08fd-383a-88ae-6815f7192bd8.roa (raw, json) Hash identifier: NkGurT7L5toPN7KHLjmoH/OAgJ0PL+4D6Qs6ZO84A5A= Subject key identifier: 2A:88:DD:CF:78:67:B0:75:D2:9A:23:8C:1B:CA:50:41:56:15:CC:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF63745F7E1E87352DD3500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8800f71-08fd-383a-88ae-6815f7192bd8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:37:45:f7:e1:e8:73:52:dd:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=8b946503-b1db-40b6-bf17-8081b0a74ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:00:ad:38:30:91:1b:5d:9e:cb:7a:a0:5c: e9:71:50:21:8f:d5:b7:10:14:e8:81:07:55:27:9b: b5:83:15:32:f6:bc:1c:8b:52:51:23:5a:72:af:3a: 21:0f:03:e8:51:77:cb:27:e2:c5:4e:82:6d:c8:2a: bd:7f:d5:27:d8:77:65:2c:7d:fd:cb:c5:25:5a:28: 17:0f:aa:21:6b:7f:7d:c5:a2:cf:ab:90:c4:45:56: 9e:8f:c8:21:42:e0:7b:fb:9c:81:80:8f:95:12:94: d3:f7:9f:5b:a0:13:cc:a0:70:d9:fc:45:6c:2c:e4: f4:ac:4d:ee:c0:1a:05:d0:7c:1d:b7:33:38:38:47: 97:02:1b:d9:6e:15:86:9f:31:ee:b2:73:bf:85:48: 47:c7:e9:de:9c:c8:f2:54:c5:15:18:e9:65:f8:40: 12:1b:56:42:88:79:31:75:0d:2c:bf:3b:e5:bf:e9: 3f:95:be:22:26:54:a6:5c:2d:3f:22:53:69:8c:44: 35:dd:23:68:ff:39:95:5f:6c:92:03:fe:f6:fd:6f: a4:70:cf:58:5a:67:9f:52:53:a4:be:65:da:1f:74: c3:cc:64:b0:f1:fa:70:c1:50:98:f4:f1:18:18:56: 75:8f:f9:34:12:2f:67:ba:db:4a:68:6c:5d:a2:a6: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:88:DD:CF:78:67:B0:75:D2:9A:23:8C:1B:CA:50:41:56:15:CC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8800f71-08fd-383a-88ae-6815f7192bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ce:c9:97:c1:9e:75:e1:cb:e4:83:14:04:87:9e:53:be:fe: 29:ff:48:3c:84:82:45:95:2f:6e:1a:4d:8b:af:e3:4b:be:3b: 66:ed:5c:be:ac:1a:9d:97:00:1c:30:f8:7c:64:87:f8:9d:34: 64:b1:19:c3:fd:8c:2c:1d:d5:7d:5c:72:47:af:fd:cf:f7:23: 7b:3e:03:98:b6:27:e6:58:26:9a:a4:ee:94:67:ad:22:da:46: 99:af:c5:86:17:fc:89:1a:f7:57:87:31:23:1b:f5:62:68:e6: 62:71:b4:f7:67:1b:9e:26:d5:03:4a:24:76:97:4f:1c:d0:eb: c6:c8:5c:95:fb:bd:31:87:14:8d:01:24:fe:08:ae:54:9a:5f: 57:c2:bb:24:18:8e:12:7e:73:a6:24:0b:c3:1c:cb:d8:1c:69: 95:8d:24:07:25:80:60:be:01:8d:63:d9:d9:36:d7:5f:a8:18: 9b:32:ec:b0:37:4b:5c:ac:5f:38:3d:93:4e:5a:52:7b:0c:82: 82:2c:79:de:c6:90:71:6f:0f:57:73:0c:d0:fa:dc:0f:e9:36: d3:05:40:0b:c3:ba:28:a6:78:20:15:ec:b7:ce:a3:5a:45:84: a4:23:bb:ef:88:ed:af:6e:ee:30:d0:18:57:6b:58:56:01:c3: 5c:1e:a2:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9jdF9+Hoc1LdNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OGI5NDY1MDMtYjFkYi00MGI2LWJmMTctODA4MWIwYTc0YWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cQArTgwkRtdnst6oFzpcVAhj9W3EBTogQdV J5u1gxUy9rwci1JRI1pyrzohDwPoUXfLJ+LFToJtyCq9f9Un2HdlLH39y8UlWigX D6oha399xaLPq5DERVaej8ghQuB7+5yBgI+VEpTT959boBPMoHDZ/EVsLOT0rE3u wBoF0HwdtzM4OEeXAhvZbhWGnzHusnO/hUhHx+nenMjyVMUVGOll+EASG1ZCiHkx dQ0svzvlv+k/lb4iJlSmXC0/IlNpjEQ13SNo/zmVX2ySA/72/W+kcM9YWmefUlOk vmXaH3TDzGSw8fpwwVCY9PEYGFZ1j/k0Ei9nuttKaGxdoqascQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqI3c94Z7B10pojjBvKUEFWFcyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzg4MDBmNzEtMDhmZC0z ODNhLTg4YWUtNjgxNWY3MTkyYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/OyZfBnnXhy+SDFASHnlO+/in/SDyEgkWVL24aTYuv40u+O2btXL6s Gp2XABww+Hxkh/idNGSxGcP9jCwd1X1cckev/c/3I3s+A5i2J+ZYJpqk7pRnrSLa RpmvxYYX/Ika91eHMSMb9WJo5mJxtPdnG54m1QNKJHaXTxzQ68bIXJX7vTGHFI0B JP4IrlSaX1fCuyQYjhJ+c6YkC8Mcy9gcaZWNJAclgGC+AY1j2dk211+oGJsy7LA3 S1ysXzg9k05aUnsMgoIsed7GkHFvD1dzDND63A/pNtMFQAvDuiimeCAV7LfOo1pF hKQju++I7a9u7jDQGFdrWFYBw1weojI= -----END CERTIFICATE-----Generated at Tue Apr 21 19:32:59 2026 by rpki-client