$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7e67e-99d4-37cb-9a4a-83b587db5c84.roa File: d0e7e67e-99d4-37cb-9a4a-83b587db5c84.roa (raw, json) Hash identifier: vDUpDoP6QPu7j4KVkoRYj+eLbvDQuDhku2t6gC68aT0= Subject key identifier: 8B:B1:B8:DC:2B:E6:55:B0:CB:10:EA:EA:91:E0:A8:EC:16:3B:5B:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79D2366ACF668DF876F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7e67e-99d4-37cb-9a4a-83b587db5c84.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9d:23:66:ac:f6:68:df:87:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d84b2c6c-5015-4f27-b70f-67ffbfe022e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:fd:58:5d:db:97:18:96:dd:c5:d0:61:c5: 44:03:7b:2c:47:5d:a5:51:29:d8:48:e1:61:62:19: 99:12:b7:18:63:36:35:60:be:cb:d3:52:fe:c8:05: 2b:ae:6d:7d:6a:10:ed:51:04:6c:94:a9:98:41:0b: 71:9b:81:8c:f1:e8:49:f6:12:df:26:0f:4c:37:b9: 2c:58:15:69:71:5d:57:bc:01:da:c3:9b:d9:5f:d5: 93:53:62:3e:ac:9e:a0:aa:05:d5:0d:16:63:c6:7f: f6:7e:2f:b9:de:89:ac:b8:85:12:3a:1a:3f:dc:12: 6b:cb:c9:c0:7f:84:b3:62:de:2e:35:d9:e3:f1:66: 8c:6e:52:85:a8:07:4a:f4:70:d8:29:9c:04:0e:6d: fc:bc:6d:24:ed:80:5e:8d:dc:a8:7c:f0:6f:6d:a3: f0:c1:3a:6c:dc:39:7e:53:31:2d:45:9b:fe:d1:56: e0:87:9e:93:27:40:59:4d:7d:bd:e1:f2:ac:af:4d: a5:ff:18:3e:c3:c0:a3:d4:14:40:b5:4e:e4:5a:23: 8f:a9:ef:25:20:da:01:7d:4d:2f:4c:4a:1a:96:e0: 83:9e:46:e4:06:44:60:bc:9b:88:8e:3d:04:c0:47: 34:5f:35:57:06:68:8b:44:9b:8a:35:0a:77:1f:e8: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:B8:DC:2B:E6:55:B0:CB:10:EA:EA:91:E0:A8:EC:16:3B:5B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e7e67e-99d4-37cb-9a4a-83b587db5c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:91:4f:e2:62:1e:4a:e0:72:73:08:82:53:71:a9:4a:eb:bd: 39:7a:b1:a7:d3:40:a1:47:24:2b:61:81:e0:87:b6:c9:f4:17: f1:96:37:6e:d2:13:24:9e:ed:3a:6f:23:8c:d4:e8:51:75:84: 2d:29:43:34:d0:12:8b:2b:49:32:e0:3e:26:62:97:cb:75:7f: 1f:19:02:72:aa:2e:1e:5c:d6:b2:7c:d5:6b:86:28:1c:f9:5d: 86:8b:14:b1:15:5b:62:62:36:77:6a:10:11:2a:2c:2d:43:69: 14:5b:81:38:07:8a:00:6c:f7:41:35:e1:84:d4:0c:4c:b6:8a: 21:2f:ac:1e:ba:00:34:27:bf:16:d1:48:b4:2f:2b:d7:f0:11: 18:fd:6c:0b:dd:9f:06:d0:11:b0:1e:7d:fc:d7:cd:06:99:fb: 8f:a9:23:af:4d:21:0c:77:de:8d:0e:a7:e2:a3:54:a2:da:1e: 53:41:cb:9d:24:ac:66:2b:36:8a:a2:e7:6d:75:a6:f2:62:22: c3:94:c7:8b:5f:bb:91:22:9d:ad:53:a7:4b:3d:59:b1:45:85: 31:ab:69:88:18:09:6a:4a:3a:35:43:8f:7b:79:fe:61:a6:87: dc:04:c1:27:b6:7f:e0:2f:7e:44:72:d5:bc:ae:65:4f:bd:74: d4:35:22:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O950jZqz2aN+Hb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDg0YjJjNmMtNTAxNS00ZjI3LWI3MGYtNjdmZmJmZTAyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj/9WF3blxiW3cXQYcVEA3ssR12lUSnYSOFh YhmZErcYYzY1YL7L01L+yAUrrm19ahDtUQRslKmYQQtxm4GM8ehJ9hLfJg9MN7ks WBVpcV1XvAHaw5vZX9WTU2I+rJ6gqgXVDRZjxn/2fi+53omsuIUSOho/3BJry8nA f4SzYt4uNdnj8WaMblKFqAdK9HDYKZwEDm38vG0k7YBejdyofPBvbaPwwTps3Dl+ UzEtRZv+0Vbgh56TJ0BZTX294fKsr02l/xg+w8Cj1BRAtU7kWiOPqe8lINoBfU0v TEoaluCDnkbkBkRgvJuIjj0EwEc0XzVXBmiLRJuKNQp3H+h7BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuxuNwr5lWwyxDq6pHgqOwWO1sbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBlN2U2N2UtOTlkNC0z N2NiLTlhNGEtODNiNTg3ZGI1Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6RT+JiHkrgcnMIglNxqUrrvTl6safTQKFHJCthgeCHtsn0F/GWN27S EySe7TpvI4zU6FF1hC0pQzTQEosrSTLgPiZil8t1fx8ZAnKqLh5c1rJ81WuGKBz5 XYaLFLEVW2JiNndqEBEqLC1DaRRbgTgHigBs90E14YTUDEy2iiEvrB66ADQnvxbR SLQvK9fwERj9bAvdnwbQEbAeffzXzQaZ+4+pI69NIQx33o0Op+KjVKLaHlNBy50k rGYrNoqi5211pvJiIsOUx4tfu5Eina1Tp0s9WbFFhTGraYgYCWpKOjVDj3t5/mGm h9wEwSe2f+AvfkRy1byuZU+9dNQ1IkI= -----END CERTIFICATE-----Generated at Tue Apr 21 20:20:46 2026 by rpki-client