$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a64564-481d-3835-a672-5fba56dec43c.roa File: d3a64564-481d-3835-a672-5fba56dec43c.roa (raw, json) Hash identifier: 5/VVtmKQcI5l7GxXNmPe/SexoXECYJFmEXWAn5aEVIg= Subject key identifier: 8E:0B:79:B2:56:F2:3D:A5:EB:EC:AC:C2:9D:99:A2:85:58:AF:34:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79E34A3259A40373C3D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a64564-481d-3835-a672-5fba56dec43c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9e:34:a3:25:9a:40:37:3c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1205cb43-694a-43b8-a921-d308a89273f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:8b:8b:ad:b1:34:d8:3f:3d:72:6f:0b:32: f4:85:db:3b:1c:c9:57:44:71:6d:d3:0e:4c:34:36: dc:84:7d:1f:3e:4a:43:77:10:53:16:1d:2e:b3:06: db:de:89:53:59:5a:5e:24:bd:9c:ab:6c:03:30:07: 32:4d:ee:57:5e:c9:3a:32:5b:df:ef:4a:20:b7:5d: bd:94:a2:40:9f:a0:6a:14:ec:34:4e:6e:10:c9:9a: 44:af:c6:eb:7e:e5:a6:66:84:16:f5:a1:5e:bc:14: ad:f0:b1:dc:ea:94:42:24:bb:04:34:bf:8c:70:fc: 39:69:9b:8f:11:2d:7c:8a:8e:b7:d3:d0:9b:7f:ba: 9a:57:8c:54:40:91:35:d5:75:05:c0:c2:49:f4:c8: a2:17:f4:a0:6c:26:1e:9a:66:44:9a:1c:e6:6d:46: f3:3f:ab:82:d9:c4:84:24:4a:05:ea:9f:7e:1f:93: 7f:48:2e:9d:d9:28:75:f9:c6:f1:be:e4:4d:6a:90: 0d:03:97:0b:d3:69:42:88:27:37:38:ac:5f:c8:76: 81:4c:07:b7:71:a1:b4:04:19:89:80:75:d5:2d:52: 16:fc:2e:ab:d5:69:d6:14:00:57:d4:28:ab:e6:05: d6:a4:41:46:fb:eb:9b:86:a8:fd:6b:9e:e9:3a:18: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0B:79:B2:56:F2:3D:A5:EB:EC:AC:C2:9D:99:A2:85:58:AF:34:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a64564-481d-3835-a672-5fba56dec43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a7:9c:c8:7d:c9:52:c7:21:25:80:04:56:7e:6b:50:5c:98: 95:98:a0:bb:1a:fd:40:70:f8:24:47:0a:f3:42:48:d2:40:eb: a0:9d:df:b1:2d:ff:2d:71:39:a0:70:47:40:ee:4b:22:c6:cb: 85:8e:ee:98:e9:28:ec:61:7a:2d:f6:34:8b:6f:d4:56:da:1f: 17:fa:f4:5c:01:3d:63:d6:98:41:6a:6c:9e:8e:f3:8c:dd:5c: b4:f9:1b:d7:e7:bd:d5:3f:14:44:40:01:e2:7e:9e:a1:9e:27: 84:05:34:b2:61:a8:07:3e:79:bc:26:26:6f:a1:3a:aa:7c:57: 11:90:fb:e4:c1:fc:12:d4:25:0a:63:75:69:f4:02:f7:d7:45: 55:12:0a:84:f6:2d:bf:9c:3b:cd:8f:20:3d:0d:c2:3c:11:94: f3:98:27:09:58:10:68:05:0e:8f:ed:bc:18:96:3e:39:be:b7: 65:d1:70:00:b0:0c:33:54:d3:8d:6a:a9:bb:ae:3e:87:80:08: d6:6c:1f:a6:78:93:55:7c:b5:96:e4:25:ae:1b:f5:f3:c9:7f: 29:bb:55:95:1a:b5:3c:ea:73:b9:2d:ea:9c:2f:22:da:8f:f8: 9b:8e:da:91:a4:05:48:5a:18:57:67:a0:e7:0b:df:85:c4:ae: 99:17:57:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9540oyWaQDc8PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTIwNWNiNDMtNjk0YS00M2I4LWE5MjEtZDMwOGE4OTI3M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKiLi62xNNg/PXJvCzL0hds7HMlXRHFt0w5M NDbchH0fPkpDdxBTFh0uswbb3olTWVpeJL2cq2wDMAcyTe5XXsk6Mlvf70ogt129 lKJAn6BqFOw0Tm4QyZpEr8brfuWmZoQW9aFevBSt8LHc6pRCJLsENL+McPw5aZuP ES18io6309Cbf7qaV4xUQJE11XUFwMJJ9MiiF/SgbCYemmZEmhzmbUbzP6uC2cSE JEoF6p9+H5N/SC6d2Sh1+cbxvuRNapANA5cL02lCiCc3OKxfyHaBTAe3caG0BBmJ gHXVLVIW/C6r1WnWFABX1Cir5gXWpEFG++ubhqj9a57pOhjBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4LebJW8j2l6+yswp2ZooVYrzR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhNjQ1NjQtNDgxZC0z ODM1LWE2NzItNWZiYTU2ZGVjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKnnMh9yVLHISWABFZ+a1BcmJWYoLsa/UBw+CRHCvNCSNJA66Cd37Et /y1xOaBwR0DuSyLGy4WO7pjpKOxhei32NItv1FbaHxf69FwBPWPWmEFqbJ6O84zd XLT5G9fnvdU/FERAAeJ+nqGeJ4QFNLJhqAc+ebwmJm+hOqp8VxGQ++TB/BLUJQpj dWn0AvfXRVUSCoT2Lb+cO82PID0NwjwRlPOYJwlYEGgFDo/tvBiWPjm+t2XRcACw DDNU041qqbuuPoeACNZsH6Z4k1V8tZbkJa4b9fPJfym7VZUatTzqc7kt6pwvItqP +JuO2pGkBUhaGFdnoOcL34XErpkXV2A= -----END CERTIFICATE-----Generated at Tue Apr 21 20:46:41 2026 by rpki-client