$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8000d60-489d-36e7-a31b-981db691ebf2.roa File: d8000d60-489d-36e7-a31b-981db691ebf2.roa (raw, json) Hash identifier: XE0il4CSMiekX6OSNo59B5kt095XSk/vth60hAPJp74= Subject key identifier: 9B:DF:5D:F0:3A:55:B9:25:E2:0F:5B:13:05:D3:86:76:8C:E4:FA:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF752ED7EB9066FC026CC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8000d60-489d-36e7-a31b-981db691ebf2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 71.230.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:52:ed:7e:b9:06:6f:c0:26:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9cc557bb-1f8e-4fad-a3d0-1e9d002a967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:d4:4c:64:04:1b:30:49:d9:1d:e7:d1:db: 0c:42:56:7a:b4:fa:33:86:de:54:19:2a:28:4b:af: c9:91:1c:df:61:f3:bc:6f:5b:57:52:89:52:78:42: 7f:88:b3:43:4f:34:00:58:6b:b5:ab:ea:4f:6f:8e: a4:69:8e:b1:dd:ac:fa:ba:78:eb:27:d2:7d:ab:cf: e7:56:97:a5:85:56:28:24:ab:b1:8f:90:4f:ea:22: 94:e5:a2:ae:ba:a0:b6:1f:68:49:c2:26:6f:c4:f8: 8c:2d:ff:47:3a:85:b7:36:80:8e:0a:62:10:40:2c: c1:eb:c9:07:ae:e2:07:05:66:c0:79:80:6a:a6:a6: f6:3d:f5:eb:be:17:ef:2c:c1:7f:83:99:fe:30:a0: 7d:51:a0:74:50:af:73:fa:cc:eb:7f:3b:1e:67:83: a1:f2:09:4d:3a:65:f9:de:5e:93:65:32:71:56:60: 21:56:0e:4e:86:5f:9e:34:8d:8e:14:51:cd:91:4a: 5f:aa:91:f3:52:86:e7:94:cc:71:e3:58:74:72:93: 3c:30:6b:1a:a6:86:5d:91:d3:ad:f4:5a:17:4f:2d: 71:22:18:b3:6d:8b:ff:4d:0b:43:1a:29:d2:b7:b6: 69:8b:49:51:31:1c:cf:5d:f4:e1:02:55:6f:32:76: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:5D:F0:3A:55:B9:25:E2:0F:5B:13:05:D3:86:76:8C:E4:FA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8000d60-489d-36e7-a31b-981db691ebf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:5b:bd:9f:f1:1d:35:85:26:06:0f:82:25:48:8e:6b:a6:bb: ef:fe:ad:cb:a1:1d:0b:a0:13:c5:dd:96:11:12:11:c5:aa:fc: 99:8f:2b:aa:5e:4e:cc:09:4a:df:52:e4:6b:35:22:84:28:16: 8f:f9:cf:c1:30:26:a8:4f:ae:3a:19:78:d4:78:0e:3d:ca:38: 2b:07:df:ad:ed:75:38:15:dc:7a:a5:6f:e0:21:ca:5f:04:78: 6f:11:f7:e4:9e:d4:62:a4:07:9e:97:ec:30:8d:61:26:4a:00: 80:03:ba:dd:13:84:36:81:ab:17:c9:6e:8d:c6:d9:90:49:0a: 3e:44:1a:0a:b7:7c:46:40:40:af:b5:b8:bb:b8:fb:fc:91:a5: 8c:fb:81:6b:df:b3:0a:4c:c1:dd:a6:ba:5f:99:3b:76:80:21: 31:7a:19:e4:fe:4a:96:e6:88:5a:b1:3b:79:e8:75:0e:0a:f3: 64:60:8b:48:fe:23:1b:93:d7:ee:5a:48:7c:fe:3c:f2:9c:37: db:a9:15:f4:7f:f1:f1:0c:29:7e:02:40:70:97:6f:5a:9c:bf: 34:50:65:4d:1b:0d:6a:76:a2:1f:ba:10:99:5b:a1:dc:90:57: a9:d0:69:4a:ed:09:95:de:1a:d5:61:e6:f3:64:63:39:ff:93: f2:e4:b6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O91LtfrkGb8AmzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWNjNTU3YmItMWY4ZS00ZmFkLWEzZDAtMWU5ZDAwMmE5NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1TUTGQEGzBJ2R3n0dsMQlZ6tPozht5UGSoo S6/JkRzfYfO8b1tXUolSeEJ/iLNDTzQAWGu1q+pPb46kaY6x3az6unjrJ9J9q8/n VpelhVYoJKuxj5BP6iKU5aKuuqC2H2hJwiZvxPiMLf9HOoW3NoCOCmIQQCzB68kH ruIHBWbAeYBqpqb2PfXrvhfvLMF/g5n+MKB9UaB0UK9z+szrfzseZ4Oh8glNOmX5 3l6TZTJxVmAhVg5Ohl+eNI2OFFHNkUpfqpHzUobnlMxx41h0cpM8MGsapoZdkdOt 9FoXTy1xIhizbYv/TQtDGinSt7Zpi0lRMRzPXfThAlVvMnYDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvfXfA6Vbkl4g9bEwXThnaM5PphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgwMDBkNjAtNDg5ZC0z NmU3LWEzMWItOTgxZGI2OTFlYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhbvZ/xHTWFJgYPgiVIjmumu+/+rcuhHQugE8XdlhESEcWq/JmPK6pe TswJSt9S5Gs1IoQoFo/5z8EwJqhPrjoZeNR4Dj3KOCsH363tdTgV3Hqlb+Ahyl8E eG8R9+Se1GKkB56X7DCNYSZKAIADut0ThDaBqxfJbo3G2ZBJCj5EGgq3fEZAQK+1 uLu4+/yRpYz7gWvfswpMwd2mul+ZO3aAITF6GeT+SpbmiFqxO3nodQ4K82Rgi0j+ IxuT1+5aSHz+PPKcN9upFfR/8fEMKX4CQHCXb1qcvzRQZU0bDWp2oh+6EJlbodyQ V6nQaUrtCZXeGtVh5vNkYzn/k/Lktpw= -----END CERTIFICATE-----Generated at Tue Apr 21 19:19:36 2026 by rpki-client