$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbda50b1-9955-319d-9ea1-04440ee86a9d.roa File: fbda50b1-9955-319d-9ea1-04440ee86a9d.roa (raw, json) Hash identifier: sOCQ28aNwnuBfn0y9Lj1B6Pgr31I4KfUZtCemBGdAvo= Subject key identifier: 22:92:36:67:1E:32:E8:E4:5B:49:60:A0:A7:01:E7:24:1A:27:2F:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF79DDAA82EEBF218F22180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbda50b1-9955-319d-9ea1-04440ee86a9d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.239.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:9d:da:a8:2e:eb:f2:18:f2:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=76df9b8f-31ae-43a0-a0df-adef1fb6cd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:4e:f9:6b:26:33:20:e5:d3:8d:e1:15:03: 56:2a:17:e9:48:68:a8:74:10:8f:03:11:a0:ec:fc: b8:1b:31:08:6e:55:5a:8e:df:28:08:07:32:ee:6e: 19:e3:84:6f:09:bb:d0:07:d0:23:22:91:b5:a4:0d: 14:f4:b2:e8:25:12:0d:e1:c5:75:ad:a1:7b:e9:99: c4:76:84:c5:81:a1:91:31:35:0b:77:23:82:c9:78: cc:28:00:02:89:02:0a:b6:be:94:9b:67:73:4e:9f: 72:a5:e2:56:6e:81:d2:94:18:92:95:64:d4:57:2a: 85:83:b3:86:98:5d:50:39:42:41:c2:94:0d:20:63: 99:11:4c:3a:da:b2:08:e5:1c:00:68:e6:f9:c1:62: 5d:51:3f:3a:3e:9c:00:a7:57:3a:0a:50:75:ec:2e: a4:1d:c6:aa:2e:d2:e6:6e:ac:c7:4e:a6:8a:e8:25: 43:ff:22:fc:d7:4a:a1:71:a4:e2:e3:79:4b:79:40: 45:ba:48:68:5b:c0:54:44:0a:3e:1a:6e:eb:f6:51: b5:1a:79:db:79:54:12:c6:0b:61:75:99:6d:bb:9f: 4e:9d:df:e8:88:0d:db:cd:d1:04:ff:f7:6a:f7:01: 9b:91:0e:00:f6:ff:01:76:0c:f9:cc:d8:2f:36:1c: cf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:92:36:67:1E:32:E8:E4:5B:49:60:A0:A7:01:E7:24:1A:27:2F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbda50b1-9955-319d-9ea1-04440ee86a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8d:84:95:0f:51:f3:81:ea:72:b2:cf:ca:ed:84:e0:2d:f7: 3a:64:36:c5:49:73:1e:e0:83:49:c0:91:54:26:2e:f4:13:b8: 1e:a2:d5:97:12:93:19:d9:02:6d:0a:6b:0b:35:1e:44:38:d0: b5:84:77:87:ef:5a:21:66:6f:bb:ea:87:fa:7e:2f:7d:2c:f5: 7f:c4:65:3c:5c:3b:2c:d7:a9:ea:9e:e5:cf:f9:25:9c:11:64: 4c:a9:88:72:3d:08:66:c9:ab:bf:cb:3a:b4:87:06:29:d1:8e: a7:68:fa:e6:f7:b5:bc:e6:6d:2f:e8:e2:80:9a:44:96:50:2f: c6:d7:35:d8:93:8c:16:e1:64:d2:3f:4f:e1:0c:92:c5:48:8f: 8d:6c:05:6b:8c:32:3f:54:d8:36:42:82:e6:a5:f9:79:ed:58: 30:1a:61:62:fc:fe:87:74:fc:40:5f:eb:cd:6f:e5:e4:5f:f7: 67:ac:ab:18:69:59:95:19:40:d0:98:a5:94:80:ab:64:72:f4: 3f:79:ce:56:03:08:37:6c:0f:2a:81:3b:5a:c1:79:92:f3:68: be:2c:0e:10:29:4e:b2:4f:6c:da:57:18:87:29:00:e6:31:5f: 92:5d:80:11:ed:55:e4:30:73:68:0e:d0:50:81:d7:f1:6d:95: 0b:57:22:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O953aqC7r8hjyIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzZkZjliOGYtMzFhZS00M2EwLWEwZGYtYWRlZjFmYjZjZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6RO+WsmMyDl043hFQNWKhfpSGiodBCPAxGg 7Py4GzEIblVajt8oCAcy7m4Z44RvCbvQB9AjIpG1pA0U9LLoJRIN4cV1raF76ZnE doTFgaGRMTULdyOCyXjMKAACiQIKtr6Um2dzTp9ypeJWboHSlBiSlWTUVyqFg7OG mF1QOUJBwpQNIGOZEUw62rII5RwAaOb5wWJdUT86PpwAp1c6ClB17C6kHcaqLtLm bqzHTqaK6CVD/yL810qhcaTi43lLeUBFukhoW8BURAo+Gm7r9lG1GnnbeVQSxgth dZltu59Ond/oiA3bzdEE//dq9wGbkQ4A9v8Bdgz5zNgvNhzPQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKSNmceMujkW0lgoKcB5yQaJy8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmJkYTUwYjEtOTk1NS0z MTlkLTllYTEtMDQ0NDBlZTg2YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmNhJUPUfOB6nKyz8rthOAt9zpkNsVJcx7gg0nAkVQmLvQTuB6i1ZcS kxnZAm0Kaws1HkQ40LWEd4fvWiFmb7vqh/p+L30s9X/EZTxcOyzXqeqe5c/5JZwR ZEypiHI9CGbJq7/LOrSHBinRjqdo+ub3tbzmbS/o4oCaRJZQL8bXNdiTjBbhZNI/ T+EMksVIj41sBWuMMj9U2DZCgual+XntWDAaYWL8/od0/EBf681v5eRf92esqxhp WZUZQNCYpZSAq2Ry9D95zlYDCDdsDyqBO1rBeZLzaL4sDhApTrJPbNpXGIcpAOYx X5JdgBHtVeQwc2gO0FCB1/FtlQtXIsI= -----END CERTIFICATE-----Generated at Tue Apr 21 20:20:51 2026 by rpki-client