$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffbae515-cabd-359a-b380-74eeadc7a908.roa File: ffbae515-cabd-359a-b380-74eeadc7a908.roa (raw, json) Hash identifier: XumlRZr9lzCSbnN/e7kQ6bXwtJi8rWd7M7DuLsik28Y= Subject key identifier: BC:0E:4B:33:88:0F:E8:BA:8A:4F:DF:36:25:D3:1A:47:92:88:66:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF633C552A45A16804C3180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffbae515-cabd-359a-b380-74eeadc7a908.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 71.194.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:33:c5:52:a4:5a:16:80:4c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=85275334-e96f-4ec8-af5d-c8e89baa5bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:6a:40:fc:13:05:11:4d:01:6c:79:af:f2: 9b:c8:82:d8:8f:a6:26:a0:c2:0a:83:0a:14:1d:9c: a6:5b:34:0b:11:09:e0:cb:d1:5e:09:b6:48:80:91: 5d:18:c4:20:c3:89:8e:d6:f1:3c:4f:fa:70:da:ec: fe:5d:f7:f9:63:02:f2:71:7e:93:ba:7e:7f:1c:3f: 0c:e6:b3:79:17:60:98:6b:d0:47:c8:a6:a1:6a:fc: 23:e5:8e:54:b5:48:07:9d:90:2f:a5:3f:2b:c0:40: 20:af:65:68:fa:68:a0:62:eb:52:96:b4:50:00:e8: a7:98:1b:cd:09:cc:87:18:5f:5d:b5:c8:5c:0e:93: 44:ba:8a:13:f7:3d:da:96:35:b5:a3:6c:5e:ea:be: 7f:aa:cf:1d:d2:90:a7:a2:1e:18:6e:93:06:c6:cb: 06:be:84:4f:89:bd:80:e8:b0:16:be:87:60:f2:14: 2b:29:2b:c5:b4:6d:39:81:d7:c4:6e:64:45:1d:a4: 81:7e:3a:f5:0f:e1:fd:e7:bd:4e:6a:f5:61:d5:61: 70:bf:36:bc:97:cb:57:f6:a9:79:37:9c:1b:da:5d: 49:f9:86:51:c2:fc:57:e2:15:9f:9d:51:81:0a:71: 11:08:3d:d0:3d:f7:88:d4:81:52:e8:84:32:50:fb: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0E:4B:33:88:0F:E8:BA:8A:4F:DF:36:25:D3:1A:47:92:88:66:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ffbae515-cabd-359a-b380-74eeadc7a908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:49:38:f2:cf:08:a8:7a:fb:f1:9f:a6:18:e8:de:2e:d5:02: 41:bd:95:74:e0:a5:6e:02:26:66:bc:d8:ce:ec:69:4a:b3:71: 71:42:c1:33:39:56:50:7d:ac:67:41:45:1f:5b:11:93:9c:34: 69:25:10:0d:6c:28:10:54:80:11:c2:aa:6b:f4:ba:8d:b0:ee: 11:fd:66:ad:1f:e4:bc:d6:77:cb:fe:f5:a0:0e:fc:24:3b:f4: 81:3c:4d:f7:08:de:b2:d6:37:40:3e:d0:cf:54:00:19:ba:0d: 87:71:d7:4b:0b:ee:8c:65:12:1c:a8:11:bd:74:40:17:a9:5f: 30:0c:d0:33:2c:de:22:c1:19:7a:59:80:cc:f3:2a:f7:f3:5b: a7:23:21:1d:e4:92:60:21:5b:c6:01:b7:30:42:82:30:a5:a2: 8c:24:d2:fa:ff:69:31:a5:06:65:1a:8d:a0:82:60:34:b4:dc: b5:30:71:48:28:4f:ad:5b:0f:48:d7:3b:d6:fc:bd:e6:63:02: f4:83:ad:ca:8c:6c:33:c4:75:75:8c:60:56:b5:88:68:79:c5: 3b:8e:fe:53:aa:72:f1:8b:d2:89:f4:f2:f0:57:ac:ea:18:b0: 24:97:6b:35:a9:2f:ca:de:70:b1:3b:42:ab:5e:1b:0c:cf:f9: c0:29:4d:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9jPFUqRaFoBMMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODUyNzUzMzQtZTk2Zi00ZWM4LWFmNWQtYzhlODliYWE1YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcxqQPwTBRFNAWx5r/KbyILYj6YmoMIKgwoU HZymWzQLEQngy9FeCbZIgJFdGMQgw4mO1vE8T/pw2uz+Xff5YwLycX6Tun5/HD8M 5rN5F2CYa9BHyKahavwj5Y5UtUgHnZAvpT8rwEAgr2Vo+migYutSlrRQAOinmBvN CcyHGF9dtchcDpNEuooT9z3aljW1o2xe6r5/qs8d0pCnoh4YbpMGxssGvoRPib2A 6LAWvodg8hQrKSvFtG05gdfEbmRFHaSBfjr1D+H9571OavVh1WFwvza8l8tX9ql5 N5wb2l1J+YZRwvxX4hWfnVGBCnERCD3QPfeI1IFS6IQyUPuaDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwOSzOID+i6ik/fNiXTGkeSiGa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZiYWU1MTUtY2FiZC0z NTlhLWIzODAtNzRlZWFkYzdhOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8LgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9JOPLPCKh6+/Gfphjo3i7VAkG9lXTgpW4CJma82M7saUqzcXFCwTM5 VlB9rGdBRR9bEZOcNGklEA1sKBBUgBHCqmv0uo2w7hH9Zq0f5LzWd8v+9aAO/CQ7 9IE8TfcI3rLWN0A+0M9UABm6DYdx10sL7oxlEhyoEb10QBepXzAM0DMs3iLBGXpZ gMzzKvfzW6cjIR3kkmAhW8YBtzBCgjCloowk0vr/aTGlBmUajaCCYDS03LUwcUgo T61bD0jXO9b8veZjAvSDrcqMbDPEdXWMYFa1iGh5xTuO/lOqcvGL0on08vBXrOoY sCSXazWpL8recLE7QqteGwzP+cApTX0= -----END CERTIFICATE-----Generated at Tue Apr 21 19:19:59 2026 by rpki-client