$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa File: 1845bd9e-8c34-3252-906e-61f3d4ab590e.roa (raw, json) Hash identifier: KFL7HuXvVdbju10w2VQ/KjbOio+C0tlrlotn+lpVkO4= Subject key identifier: 7C:09:E5:2C:05:71:AA:E0:7A:DB:A4:DA:53:84:79:44:62:73:8C:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB938A062A7235A5A74D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.238.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:93:8a:06:2a:72:35:a5:a7:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=982ba384-ef41-4e5d-a2f8-732b93c9f70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:4e:06:10:9b:1d:cd:70:b0:01:0a:d7:8e: 3f:ef:25:20:e7:0a:ab:c1:cb:19:12:3d:d9:5b:ba: 03:1c:14:f7:b8:f8:03:e8:f3:0e:16:a8:b5:8c:5c: 89:95:0b:32:eb:08:24:1f:7a:91:fd:89:33:85:97: 81:77:97:c9:cd:a6:e3:55:bf:15:4a:ea:81:3f:35: cd:73:70:14:d5:07:f5:1c:10:4a:14:21:d4:29:79: 66:1b:03:a5:d0:7f:44:44:15:3a:07:ce:23:66:61: 47:83:e3:21:3a:ad:22:58:fa:55:59:8a:aa:79:20: 38:a9:41:9a:9f:98:3e:de:24:e1:05:ec:34:13:f0: 94:52:c1:8b:a6:67:fd:3f:38:d7:83:56:b6:6c:0a: 46:d9:c7:96:21:4c:26:7b:4b:c3:d5:46:32:92:ae: 45:aa:65:34:2a:03:60:4e:95:ba:be:22:0d:ad:f7: 51:1c:2c:7e:35:93:eb:5d:df:00:f9:52:ad:df:85: 93:e3:8b:38:37:f4:50:1a:47:1a:7c:77:10:8c:48: 9e:1c:3b:2b:7a:bb:20:ac:67:2e:45:31:b0:9c:b3: 3f:f0:f2:1c:b7:54:19:d6:31:01:3e:d0:43:63:b8: f1:f9:db:3d:85:a7:04:b4:6e:00:50:8f:76:a2:26: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:E5:2C:05:71:AA:E0:7A:DB:A4:DA:53:84:79:44:62:73:8C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7e:60:f9:ab:b3:5b:72:28:17:ae:27:88:8a:a2:f0:48:c3: 3c:05:33:1c:ee:62:50:95:df:08:80:1e:e1:7a:11:42:56:20: 18:e0:1e:8a:c8:35:b7:69:c2:72:b5:e6:f1:4f:b8:61:9a:7f: 2b:ba:bd:b4:2e:4a:6b:bc:41:b2:7b:79:36:cd:e6:39:fa:70: 14:a6:1e:a5:cf:01:f4:a5:42:c5:b6:6d:b5:dc:dc:c6:9d:9f: 9a:7d:49:17:32:8b:55:e8:6e:97:30:41:c0:7b:99:53:31:58: e6:20:89:7c:0a:cb:7e:e1:2b:ee:cc:cb:04:e6:60:2e:9e:d4: 86:96:6c:27:fe:01:c9:7e:2e:1a:66:d1:64:9e:30:8f:a1:36: 2e:5a:7e:59:50:12:05:bb:8e:38:e0:0e:72:f7:fc:53:bb:1a: e3:c3:ef:8a:2d:b9:4c:6c:f9:bc:50:93:88:2e:1a:d0:da:09: 64:d0:36:94:d6:a2:39:87:37:a3:80:b1:2c:cb:2d:3f:12:63: 1a:7c:b1:d2:12:eb:d5:26:ac:e8:67:cb:58:76:c3:6e:a5:d7: 65:7f:70:f5:87:e9:49:f5:fe:24:77:3e:57:ea:8d:ad:de:1b: 4a:4c:c4:e4:97:7c:4c:6d:dc:85:7a:da:e8:cd:6c:63:0f:d1: 3c:ed:1d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5OKBipyNaWnTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTgyYmEzODQtZWY0MS00ZTVkLWEyZjgtNzMyYjkzYzlmNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIxOBhCbHc1wsAEK144/7yUg5wqrwcsZEj3Z W7oDHBT3uPgD6PMOFqi1jFyJlQsy6wgkH3qR/YkzhZeBd5fJzabjVb8VSuqBPzXN c3AU1Qf1HBBKFCHUKXlmGwOl0H9ERBU6B84jZmFHg+MhOq0iWPpVWYqqeSA4qUGa n5g+3iThBew0E/CUUsGLpmf9PzjXg1a2bApG2ceWIUwme0vD1UYykq5FqmU0KgNg TpW6viINrfdRHCx+NZPrXd8A+VKt34WT44s4N/RQGkcafHcQjEieHDsrersgrGcu RTGwnLM/8PIct1QZ1jEBPtBDY7jx+ds9hacEtG4AUI92oiadWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwJ5SwFcargetuk2lOEeURic4zJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTg0NWJkOWUtOGMzNC0z MjUyLTkwNmUtNjFmM2Q0YWI1OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx+YPmrs1tyKBeuJ4iKovBIwzwFMxzuYlCV3wiAHuF6EUJWIBjgHorI NbdpwnK15vFPuGGafyu6vbQuSmu8QbJ7eTbN5jn6cBSmHqXPAfSlQsW2bbXc3Mad n5p9SRcyi1XobpcwQcB7mVMxWOYgiXwKy37hK+7MywTmYC6e1IaWbCf+Acl+Lhpm 0WSeMI+hNi5afllQEgW7jjjgDnL3/FO7GuPD74otuUxs+bxQk4guGtDaCWTQNpTW ojmHN6OAsSzLLT8SYxp8sdIS69UmrOhny1h2w26l12V/cPWH6Un1/iR3Plfqja3e G0pMxOSXfExt3IV62ujNbGMP0TztHa4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:04 2026 by rpki-client