$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa File: 23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa (raw, json) Hash identifier: cX5BVhXHZpyUraNKoUXtCYpXA09M0pCX8Bs+rYyhvcM= Subject key identifier: 1D:3C:35:C6:EE:91:07:88:01:BE:4A:4B:2F:11:E4:EE:82:9B:23:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D810045C0D030B533CC72F600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 33287 IP address blocks: 71.225.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:45:c0:d0:30:b5:33:cc:72:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=3ede0ba3-9606-462d-8808-94c29781628f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:c2:4b:55:16:8f:c0:c2:ff:74:ca:a4:e1: 0d:b5:45:df:97:f7:56:8d:cb:6c:01:65:38:6a:5f: 94:c1:6c:e5:1a:fa:e9:1d:e9:91:fb:39:73:34:24: 66:f9:cf:13:2c:3f:94:e5:d8:38:4e:8d:fb:0a:13: 5c:af:4f:cd:54:31:8c:bd:f7:09:76:fc:5b:59:b8: 6e:1c:9b:59:0d:ab:8f:73:c3:4f:5f:59:9e:23:d4: 8d:f4:89:ad:5e:4a:af:5c:79:5f:1b:1e:e7:0e:f8: 0a:78:e8:d3:3e:e7:d0:45:0a:c5:7a:6f:46:4a:68: 4b:e0:87:b7:77:f8:be:08:8c:b0:13:f2:56:2d:e9: f1:87:29:71:fa:7d:0b:93:69:a2:c3:27:92:f4:f9: f7:b8:a8:07:7f:82:79:d1:47:30:80:bf:9e:84:19: 87:dd:6f:cb:99:71:18:2d:34:00:67:68:a7:99:1e: 10:6c:78:6b:e8:25:0f:03:d7:be:12:f5:b9:36:a7: c6:52:b5:d3:84:20:61:72:e4:7b:e6:d0:9d:91:a1: 40:61:ee:43:d8:cc:a3:9c:38:61:8c:e9:9f:ab:ca: d2:8b:ff:a9:4c:db:cd:b7:84:6d:d2:83:d5:75:20: 3a:c0:d7:ee:3c:65:8c:b7:d8:51:1e:42:28:03:b5: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:35:C6:EE:91:07:88:01:BE:4A:4B:2F:11:E4:EE:82:9B:23:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:09:11:13:0d:6f:ea:dc:a7:31:46:a3:44:ce:d2:62:6e:d5: 93:19:77:4f:b1:b4:f7:7f:d8:bc:86:e1:96:f0:6f:94:d0:6c: 2d:3b:e9:f4:56:20:f7:94:75:87:3c:73:1a:c6:84:aa:78:97: 07:0a:c4:8e:80:cb:31:ec:74:e9:18:8f:ff:3c:85:54:e6:06: 9b:5a:43:b1:ac:20:23:eb:38:db:dc:da:de:1e:0b:50:4a:fb: 7a:3e:3c:b9:5a:4d:db:95:de:64:ac:d7:21:88:ad:87:fd:83: 25:7a:01:c7:d8:34:9e:a2:1a:cb:cf:a2:97:b0:c2:7a:6c:7d: 90:a5:76:2c:1e:42:2d:05:b9:79:8f:f3:35:c2:f5:29:55:25: b5:08:47:b9:23:ea:eb:c5:60:0b:a4:33:d0:33:d0:13:09:6b: b8:dc:53:c9:f6:c1:d7:c8:a9:a8:72:1e:17:af:83:ef:ca:16: 9b:74:20:08:cf:f8:d0:d9:04:4d:70:ba:65:8f:9f:5a:57:60: ac:67:37:d2:26:8c:ae:42:f9:bf:6a:c4:d4:5c:e6:53:bd:2c: dd:54:d8:9a:f8:fc:46:4d:67:36:98:33:cf:9f:3c:f8:98:b2: 35:30:2d:d2:7c:b8:09:5c:01:f3:0c:34:05:ce:62:f2:89:0a: f6:a7:57:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAEXA0DC1M8xy9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk M2VkZTBiYTMtOTYwNi00NjJkLTg4MDgtOTRjMjk3ODE2MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucDCS1UWj8DC/3TKpOENtUXfl/dWjctsAWU4 al+UwWzlGvrpHemR+zlzNCRm+c8TLD+U5dg4To37ChNcr0/NVDGMvfcJdvxbWbhu HJtZDauPc8NPX1meI9SN9ImtXkqvXHlfGx7nDvgKeOjTPufQRQrFem9GSmhL4Ie3 d/i+CIywE/JWLenxhylx+n0Lk2miwyeS9Pn3uKgHf4J50UcwgL+ehBmH3W/LmXEY LTQAZ2inmR4QbHhr6CUPA9e+EvW5NqfGUrXThCBhcuR75tCdkaFAYe5D2MyjnDhh jOmfq8rSi/+pTNvNt4Rt0oPVdSA6wNfuPGWMt9hRHkIoA7Xa2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB08NcbukQeIAb5KSy8R5O6CmyORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNlN2ZiYjctNDNhNi0z ZDU4LTkwZGYtNWE1YjRhMTdjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQJERMNb+rcpzFGo0TO0mJu1ZMZd0+xtPd/2LyG4Zbwb5TQbC076fRW IPeUdYc8cxrGhKp4lwcKxI6AyzHsdOkYj/88hVTmBptaQ7GsICPrONvc2t4eC1BK +3o+PLlaTduV3mSs1yGIrYf9gyV6AcfYNJ6iGsvPopewwnpsfZCldiweQi0FuXmP 8zXC9SlVJbUIR7kj6uvFYAukM9Az0BMJa7jcU8n2wdfIqahyHhevg+/KFpt0IAjP +NDZBE1wumWPn1pXYKxnN9ImjK5C+b9qxNRc5lO9LN1U2Jr4/EZNZzaYM8+fPPiY sjUwLdJ8uAlcAfMMNAXOYvKJCvanV7M= -----END CERTIFICATE-----Generated at Fri Apr 17 05:14:38 2026 by rpki-client