$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa52a5a-bcda-3845-8326-52e75ecec4ce.roa File: 2fa52a5a-bcda-3845-8326-52e75ecec4ce.roa (raw, json) Hash identifier: GhEhfmBWds4Z8RJxGOqExxbgKlOKHG6ElnDcBbhU7XM= Subject key identifier: B2:1D:EB:1D:49:90:B0:23:F0:98:4B:C5:3C:E5:74:3B:9F:79:CC:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA9FBDE9998776EAC1A080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa52a5a-bcda-3845-8326-52e75ecec4ce.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 71.232.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:9f:bd:e9:99:87:76:ea:c1:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d3777a01-e028-43b2-8990-6f6b736f694c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:42:ae:3c:dc:77:db:6d:66:04:48:c6:8d: 0d:89:f5:5c:13:36:e7:8e:75:50:1c:4e:4a:23:fc: 48:2b:84:95:45:e9:9c:99:3f:66:5e:10:9e:b0:fb: 22:b3:2e:06:3f:55:10:ae:1c:90:5a:b0:b4:55:a7: 96:3a:6e:3f:8b:13:51:e3:41:57:a7:a1:36:5d:82: 7d:28:28:52:5c:c0:cc:3b:e7:03:2d:9f:cc:7d:87: ab:c7:75:b8:90:dd:7d:6e:f2:16:9a:3e:9d:62:1d: f1:15:4c:78:c4:2b:03:79:c4:93:c8:d2:2f:fb:f4: d5:80:af:b9:fa:de:c4:72:74:a5:bd:ba:68:23:ed: c7:e1:21:9f:8b:95:80:49:af:cf:10:a8:d0:58:ca: 32:05:39:6b:37:88:96:5f:66:df:9a:d8:7f:46:70: e6:5b:ca:bb:68:7b:54:a6:4b:f5:ed:b9:42:5f:99: 21:f4:ca:e9:b4:b0:2b:1b:db:b2:60:2b:7d:1a:4a: da:1d:33:f8:5e:1f:ae:c1:db:0f:99:78:32:69:aa: 34:c6:ab:bc:aa:16:53:96:cd:1a:05:73:da:8a:a8: 4c:0a:0a:1d:d4:cd:b8:b7:8f:5d:b9:3a:c3:f2:27: 5d:82:86:1e:5c:61:4e:80:39:d8:27:96:75:8a:9b: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:EB:1D:49:90:B0:23:F0:98:4B:C5:3C:E5:74:3B:9F:79:CC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fa52a5a-bcda-3845-8326-52e75ecec4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:07:c8:28:ca:bf:27:cd:0f:75:4b:47:a6:71:17:f2:56:53: ca:3b:e1:3c:8c:4a:11:47:ac:03:bf:e9:0b:93:ef:7a:d4:55: 6b:90:ca:1f:a9:26:17:2f:16:40:ab:98:e4:8c:32:a0:0c:e1: ec:90:20:10:08:d4:e6:32:3d:15:9e:18:91:7a:8e:80:06:71: de:ac:a0:34:32:a0:51:1f:cf:18:e7:ab:77:d2:44:17:dd:6d: be:10:52:2a:59:f8:d0:20:f3:b2:61:44:08:f0:25:4c:ab:31: 57:75:c0:e6:b0:66:a9:b5:4e:11:73:ce:c6:3c:d6:05:11:72: 5a:6d:39:a2:8b:cd:4c:7b:eb:0e:5d:ca:49:54:8d:80:f3:ed: 97:fd:58:bc:01:a7:e9:ec:b8:05:56:22:a6:67:14:e8:54:0b: 76:35:2b:bd:88:1a:f0:d8:a9:a5:a9:4f:ec:d4:93:52:04:70: 05:18:db:94:97:02:37:12:b2:38:54:42:74:1d:74:e6:11:37: 7b:44:24:6f:ec:83:ff:37:c0:3c:b0:24:a8:9b:48:c3:8e:89: 47:df:57:fa:16:4b:55:dc:b9:0f:a1:ac:37:20:c5:7f:e6:c1: d1:62:69:f7:98:61:0c:a3:5c:6d:cb:a7:1e:a8:6c:eb:ca:b9: 97:23:dc:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vup+96ZmHdurBoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDM3NzdhMDEtZTAyOC00M2IyLTg5OTAtNmY2YjczNmY2OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ZCrjzcd9ttZgRIxo0NifVcEzbnjnVQHE5K I/xIK4SVRemcmT9mXhCesPsisy4GP1UQrhyQWrC0VaeWOm4/ixNR40FXp6E2XYJ9 KChSXMDMO+cDLZ/MfYerx3W4kN19bvIWmj6dYh3xFUx4xCsDecSTyNIv+/TVgK+5 +t7EcnSlvbpoI+3H4SGfi5WASa/PEKjQWMoyBTlrN4iWX2bfmth/RnDmW8q7aHtU pkv17blCX5kh9MrptLArG9uyYCt9GkraHTP4Xh+uwdsPmXgyaao0xqu8qhZTls0a BXPaiqhMCgod1M24t49duTrD8iddgoYeXGFOgDnYJ5Z1ipvM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLId6x1JkLAj8JhLxTzldDufecxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZhNTJhNWEtYmNkYS0z ODQ1LTgzMjYtNTJlNzVlY2VjNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+iIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEHyCjKvyfND3VLR6ZxF/JWU8o74TyMShFHrAO/6QuT73rUVWuQyh+p JhcvFkCrmOSMMqAM4eyQIBAI1OYyPRWeGJF6joAGcd6soDQyoFEfzxjnq3fSRBfd bb4QUipZ+NAg87JhRAjwJUyrMVd1wOawZqm1ThFzzsY81gURclptOaKLzUx76w5d yklUjYDz7Zf9WLwBp+nsuAVWIqZnFOhUC3Y1K72IGvDYqaWpT+zUk1IEcAUY25SX AjcSsjhUQnQddOYRN3tEJG/sg/83wDywJKibSMOOiUffV/oWS1XcuQ+hrDcgxX/m wdFiafeYYQyjXG3Lpx6obOvKuZcj3IA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:20:23 2026 by rpki-client