$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa File: 3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa (raw, json) Hash identifier: kTPPC1rADpMWM9AdIreKfXpb+q/BbwqtDv2votSlmMQ= Subject key identifier: 29:1D:71:E8:35:33:7E:5C:5F:72:A4:0F:2B:AB:E0:E5:7A:3E:05:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA5D84C91CD8B7AFCD2140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.238.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:5d:84:c9:1c:d8:b7:af:cd:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2a6c6b04-50f7-45e2-92ea-badbe8d25de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:7b:69:9e:80:5c:3f:98:6a:49:2d:54:7e: b5:04:d9:34:03:c4:0c:45:15:ee:f7:18:6c:68:04: cd:22:74:a2:b8:30:0f:2a:cb:cd:c4:71:d8:f8:1e: 9a:c7:bb:56:c4:9e:16:f1:f6:68:35:9f:79:8d:fa: 51:97:be:f9:31:4b:e3:33:d8:16:59:08:53:66:89: 20:19:c6:08:c9:2e:3e:71:bc:bf:ba:b3:f6:d4:4a: 2d:8f:28:78:4b:55:da:4b:8a:79:db:23:c8:32:b2: f9:52:0e:ab:20:16:bd:55:c0:ba:bf:f8:2f:21:8a: 3d:15:46:09:21:63:b1:e0:d4:69:69:fe:7c:8d:21: a5:07:ae:e1:a3:13:8d:eb:bc:67:74:1e:ef:57:a8: 8f:52:0b:47:83:21:b2:73:70:7d:ca:00:ef:e5:66: 78:b9:04:df:91:75:bc:6b:3a:f6:c5:95:dc:f7:d1: f8:78:5b:45:1a:4e:59:48:ab:ad:cc:73:06:4a:2f: a4:01:ec:b5:ff:04:17:a0:66:21:b1:61:2c:8f:e9: 4c:49:bd:c3:d1:b9:da:ec:85:5a:a7:5d:f2:cd:ff: dc:79:01:56:22:15:31:18:68:71:d9:8f:72:27:79: 70:c1:30:36:10:cd:07:86:12:50:85:4f:78:40:ca: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1D:71:E8:35:33:7E:5C:5F:72:A4:0F:2B:AB:E0:E5:7A:3E:05:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ec:2e:67:b4:52:31:80:7d:85:65:ce:16:0d:8b:8c:1c:cf: 36:d8:96:4d:c5:82:fd:8c:e5:42:42:bc:00:f1:41:6a:3e:f8: b4:73:b0:56:a6:4f:15:e6:c3:8a:93:44:1d:3d:3c:7b:3e:7c: 8f:75:20:1f:0d:7c:01:0d:b9:27:64:ee:7c:66:bf:1e:53:fa: ab:84:ae:48:68:09:42:67:87:b4:41:f0:32:40:ce:3f:29:47: 82:56:16:c3:28:ec:b0:ca:b7:43:4c:5c:4e:6e:20:02:72:e2: cc:10:38:b2:91:6f:a1:bc:3f:41:46:2d:f5:cc:61:23:5a:de: 5c:77:83:aa:b7:d7:91:77:b3:02:c5:8a:81:f7:4e:8f:13:86: bd:36:b6:ea:cf:cc:55:14:c1:ab:79:48:2a:ce:7f:1c:b6:2d: dc:62:8b:04:81:42:0b:4f:b3:92:dd:8e:1f:af:09:85:54:62: 5a:54:e5:b4:7a:8c:17:35:df:1e:3e:d8:84:7b:ad:fb:d4:39: bc:3c:eb:db:2b:3a:cb:75:fe:8f:c8:e6:0f:ca:b1:09:91:a0: 6e:94:d3:df:2d:57:88:c2:97:d8:cb:83:4a:51:72:ee:e7:a8: ca:9b:73:40:cf:59:39:5f:21:4a:22:11:dc:0d:10:a4:8c:91: 4d:fc:5f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vul2EyRzYt6/NIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmE2YzZiMDQtNTBmNy00NWUyLTkyZWEtYmFkYmU4ZDI1ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL17aZ6AXD+YakktVH61BNk0A8QMRRXu9xhs aATNInSiuDAPKsvNxHHY+B6ax7tWxJ4W8fZoNZ95jfpRl775MUvjM9gWWQhTZokg GcYIyS4+cby/urP21Eotjyh4S1XaS4p52yPIMrL5Ug6rIBa9VcC6v/gvIYo9FUYJ IWOx4NRpaf58jSGlB67hoxON67xndB7vV6iPUgtHgyGyc3B9ygDv5WZ4uQTfkXW8 azr2xZXc99H4eFtFGk5ZSKutzHMGSi+kAey1/wQXoGYhsWEsj+lMSb3D0bna7IVa p13yzf/ceQFWIhUxGGhx2Y9yJ3lwwTA2EM0HhhJQhU94QMqcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkdceg1M35cX3KkDyur4OV6PgV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhNzQ4NTQtYjEyMi0z ZDNlLWE1OWQtZDVhMmUwMGVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHsLme0UjGAfYVlzhYNi4wczzbYlk3Fgv2M5UJCvADxQWo++LRzsFam TxXmw4qTRB09PHs+fI91IB8NfAENuSdk7nxmvx5T+quErkhoCUJnh7RB8DJAzj8p R4JWFsMo7LDKt0NMXE5uIAJy4swQOLKRb6G8P0FGLfXMYSNa3lx3g6q315F3swLF ioH3To8Thr02turPzFUUwat5SCrOfxy2LdxiiwSBQgtPs5Ldjh+vCYVUYlpU5bR6 jBc13x4+2IR7rfvUObw869srOst1/o/I5g/KsQmRoG6U098tV4jCl9jLg0pRcu7n qMqbc0DPWTlfIUoiEdwNEKSMkU38X4k= -----END CERTIFICATE-----Generated at Fri Apr 17 03:18:04 2026 by rpki-client