$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9034cb-c92e-3ac7-881b-d90a061f9f77.roa File: 4f9034cb-c92e-3ac7-881b-d90a061f9f77.roa (raw, json) Hash identifier: IHUS6GhIBbvaCs1XO0SgqIMLnjzE8DlptpKEGih1Ya0= Subject key identifier: AE:FB:3A:50:6F:B3:42:C5:35:6D:A8:E1:F9:ED:EC:97:FC:60:C8:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D810045CC2B1ADAD1E22EE880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9034cb-c92e-3ac7-881b-d90a061f9f77.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 33287 IP address blocks: 71.225.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:45:cc:2b:1a:da:d1:e2:2e:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=7d697c6a-2a42-411f-85a0-7bd89e2f7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:57:2c:05:21:e4:bd:47:aa:4c:93:5b:8f: 5b:f0:da:63:15:5d:41:fb:28:0a:76:3d:74:f2:98: 80:2d:e9:8b:c2:42:45:62:28:16:d1:25:e4:06:24: af:d3:2b:3b:c3:8a:01:90:f4:6a:0c:df:8b:3b:a1: b0:13:b8:8c:46:72:35:3f:ac:c8:39:aa:8b:2a:b8: 31:18:ee:07:dd:4c:85:79:9f:2d:54:8b:bc:5f:1d: 70:0c:99:32:da:a5:e6:47:27:f1:0f:86:10:e2:18: 4f:91:b4:56:0d:cf:e2:c2:57:9a:fd:0e:06:34:67: f6:b5:01:6b:7a:60:39:7d:11:9e:18:8f:0f:14:ba: 24:d2:b3:ca:98:5c:2f:ee:d1:60:23:f2:ce:a8:b1: df:cb:69:9f:51:95:a7:e6:8a:8c:4d:bb:42:6f:7d: 21:32:a1:dd:75:0d:11:6a:53:0d:79:ee:f5:0d:61: 66:2a:34:c5:d1:a0:31:0e:ce:12:38:1e:e5:1f:87: bc:e5:d7:13:d2:63:55:b2:5d:35:cd:ba:eb:94:73: 9c:7b:5a:fa:62:1b:ad:18:2d:fa:5d:78:2e:3a:05: e5:dc:f7:58:cf:9f:ad:8f:ab:71:18:f7:f4:7f:24: 55:bc:e2:a2:5d:e2:ea:d5:15:a1:24:fc:08:83:d8: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:3A:50:6F:B3:42:C5:35:6D:A8:E1:F9:ED:EC:97:FC:60:C8:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f9034cb-c92e-3ac7-881b-d90a061f9f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:5d:0a:05:fb:f6:13:d7:80:df:de:88:b8:a5:f3:12:b6:fa: cc:fa:bb:09:34:a6:50:58:5a:3a:d0:67:6d:01:5e:d3:67:bc: a7:da:4f:2d:28:00:de:c6:48:b7:6d:8b:94:1e:de:54:c7:aa: b8:e4:e3:c9:91:5f:d4:71:72:22:a5:a1:e3:e9:bf:86:f8:3d: 90:c5:38:ff:c7:bd:a4:ce:50:14:c2:c0:00:5a:8a:fe:79:ce: 80:d4:d9:62:20:f7:f0:ac:e5:6e:52:6a:9c:63:58:fe:fc:d5: 76:05:c1:cd:da:6a:89:94:78:32:b8:1e:e0:04:9d:19:2f:79: 22:8f:8c:94:60:7e:a4:5c:0d:f0:0d:bf:90:d2:06:ed:ff:fe: 68:d5:f4:3a:b2:78:37:35:12:80:3e:96:be:75:64:f0:75:05: 88:3e:2f:06:90:41:57:1a:ca:57:2f:2e:14:10:ed:f4:38:7f: f4:00:74:2e:8a:ab:2f:53:33:a8:4c:52:a6:9e:24:1d:94:6c: 68:65:31:ef:c7:11:92:57:98:3a:74:69:24:85:e7:02:99:27: 7b:90:64:45:11:4c:2a:b3:7a:65:86:9d:e2:f7:56:84:ba:15: c8:6b:31:37:7e:b7:59:c1:a0:9f:5a:7b:8b:42:11:32:b3:29: 42:4c:a1:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAEXMKxra0eIu6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk N2Q2OTdjNmEtMmE0Mi00MTFmLTg1YTAtN2JkODllMmY3ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiChXLAUh5L1HqkyTW49b8NpjFV1B+ygKdj10 8piALemLwkJFYigW0SXkBiSv0ys7w4oBkPRqDN+LO6GwE7iMRnI1P6zIOaqLKrgx GO4H3UyFeZ8tVIu8Xx1wDJky2qXmRyfxD4YQ4hhPkbRWDc/iwlea/Q4GNGf2tQFr emA5fRGeGI8PFLok0rPKmFwv7tFgI/LOqLHfy2mfUZWn5oqMTbtCb30hMqHddQ0R alMNee71DWFmKjTF0aAxDs4SOB7lH4e85dcT0mNVsl01zbrrlHOce1r6YhutGC36 XXguOgXl3PdYz5+tj6txGPf0fyRVvOKiXeLq1RWhJPwIg9g2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK77OlBvs0LFNW2o4fnt7Jf8YMgdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY5MDM0Y2ItYzkyZS0z YWM3LTg4MWItZDkwYTA2MWY5Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRdCgX79hPXgN/eiLil8xK2+sz6uwk0plBYWjrQZ20BXtNnvKfaTy0o AN7GSLdti5Qe3lTHqrjk48mRX9RxciKloePpv4b4PZDFOP/HvaTOUBTCwABaiv55 zoDU2WIg9/Cs5W5SapxjWP781XYFwc3aaomUeDK4HuAEnRkveSKPjJRgfqRcDfAN v5DSBu3//mjV9DqyeDc1EoA+lr51ZPB1BYg+LwaQQVcaylcvLhQQ7fQ4f/QAdC6K qy9TM6hMUqaeJB2UbGhlMe/HEZJXmDp0aSSF5wKZJ3uQZEURTCqzemWGneL3VoS6 FchrMTd+t1nBoJ9ae4tCETKzKUJMoYk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:23 2026 by rpki-client