$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7682f9c4-e677-39ed-b32c-5869b2d0af14.roa File: 7682f9c4-e677-39ed-b32c-5869b2d0af14.roa (raw, json) Hash identifier: NrrOUa4TminUew8oCqtjf8b0aL4XmHti7DEv9GZ+azY= Subject key identifier: 9F:4C:74:2A:4E:E5:FA:C3:15:FF:7A:63:F4:92:B9:47:D7:2A:E7:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBD3A509EAF11548D9F380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7682f9c4-e677-39ed-b32c-5869b2d0af14.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 71.234.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:d3:a5:09:ea:f1:15:48:d9:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2b1df187-6a2b-4af2-b24f-c084ffd32343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:48:41:45:33:1e:46:fb:97:95:db:54:f5: 3a:2e:80:de:78:13:3a:31:e6:2d:fd:af:cc:ad:a0: a7:c1:19:84:39:0f:9d:c3:a8:7c:75:c8:6b:44:55: 88:0b:c8:9a:3f:5d:dd:9f:09:ac:81:a7:47:4b:1d: 4c:3e:25:02:cf:27:ef:a7:5a:64:f7:56:71:cc:01: e6:49:6b:f0:c7:54:75:17:e0:b8:fd:3b:8a:5a:36: f7:7c:f6:e6:7b:03:73:df:68:a4:81:f0:03:a7:b0: cf:95:d0:93:95:3c:41:4a:d5:78:c4:94:7f:e9:91: 37:00:7d:18:91:66:f2:3d:48:5d:aa:14:ed:8e:30: 4f:29:62:3a:f6:a9:90:10:0d:2c:04:98:7c:74:c8: e9:d2:bd:06:aa:88:1e:4d:29:74:80:92:d0:5e:cd: 39:70:cd:5b:17:64:85:cf:cd:bd:21:40:29:2b:6f: f4:44:e6:23:11:13:6f:cc:32:13:20:85:7f:72:46: 1b:86:f0:9b:29:67:0e:d8:da:e8:ea:6c:ca:b9:71: dd:a3:40:7a:4e:02:c8:4b:4f:82:69:b1:7c:da:d7: 84:25:28:c3:89:5d:12:74:05:f9:ca:f3:1c:70:d2: 09:41:e8:6a:2b:73:f9:ac:1c:01:08:1e:45:fc:8b: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:74:2A:4E:E5:FA:C3:15:FF:7A:63:F4:92:B9:47:D7:2A:E7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7682f9c4-e677-39ed-b32c-5869b2d0af14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.234.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d0:9b:29:d7:df:a0:f5:a1:5b:58:8d:0b:c4:c7:40:0a:3b: f8:c1:0f:dc:9e:f3:fa:f1:51:b1:03:12:d5:8b:88:73:2c:d2: 25:d6:bd:82:41:e9:ce:fb:1f:a2:b5:d9:41:18:93:dd:52:c0: 9f:07:6f:4a:af:82:fe:5a:0d:74:e1:e3:de:33:ab:b2:16:64: a5:78:04:ae:2f:ba:fd:b7:4f:02:dc:87:37:7d:b3:cf:08:5d: ed:2f:50:be:75:97:12:37:b4:66:d3:42:75:7c:1b:cd:2e:3d: 43:ab:b7:2c:cc:78:29:7f:11:ae:56:df:74:c6:c6:27:3b:09: 2e:50:e5:e5:65:49:fc:dd:1c:2f:0c:e2:a9:51:62:8d:7a:a4: e0:5f:7a:60:7a:05:dc:9c:d8:fd:53:ae:77:39:8b:77:74:58: de:be:9a:1e:43:26:48:50:91:14:4d:50:e7:2d:73:f2:8b:21: 86:a8:cd:64:94:32:9e:ba:ce:bd:a0:4e:0b:77:fb:a1:a7:9f: e0:45:f1:ed:3f:c5:ee:25:70:bc:a0:96:c3:03:a6:31:34:14: 72:91:9f:39:c3:17:5a:5a:f8:73:48:f6:37:8f:82:a7:c6:f8: ca:c2:a5:17:1a:14:aa:76:8c:ca:39:5c:25:89:8d:f7:05:fd: 9b:dc:c8:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9OlCerxFUjZ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmIxZGYxODctNmEyYi00YWYyLWIyNGYtYzA4NGZmZDMyMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZFIQUUzHkb7l5XbVPU6LoDeeBM6MeYt/a/M raCnwRmEOQ+dw6h8dchrRFWIC8iaP13dnwmsgadHSx1MPiUCzyfvp1pk91ZxzAHm SWvwx1R1F+C4/TuKWjb3fPbmewNz32ikgfADp7DPldCTlTxBStV4xJR/6ZE3AH0Y kWbyPUhdqhTtjjBPKWI69qmQEA0sBJh8dMjp0r0GqogeTSl0gJLQXs05cM1bF2SF z829IUApK2/0ROYjERNvzDITIIV/ckYbhvCbKWcO2Nro6mzKuXHdo0B6TgLIS0+C abF82teEJSjDiV0SdAX5yvMccNIJQehqK3P5rBwBCB5F/IuRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9MdCpO5frDFf96Y/SSuUfXKufpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY4MmY5YzQtZTY3Ny0z OWVkLWIzMmMtNTg2OWIyZDBhZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnQmynX36D1oVtYjQvEx0AKO/jBD9ye8/rxUbEDEtWLiHMs0iXWvYJB 6c77H6K12UEYk91SwJ8Hb0qvgv5aDXTh494zq7IWZKV4BK4vuv23TwLchzd9s88I Xe0vUL51lxI3tGbTQnV8G80uPUOrtyzMeCl/Ea5W33TGxic7CS5Q5eVlSfzdHC8M 4qlRYo16pOBfemB6Bdyc2P1Trnc5i3d0WN6+mh5DJkhQkRRNUOctc/KLIYaozWSU Mp66zr2gTgt3+6Gnn+BF8e0/xe4lcLyglsMDpjE0FHKRnznDF1pa+HNI9jePgqfG +MrCpRcaFKp2jMo5XCWJjfcF/ZvcyOQ= -----END CERTIFICATE-----Generated at Fri Apr 17 10:07:06 2026 by rpki-client