$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a21666-f5c9-3a6a-ac57-8d5441fb6366.roa File: 86a21666-f5c9-3a6a-ac57-8d5441fb6366.roa (raw, json) Hash identifier: aYjRNQSAvLrwAkUCgGfpJYFTZvwpmWrHiXxtCTc8yR0= Subject key identifier: 05:A2:2B:C0:EA:D5:09:F1:DB:A7:98:21:C3:EB:7B:AA:B6:B2:85:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBD121045069FA18C77080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a21666-f5c9-3a6a-ac57-8d5441fb6366.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 71.232.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:d1:21:04:50:69:fa:18:c7:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=159cca26-0590-4fb7-9f3f-2b85ae6a27b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:0c:2d:32:fc:4a:a9:a4:66:ca:8c:cb:f6: 12:a9:3d:b7:f9:e5:32:95:c0:a7:d3:c3:5b:8d:4b: 37:89:e0:67:0a:6e:f3:a1:2f:c8:66:6d:4d:49:55: ed:ff:50:2b:8a:f7:55:ea:5b:2d:96:6b:0b:af:f9: 0c:e7:e9:d5:38:bf:1f:e5:23:37:0f:63:92:d5:04: 2f:6d:1f:2a:5f:8b:b0:a3:ec:8d:a6:f0:ec:96:46: e7:61:6f:d0:e5:20:f0:93:87:4c:ef:c5:57:84:90: f7:e0:98:53:d5:fd:27:d0:46:8e:c7:79:42:e4:b5: b9:7f:30:cc:f3:62:3f:f0:9f:8e:60:70:36:c4:ab: 5d:90:19:87:1d:0e:f0:46:7f:77:47:83:8d:6e:95: 65:eb:ca:da:fc:7d:e2:b2:39:cb:cb:41:e9:67:99: ca:cc:74:76:fe:de:dc:34:b8:b7:00:3a:0a:83:71: 10:b7:6b:72:c1:5a:00:89:96:a3:cb:a5:93:a8:31: 81:a1:3f:f4:79:74:b9:76:b4:f0:a6:4f:30:08:ce: 3b:b3:84:e7:dc:72:50:e4:91:e8:7d:e8:8c:92:5f: fb:03:fb:a7:cd:f3:e7:01:cf:a3:8b:60:89:f0:7f: b5:51:f4:14:57:81:1d:1b:39:d5:7a:15:2b:00:60: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:2B:C0:EA:D5:09:F1:DB:A7:98:21:C3:EB:7B:AA:B6:B2:85:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86a21666-f5c9-3a6a-ac57-8d5441fb6366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.232.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:75:20:0a:5c:ca:8d:6a:10:af:f9:79:0a:7a:ee:45:df:fe: 21:4d:15:47:74:8f:20:b8:ca:c7:13:b8:7c:cb:5e:b6:1b:84: d4:03:47:b0:2d:b6:e0:82:b5:fa:53:b3:f1:e8:67:a8:6d:7c: fd:96:17:33:89:d5:ef:e6:52:e5:64:6e:3d:12:bb:94:2d:3a: 39:35:aa:4d:e4:ee:7b:cf:2c:64:b0:ab:50:2d:e0:95:3f:24: 36:9f:d0:97:c5:cf:3d:f2:dd:49:02:9b:20:53:77:46:19:87: e1:24:29:5a:8a:9b:80:b3:1f:96:e4:78:aa:02:0a:cf:16:36: 3e:c0:93:f3:a4:8c:62:06:ff:51:c4:b2:9d:59:76:61:b3:22: 03:5b:e8:13:5b:55:61:ce:30:e8:65:7a:56:3e:5e:fa:8d:f9: 7e:c0:33:df:16:94:cd:ae:10:24:94:25:61:40:f7:d7:5d:c3: 14:b1:f9:3f:7a:4e:ca:ce:a3:d3:16:0d:f9:0a:e3:0a:67:c2: 68:f0:c9:00:35:6e:c8:15:e7:84:5d:f8:b7:6a:d9:cf:2d:b2: c1:e9:c0:c8:70:cc:97:a0:69:dc:63:da:dc:7d:3b:f4:92:3e: f8:78:e8:b5:a0:0b:dc:cb:53:9e:da:f0:bc:23:20:c4:6d:2c: b9:f7:d9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9EhBFBp+hjHcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTU5Y2NhMjYtMDU5MC00ZmI3LTlmM2YtMmI4NWFlNmEyN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdoMLTL8SqmkZsqMy/YSqT23+eUylcCn08Nb jUs3ieBnCm7zoS/IZm1NSVXt/1ArivdV6lstlmsLr/kM5+nVOL8f5SM3D2OS1QQv bR8qX4uwo+yNpvDslkbnYW/Q5SDwk4dM78VXhJD34JhT1f0n0EaOx3lC5LW5fzDM 82I/8J+OYHA2xKtdkBmHHQ7wRn93R4ONbpVl68ra/H3isjnLy0HpZ5nKzHR2/t7c NLi3ADoKg3EQt2tywVoAiZajy6WTqDGBoT/0eXS5drTwpk8wCM47s4Tn3HJQ5JHo feiMkl/7A/unzfPnAc+ji2CJ8H+1UfQUV4EdGznVehUrAGBriQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWiK8Dq1Qnx26eYIcPre6q2soWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZhMjE2NjYtZjVjOS0z YTZhLWFjNTctOGQ1NDQxZmI2MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh1IApcyo1qEK/5eQp67kXf/iFNFUd0jyC4yscTuHzLXrYbhNQDR7At tuCCtfpTs/HoZ6htfP2WFzOJ1e/mUuVkbj0Su5QtOjk1qk3k7nvPLGSwq1At4JU/ JDaf0JfFzz3y3UkCmyBTd0YZh+EkKVqKm4CzH5bkeKoCCs8WNj7Ak/OkjGIG/1HE sp1ZdmGzIgNb6BNbVWHOMOhlelY+XvqN+X7AM98WlM2uECSUJWFA99ddwxSx+T96 TsrOo9MWDfkK4wpnwmjwyQA1bsgV54Rd+Ldq2c8tssHpwMhwzJegadxj2tx9O/SS Pvh46LWgC9zLU57a8LwjIMRtLLn32SE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:44 2026 by rpki-client