$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86fef570-f7af-38c8-8020-737b23ea2c6b.roa File: 86fef570-f7af-38c8-8020-737b23ea2c6b.roa (raw, json) Hash identifier: s1QuPFRFqej0tA1DNZ7AyNy3LMc5b2d+Q3yoqgj+wsc= Subject key identifier: C9:A5:02:C8:81:4B:B9:89:4B:65:5B:2A:55:FD:76:B5:AF:F4:06:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA59F587B36783F30A4180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86fef570-f7af-38c8-8020-737b23ea2c6b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.193.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:59:f5:87:b3:67:83:f3:0a:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=644ab553-96e8-4289-b64b-1ad630309038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:b9:c5:33:43:79:25:c7:99:cb:a1:af:06: 86:5b:fb:16:bc:c2:95:69:b5:86:04:0e:3b:7b:0c: a5:d6:e3:8c:ab:89:70:f1:2d:b0:33:d3:3a:54:99: fd:00:2b:54:75:eb:5a:26:45:b1:81:71:c6:46:1a: cc:9c:bc:07:3c:b3:57:b9:d0:db:13:76:76:e6:cf: fe:0a:75:19:3f:60:41:be:3a:76:e7:b7:71:3c:c2: f9:a1:fb:b1:f6:41:7f:80:c7:01:c0:fe:c8:30:02: ae:ed:92:f8:86:a3:7e:fb:5b:24:67:de:a3:3d:2f: 2d:19:e6:0b:bb:87:1d:4b:6a:5a:ff:61:37:94:71: 3c:26:77:27:de:41:db:15:6f:ec:55:0f:d5:8d:95: 37:e4:c1:3f:95:04:a9:e9:04:40:1c:f1:17:0d:5c: f0:a4:30:e0:6e:74:e1:8a:d0:2b:67:7c:f6:1b:21: 36:78:07:14:f3:62:9d:57:bd:17:06:6b:bf:18:9a: 59:e3:2f:76:8b:a4:a6:88:c3:05:96:22:8a:a1:ea: 51:78:24:79:4e:4f:99:23:16:f3:59:3a:0a:3f:a5: 72:af:a9:1b:8b:d8:56:6a:12:ec:f1:70:29:84:8d: 60:0b:a3:b8:25:c1:a2:8b:b0:f4:31:ef:d4:bb:08: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A5:02:C8:81:4B:B9:89:4B:65:5B:2A:55:FD:76:B5:AF:F4:06:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86fef570-f7af-38c8-8020-737b23ea2c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c7:a0:1d:8e:07:83:1e:ca:45:f7:52:ab:12:fe:78:26:27: 21:ba:d0:70:14:13:52:e4:5c:a5:c8:ae:43:f5:87:89:53:42: 01:20:5b:39:63:cc:62:d6:a9:34:dc:f7:38:54:c2:c6:26:f1: bd:41:75:ca:6c:50:3b:2e:66:81:25:73:a3:84:92:39:81:60: bc:dd:4a:4c:50:cf:cd:00:1d:b0:08:3d:bb:2c:6f:0e:34:de: 94:96:ce:ae:c0:e0:8b:0f:92:62:9f:49:4f:b8:d4:23:14:a8: 10:c2:07:c1:9e:d7:80:b9:5f:66:2f:fb:7b:14:7a:a6:2a:8e: 7d:dc:55:60:51:b2:45:9a:9a:a0:6e:91:c5:71:ae:a4:72:fe: 68:5d:b3:42:0b:21:6b:19:bb:27:8d:a6:f9:65:7b:8d:49:70: 18:22:35:b5:f9:18:d7:c6:d1:33:90:15:46:d3:f8:17:30:25: 8e:1c:28:e9:5b:2a:f9:e1:43:e6:a8:f6:2b:aa:7e:13:d8:a0: 3b:5f:ff:fb:6a:f1:84:f4:fb:6a:bf:0f:62:65:8c:1b:0e:16: 76:a9:44:db:10:fe:aa:67:63:bf:52:a6:b5:3e:0c:6b:ac:cd: f9:ef:8d:0b:d1:e7:47:98:f8:1f:f7:ca:78:80:3c:83:f2:4f: a9:e9:ad:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuln1h7Nng/MKQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjQ0YWI1NTMtOTZlOC00Mjg5LWI2NGItMWFkNjMwMzA5MDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv+5xTNDeSXHmcuhrwaGW/sWvMKVabWGBA47 ewyl1uOMq4lw8S2wM9M6VJn9ACtUdetaJkWxgXHGRhrMnLwHPLNXudDbE3Z25s/+ CnUZP2BBvjp257dxPML5ofux9kF/gMcBwP7IMAKu7ZL4hqN++1skZ96jPS8tGeYL u4cdS2pa/2E3lHE8Jncn3kHbFW/sVQ/VjZU35ME/lQSp6QRAHPEXDVzwpDDgbnTh itArZ3z2GyE2eAcU82KdV70XBmu/GJpZ4y92i6SmiMMFliKKoepReCR5Tk+ZIxbz WToKP6Vyr6kbi9hWahLs8XAphI1gC6O4JcGii7D0Me/UuwhV5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmlAsiBS7mJS2VbKlX9drWv9AbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZmZWY1NzAtZjdhZi0z OGM4LTgwMjAtNzM3YjIzZWEyYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8H8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHHoB2OB4MeykX3UqsS/ngmJyG60HAUE1LkXKXIrkP1h4lTQgEgWzlj zGLWqTTc9zhUwsYm8b1BdcpsUDsuZoElc6OEkjmBYLzdSkxQz80AHbAIPbssbw40 3pSWzq7A4IsPkmKfSU+41CMUqBDCB8Ge14C5X2Yv+3sUeqYqjn3cVWBRskWamqBu kcVxrqRy/mhds0ILIWsZuyeNpvlle41JcBgiNbX5GNfG0TOQFUbT+BcwJY4cKOlb KvnhQ+ao9iuqfhPYoDtf//tq8YT0+2q/D2JljBsOFnapRNsQ/qpnY79SprU+DGus zfnvjQvR50eY+B/3yniAPIPyT6nprcw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:33 2026 by rpki-client