$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa File: 8d11a6dc-c42d-3aef-a681-9c223790c69b.roa (raw, json) Hash identifier: pOu63txgheEF500levcn4vieGJJ3qKV0HagvrVy7Nrw= Subject key identifier: 5B:F5:1C:92:68:D0:DD:05:8A:5E:93:EE:A3:BF:E1:C1:84:D7:36:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8100175C7013716A9227C880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 7725 IP address blocks: 71.204.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:17:5c:70:13:71:6a:92:27:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=4ff288d0-c1da-4841-a6f2-701a0f834c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:ae:ca:f4:3c:2e:c3:c7:a7:d9:1b:dd:8d: c2:d1:b9:e7:7e:ac:23:66:aa:5f:70:c2:44:2c:03: 4e:10:36:cd:13:7d:ab:bd:a9:18:fa:e5:03:37:3e: 86:ef:d7:07:fe:d3:0f:09:54:35:76:ec:f3:72:9c: dd:f1:93:75:96:14:bf:11:f1:1b:63:4b:2e:6a:a3: b2:a1:49:61:6b:3f:94:94:11:4d:8e:22:08:75:76: 5c:1e:a9:a8:13:95:db:db:32:c0:ef:9b:68:c5:c9: 9b:c2:e3:a6:92:ec:64:68:a5:b6:73:85:97:e2:5e: 57:e3:81:78:3c:94:44:28:b5:dd:d0:6f:0a:55:c6: 4f:59:27:12:e7:e7:8f:42:f1:b7:28:bc:2d:4e:ef: 8a:8d:f0:fb:88:37:82:ea:e8:5b:45:91:cf:48:5a: b6:3a:52:6e:3c:1d:42:bd:c0:f6:63:7c:19:5b:4d: a3:7d:a1:96:fc:f5:5f:3b:0e:22:d8:53:d4:9b:6a: 5b:76:5e:9d:b1:be:07:bd:a0:55:c3:62:f2:10:fe: ce:81:e7:47:41:88:f6:22:17:d3:a8:dc:cf:53:5a: 09:47:7f:4a:ca:70:52:c1:cb:aa:f3:ee:0d:e6:aa: 6d:5a:22:05:e4:fb:06:fb:17:fd:25:59:f0:74:bf: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:1C:92:68:D0:DD:05:8A:5E:93:EE:A3:BF:E1:C1:84:D7:36:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d11a6dc-c42d-3aef-a681-9c223790c69b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:a4:8d:8a:fb:d1:70:bd:58:d0:87:50:14:83:26:4a:8a:09: 80:08:52:93:46:3b:d8:50:f9:d4:0f:3e:a6:71:b2:5f:e4:ba: d6:22:66:be:4e:af:b5:63:8f:f1:c4:06:ea:4b:f5:49:1c:b6: 0b:b8:f1:d8:e3:dd:e7:97:6e:5e:23:09:70:7a:fb:59:97:0a: a0:8e:29:bc:99:5b:10:a7:05:80:79:69:40:64:4e:c4:c1:7b: 3e:c5:6f:ef:04:bb:89:2c:ea:03:5c:4e:73:5d:54:8b:ea:d8: 05:bb:3d:80:6d:6a:4f:fc:cc:f3:12:f9:d3:e4:d4:40:4e:36: 31:d5:b2:2e:66:66:bc:1e:63:95:14:f8:ac:4e:0a:01:6e:81: 47:a3:ec:c4:e1:73:18:b1:bd:c2:e8:4c:fe:4f:8d:bf:b9:6d: 3d:eb:42:20:2a:9a:a5:8e:f9:88:d5:8d:65:8a:19:89:6a:ec: f5:1a:b9:fd:60:57:58:52:a7:71:5b:0d:d6:09:c1:bc:a5:a3: 4d:c5:b2:75:3b:19:7b:9f:64:8e:8e:39:c7:88:fb:fe:51:54: 77:aa:f6:9a:eb:d2:7b:0c:de:4c:a9:8b:ca:cf:53:41:68:51: 6a:45:74:12:8e:93:28:32:5c:39:d7:a5:3f:07:e5:00:3c:01: bd:35:b5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BABdccBNxapInyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NGZmMjg4ZDAtYzFkYS00ODQxLWE2ZjItNzAxYTBmODM0YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx16uyvQ8LsPHp9kb3Y3C0bnnfqwjZqpfcMJE LANOEDbNE32rvakY+uUDNz6G79cH/tMPCVQ1duzzcpzd8ZN1lhS/EfEbY0suaqOy oUlhaz+UlBFNjiIIdXZcHqmoE5Xb2zLA75toxcmbwuOmkuxkaKW2c4WX4l5X44F4 PJREKLXd0G8KVcZPWScS5+ePQvG3KLwtTu+KjfD7iDeC6uhbRZHPSFq2OlJuPB1C vcD2Y3wZW02jfaGW/PVfOw4i2FPUm2pbdl6dsb4HvaBVw2LyEP7OgedHQYj2IhfT qNzPU1oJR39KynBSwcuq8+4N5qptWiIF5PsG+xf9JVnwdL/Z5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv1HJJo0N0Fil6T7qO/4cGE1zZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQxMWE2ZGMtYzQyZC0z YWVmLWE2ODEtOWMyMjM3OTBjNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8wUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANykjYr70XC9WNCHUBSDJkqKCYAIUpNGO9hQ+dQPPqZxsl/kutYiZr5O r7Vjj/HEBupL9Ukctgu48djj3eeXbl4jCXB6+1mXCqCOKbyZWxCnBYB5aUBkTsTB ez7Fb+8Eu4ks6gNcTnNdVIvq2AW7PYBtak/8zPMS+dPk1EBONjHVsi5mZrweY5UU +KxOCgFugUej7MThcxixvcLoTP5Pjb+5bT3rQiAqmqWO+YjVjWWKGYlq7PUauf1g V1hSp3FbDdYJwbylo03FsnU7GXufZI6OOceI+/5RVHeq9prr0nsM3kypi8rPU0Fo UWpFdBKOkygyXDnXpT8H5QA8Ab01tZs= -----END CERTIFICATE-----Generated at Fri Apr 17 10:32:21 2026 by rpki-client