$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcf1672c-9aef-3e8f-a067-01abe7dfda89.roa File: bcf1672c-9aef-3e8f-a067-01abe7dfda89.roa (raw, json) Hash identifier: snTaIH+z+0J/vWB/n9WjxxNQGOWRzBKlagHU/2Cj7tE= Subject key identifier: 49:AB:77:45:EC:35:22:C4:49:91:54:44:6A:5F:E9:84:E5:A6:C9:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB937E0F290EF0D7C10060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcf1672c-9aef-3e8f-a067-01abe7dfda89.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.238.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:93:7e:0f:29:0e:f0:d7:c1:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=9395d3dd-93ff-45e7-8c05-66781c6658b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:5c:fb:e4:89:5d:31:57:6a:f1:a7:c0:10: 80:20:f3:4a:cc:92:e3:d2:29:99:91:9a:1d:ee:d9: 03:7e:e4:c5:b1:66:fd:b9:92:b1:c7:87:37:b1:62: cd:34:d8:3a:b8:5f:03:8f:15:f4:66:4a:c2:0b:30: 0c:80:57:a8:7f:18:94:6d:45:f3:e4:65:a9:4b:b6: 40:fe:23:87:69:ad:f4:f8:22:c1:59:44:67:4d:78: ad:8b:12:dc:a9:2a:9c:57:d1:28:e5:bb:d9:1c:15: 90:1f:5e:5c:91:3b:48:96:fb:b0:87:52:c4:33:e8: bd:c2:76:07:d8:ad:f4:6d:a6:83:fb:b2:ff:d2:88: 06:81:be:56:3a:ff:e7:80:72:f9:ad:54:95:9b:fd: a7:df:8d:62:3c:1e:a9:6b:69:8e:15:55:fc:06:11: 05:f1:86:2d:1a:c0:0e:6f:79:82:6a:3f:a7:7c:a9: 55:fd:12:d2:7a:21:fd:d0:97:de:53:92:c8:95:87: dd:37:e5:a9:5c:bb:35:ae:2b:5f:76:8f:76:d6:d9: 19:32:69:68:9f:a7:2c:1d:41:9c:43:19:a1:f2:45: e9:fa:00:e4:05:67:03:21:1a:ee:03:9d:78:0a:92: dd:4d:a4:8a:f2:f5:43:0c:63:92:39:00:18:c3:d7: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:77:45:EC:35:22:C4:49:91:54:44:6A:5F:E9:84:E5:A6:C9:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcf1672c-9aef-3e8f-a067-01abe7dfda89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:68:7c:f2:e1:dd:6f:f9:cf:f6:5e:08:81:a5:91:0a:d2:ac: 69:80:bc:ed:ad:19:01:06:70:fa:8d:d1:a6:53:d7:3f:eb:02: d7:e7:47:d7:aa:8a:df:d7:9d:cf:ec:80:ae:fc:55:77:70:69: 24:77:d4:a8:24:7b:a1:70:02:b4:c6:37:67:bd:ab:f9:9a:f9: 03:c1:60:fa:36:58:aa:07:77:2c:34:cf:bc:e6:c3:23:81:1f: 9d:8a:af:cf:eb:7b:7e:da:64:3e:37:5e:a3:c0:71:72:bc:f3: 1c:de:2a:64:56:8e:49:a0:0a:f4:9e:2d:df:79:a8:4b:07:c1: f7:91:4c:61:1a:3e:a7:7d:68:be:b6:79:dc:80:6b:32:c8:47: af:d3:04:8f:f4:ea:5a:5e:20:0a:2c:47:3d:7d:c7:4d:44:11: dc:b6:a6:bb:8e:6a:23:74:4d:85:0e:af:fb:e8:be:3c:01:c2: a1:83:80:e9:8c:24:78:b1:bc:ef:15:44:20:1a:6d:57:76:7a: 24:46:6b:c4:05:10:3b:df:8c:d7:48:3c:37:95:b4:d4:6a:f3: 67:51:55:51:23:0d:52:28:c3:cd:f4:33:6f:37:e0:ef:e4:b7: 55:9f:b9:58:0b:ac:92:8d:b1:8d:0f:7b:2c:e3:93:71:a9:69: 84:0b:41:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5N+DykO8NfBAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTM5NWQzZGQtOTNmZi00NWU3LThjMDUtNjY3ODFjNjY1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEFc++SJXTFXavGnwBCAIPNKzJLj0imZkZod 7tkDfuTFsWb9uZKxx4c3sWLNNNg6uF8DjxX0ZkrCCzAMgFeofxiUbUXz5GWpS7ZA /iOHaa30+CLBWURnTXitixLcqSqcV9Eo5bvZHBWQH15ckTtIlvuwh1LEM+i9wnYH 2K30baaD+7L/0ogGgb5WOv/ngHL5rVSVm/2n341iPB6pa2mOFVX8BhEF8YYtGsAO b3mCaj+nfKlV/RLSeiH90JfeU5LIlYfdN+WpXLs1ritfdo921tkZMmlon6csHUGc Qxmh8kXp+gDkBWcDIRruA514CpLdTaSK8vVDDGOSOQAYw9ehZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmrd0XsNSLESZFURGpf6YTlpsk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmNmMTY3MmMtOWFlZi0z ZThmLWEwNjctMDFhYmU3ZGZkYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNofPLh3W/5z/ZeCIGlkQrSrGmAvO2tGQEGcPqN0aZT1z/rAtfnR9eq it/Xnc/sgK78VXdwaSR31Kgke6FwArTGN2e9q/ma+QPBYPo2WKoHdyw0z7zmwyOB H52Kr8/re37aZD43XqPAcXK88xzeKmRWjkmgCvSeLd95qEsHwfeRTGEaPqd9aL62 edyAazLIR6/TBI/06lpeIAosRz19x01EEdy2pruOaiN0TYUOr/vovjwBwqGDgOmM JHixvO8VRCAabVd2eiRGa8QFEDvfjNdIPDeVtNRq82dRVVEjDVIow830M2834O/k t1WfuVgLrJKNsY0Peyzjk3GpaYQLQZk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:03:07 2026 by rpki-client