$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2af0f04-d895-30f1-9954-78ae95d3fc53.roa File: c2af0f04-d895-30f1-9954-78ae95d3fc53.roa (raw, json) Hash identifier: BeUhKmmb55cxdruIlGy9JZC8IXF58bSWFnnmG1EVQEk= Subject key identifier: AA:57:5E:71:A5:C1:75:2A:6A:B3:2D:73:C4:88:35:49:0F:06:3E:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAA3189CC4D83DB4FEC280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2af0f04-d895-30f1-9954-78ae95d3fc53.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 71.235.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:a3:18:9c:c4:d8:3d:b4:fe:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b869018f-0262-4d21-abf2-44431a861b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:e2:cb:3c:62:2e:9c:0a:5d:cd:c8:41:8e: a5:f0:7f:82:d6:cd:a5:e0:01:59:d7:8f:4f:e3:77: eb:3e:97:a6:9b:4a:c9:da:f2:64:13:2a:21:42:8b: b0:b4:8d:d1:0f:50:da:c9:93:4e:9f:09:86:bb:45: a6:1f:bd:50:d6:7e:47:07:00:c3:db:99:f5:a9:8d: d4:a8:20:31:94:29:c6:43:09:6d:cd:e7:ca:75:e7: 45:d3:2f:ec:f8:c8:9b:12:39:3d:c6:e3:0a:78:06: df:b9:8b:81:b2:80:12:b3:d8:c3:de:c5:f7:02:b6: c1:bc:ae:ab:bb:78:c4:9f:34:63:c3:e9:ec:70:f6: 31:54:a6:57:5d:f7:7c:b5:b0:22:45:1a:a1:32:4a: fb:9e:e9:03:08:f0:79:00:5c:e7:78:c4:bf:51:de: 1d:f1:e0:fb:7c:46:e1:16:0a:ba:1c:c3:70:11:eb: 0a:24:0a:65:f9:ff:9d:00:1d:23:65:6c:77:ac:01: b9:79:ed:b5:76:9b:14:f3:73:21:88:e7:4a:17:08: 9a:29:a6:d2:4a:03:12:ba:2f:ec:6a:ba:7d:20:62: bc:67:19:fa:bb:64:9a:6e:99:ad:93:18:12:91:8f: 00:fa:33:6e:d4:a6:2a:3d:35:46:68:59:1a:45:8e: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:5E:71:A5:C1:75:2A:6A:B3:2D:73:C4:88:35:49:0F:06:3E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2af0f04-d895-30f1-9954-78ae95d3fc53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.235.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2e:fc:9f:9f:9c:a3:f2:dd:4f:a6:8f:8b:2b:d5:01:64:3d: c1:08:2d:d5:29:66:23:64:d9:b0:1a:c8:f4:b5:12:01:73:d7: 64:a6:14:14:e7:c8:3c:50:5b:d3:46:a4:55:5f:5d:19:1c:27: c4:97:a0:1d:5e:43:d5:4a:d4:ff:7d:51:6d:92:bb:c5:af:db: 57:d6:e9:05:98:8d:7b:a4:23:12:38:0b:c5:a8:9e:5c:08:20: 10:61:3c:01:90:4e:67:23:a6:1f:e7:50:90:d1:dd:e1:66:42: 4e:d0:bb:14:33:24:21:66:c9:29:02:9b:fd:38:18:d3:6d:d0: cc:df:70:61:9a:4b:86:18:a3:cc:5a:dc:0f:a5:29:3a:2b:8f: b7:b6:3b:99:10:d7:70:c6:c1:25:67:fc:9e:bd:29:31:bb:89: 9a:01:14:5a:5e:1b:6a:b1:5e:59:ca:12:32:b4:86:6a:35:10: 0c:eb:f1:9d:55:43:2c:89:74:cb:fe:ca:88:3a:96:35:97:98: 39:59:4f:94:be:a3:93:e8:ae:76:1b:58:d0:d1:4f:1b:9b:e6: 87:33:ac:c7:a3:58:db:37:29:e3:22:1d:01:3c:55:8f:c0:a9: 15:ae:a1:b3:7a:c4:57:68:c0:2c:4a:5e:9c:ca:74:06:4f:96: 54:19:b6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuqMYnMTYPbT+woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Yjg2OTAxOGYtMDI2Mi00ZDIxLWFiZjItNDQ0MzFhODYxYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r7iyzxiLpwKXc3IQY6l8H+C1s2l4AFZ149P 43frPpemm0rJ2vJkEyohQouwtI3RD1DayZNOnwmGu0WmH71Q1n5HBwDD25n1qY3U qCAxlCnGQwltzefKdedF0y/s+MibEjk9xuMKeAbfuYuBsoASs9jD3sX3ArbBvK6r u3jEnzRjw+nscPYxVKZXXfd8tbAiRRqhMkr7nukDCPB5AFzneMS/Ud4d8eD7fEbh Fgq6HMNwEesKJApl+f+dAB0jZWx3rAG5ee21dpsU83MhiOdKFwiaKabSSgMSui/s arp9IGK8Zxn6u2SabpmtkxgSkY8A+jNu1KYqPTVGaFkaRY7RuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpXXnGlwXUqarMtc8SINUkPBj6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJhZjBmMDQtZDg5NS0z MGYxLTk5NTQtNzhhZTk1ZDNmYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+usMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsu/J+fnKPy3U+mj4sr1QFkPcEILdUpZiNk2bAayPS1EgFz12SmFBTn yDxQW9NGpFVfXRkcJ8SXoB1eQ9VK1P99UW2Su8Wv21fW6QWYjXukIxI4C8WonlwI IBBhPAGQTmcjph/nUJDR3eFmQk7QuxQzJCFmySkCm/04GNNt0MzfcGGaS4YYo8xa 3A+lKTorj7e2O5kQ13DGwSVn/J69KTG7iZoBFFpeG2qxXlnKEjK0hmo1EAzr8Z1V QyyJdMv+yog6ljWXmDlZT5S+o5PornYbWNDRTxub5oczrMejWNs3KeMiHQE8VY/A qRWuobN6xFdowCxKXpzKdAZPllQZtoM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:19:59 2026 by rpki-client