$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa File: c38ce678-d28e-3cfa-81ab-794f8b318f24.roa (raw, json) Hash identifier: v+F+yj2e7o/9Y1P54v7s5AAlF9LxT0SHXtTXfUEk7Ic= Subject key identifier: 57:F2:F2:17:4D:15:97:0E:F9:E5:53:EA:B9:C0:D6:D7:F4:E2:CA:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAA214F2C51A8AF914AD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 71.234.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:a2:14:f2:c5:1a:8a:f9:14:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=65f80921-f0c0-4160-9875-dbfca1628e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:0b:20:10:c6:51:3e:77:fa:94:d5:71:c2: 9a:6e:d9:8f:ca:8a:53:17:e8:83:f0:55:2a:59:1b: 26:6b:5c:3b:be:8e:73:36:8b:ba:b7:32:36:da:14: 83:e3:c0:8c:e4:94:cb:5b:3b:64:a9:63:e9:f7:0b: 94:d1:cb:38:d1:53:5e:a8:aa:4e:91:10:d4:c6:ba: 3f:69:eb:63:8c:fa:a2:15:0e:14:04:1a:15:15:86: e9:68:e7:d7:0b:90:b2:82:74:5c:1f:e5:a7:e1:1d: ce:cb:48:13:13:b9:22:df:26:95:5e:1c:09:ff:00: 1f:14:cf:d7:d5:e5:6e:0a:63:c5:61:4e:02:20:5f: f2:28:a9:5b:54:71:48:7c:60:57:6f:4e:eb:36:b2: f5:d3:94:cd:2e:ea:d6:2d:81:57:72:b0:6f:e7:04: f7:df:28:a8:c7:96:23:23:f9:f8:5f:a3:60:cc:2b: 56:47:ce:2f:fd:97:0f:41:b1:53:63:d0:36:a7:25: 62:7a:8e:29:a6:71:eb:b5:73:37:a3:09:e9:0a:ad: 3c:11:96:be:54:76:e3:4e:60:d6:d0:1b:34:5d:88: ef:37:46:50:5f:db:f7:b7:a4:a2:20:11:48:bf:fa: a5:ef:e2:e4:27:35:f2:42:51:67:70:e3:7a:2a:e9: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F2:F2:17:4D:15:97:0E:F9:E5:53:EA:B9:C0:D6:D7:F4:E2:CA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38ce678-d28e-3cfa-81ab-794f8b318f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.234.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e3:5a:ec:d4:2d:39:21:a3:b6:d1:f5:07:e4:4d:21:59:4c: 67:9d:d2:30:fc:e9:b1:de:42:cb:5f:9a:00:86:66:cf:e6:dd: 59:96:b2:9f:80:ee:81:7f:69:e0:d4:6e:18:39:91:c8:b3:bc: b8:1a:ba:bd:6b:cd:c8:b5:5b:b6:4f:8e:7a:be:da:7d:86:51: 02:c2:d3:4f:2c:8a:9a:45:78:f0:bd:2c:75:34:96:30:33:88: d6:c1:65:ba:79:7a:3b:ff:ff:ea:46:70:ee:f2:74:e4:d4:30: 7b:8f:f6:07:ad:3c:b5:62:cd:36:eb:5d:0a:6a:b0:c3:03:4c: 29:ee:fa:27:c4:ef:99:07:60:2d:95:8e:20:1c:42:fd:2e:c2: 3e:d0:b7:bd:b8:98:f6:e0:22:50:99:7d:b3:4e:c2:35:ad:ae: c2:09:c5:1d:0e:87:6f:b5:54:49:ee:c5:50:04:64:71:02:1e: c8:39:41:7f:b4:e9:4e:bb:34:37:42:41:1e:1a:c2:1f:f6:47: 7c:37:a6:4f:d9:a6:04:44:52:41:bf:1c:5b:5a:fa:23:dc:2b: 0c:37:a5:d3:c2:27:56:a1:b1:5a:06:c6:8f:a5:7a:21:76:2d: f2:9f:9e:21:7d:41:88:6f:10:7f:5b:87:bf:0b:89:29:08:68: d6:92:13:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuqIU8sUaivkUrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjVmODA5MjEtZjBjMC00MTYwLTk4NzUtZGJmY2ExNjI4ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJELIBDGUT53+pTVccKabtmPyopTF+iD8FUq WRsma1w7vo5zNou6tzI22hSD48CM5JTLWztkqWPp9wuU0cs40VNeqKpOkRDUxro/ aetjjPqiFQ4UBBoVFYbpaOfXC5CygnRcH+Wn4R3Oy0gTE7ki3yaVXhwJ/wAfFM/X 1eVuCmPFYU4CIF/yKKlbVHFIfGBXb07rNrL105TNLurWLYFXcrBv5wT33yiox5Yj I/n4X6NgzCtWR84v/ZcPQbFTY9A2pyVieo4ppnHrtXM3ownpCq08EZa+VHbjTmDW 0Bs0XYjvN0ZQX9v3t6SiIBFIv/ql7+LkJzXyQlFncON6KunABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfy8hdNFZcO+eVT6rnA1tf04srkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM4Y2U2NzgtZDI4ZS0z Y2ZhLTgxYWItNzk0ZjhiMzE4ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+qEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbjWuzULTkho7bR9QfkTSFZTGed0jD86bHeQstfmgCGZs/m3VmWsp+A 7oF/aeDUbhg5kcizvLgaur1rzci1W7ZPjnq+2n2GUQLC008sippFePC9LHU0ljAz iNbBZbp5ejv//+pGcO7ydOTUMHuP9getPLVizTbrXQpqsMMDTCnu+ifE75kHYC2V jiAcQv0uwj7Qt724mPbgIlCZfbNOwjWtrsIJxR0Oh2+1VEnuxVAEZHECHsg5QX+0 6U67NDdCQR4awh/2R3w3pk/ZpgREUkG/HFta+iPcKww3pdPCJ1ahsVoGxo+leiF2 LfKfniF9QYhvEH9bh78LiSkIaNaSE3k= -----END CERTIFICATE-----Generated at Fri Apr 17 13:17:39 2026 by rpki-client