$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f849c2a7-8aee-383c-a754-1f4d3742a719.roa File: f849c2a7-8aee-383c-a754-1f4d3742a719.roa (raw, json) Hash identifier: Ymy+ieyKHdQ6TYJdGRt51F3v2uMeyxoFk7xOxi6UhHA= Subject key identifier: 82:36:6E:6C:1D:EA:22:BC:29:5D:5B:86:A5:9A:E2:68:49:1E:B7:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA5D08A4057F2C4066BC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f849c2a7-8aee-383c-a754-1f4d3742a719.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.238.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:5d:08:a4:05:7f:2c:40:66:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2a4b4f96-bf5d-44c7-acf0-f3bf417ec785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:6f:40:53:d6:61:db:6d:b9:65:87:22:28: e5:3d:f9:e5:e5:b5:07:0a:dc:24:84:43:ee:df:a9: f4:ab:fd:6f:15:ee:16:5b:3c:e8:44:44:fa:06:96: a7:14:63:77:09:5b:4e:61:0c:64:d7:71:66:f7:e2: fe:1c:87:0a:7a:6d:1d:97:71:a0:fe:cf:4e:c4:35: 4c:79:19:70:69:50:00:e1:07:82:9c:0b:59:8e:68: 48:7f:88:67:23:7b:7c:7b:43:51:8f:e3:1f:09:16: a4:97:b9:4e:2e:a9:ba:85:15:05:8f:3b:60:b6:fb: 79:0d:c6:ab:4a:5e:d8:e4:a6:b9:e0:03:0b:d9:5c: b8:2b:66:23:11:20:5a:58:d6:0e:eb:85:2b:00:6a: c2:01:94:3a:4d:0f:ca:32:ae:e1:b0:47:10:d2:73: f9:91:03:19:48:8d:ac:58:4d:7f:d7:2f:d1:8b:96: ac:75:3a:98:2d:88:4c:5f:b8:da:15:bb:64:5e:78: 1b:82:e4:b9:6f:f4:e5:0e:5e:b9:28:14:67:44:44: 02:8b:c7:b8:10:06:7a:8a:a0:4f:0f:4c:dd:2e:6f: b9:28:40:f6:17:79:58:17:ae:d9:b3:cf:a3:94:3f: 41:24:0d:40:f2:26:4c:70:6e:48:d2:3f:b8:66:af: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:36:6E:6C:1D:EA:22:BC:29:5D:5B:86:A5:9A:E2:68:49:1E:B7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f849c2a7-8aee-383c-a754-1f4d3742a719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:30:a8:a2:5d:24:9c:a4:cc:23:ab:36:14:ac:9f:9c:59:37: c9:b9:2c:18:99:18:fc:31:ba:f8:03:f1:e4:5c:a8:3c:0d:b8: 64:3a:c4:96:4f:23:31:2b:02:e2:aa:e1:5f:77:53:76:3b:64: d9:1a:7b:c1:f0:79:5f:03:1f:5e:05:5e:96:16:1d:84:1f:4b: d6:f5:7e:46:8e:17:7e:d4:13:c8:d9:82:cd:e2:95:6d:30:90: fb:fc:e8:e0:0d:31:1f:08:1c:ad:31:a1:8f:f5:f4:4d:ae:8b: 50:7c:d2:d9:4d:8b:e7:bf:a0:8b:1b:73:b1:23:67:27:09:9c: 0b:24:99:f6:59:ad:5f:05:0f:9c:c3:bc:fd:5c:5d:9a:a4:6a: 4b:93:2e:9b:ef:79:37:fe:97:4d:dd:d9:76:e8:41:ac:d3:5a: dd:ef:6f:e8:f1:db:ae:c0:ca:1f:be:de:b7:f7:e2:00:82:1f: c2:b0:57:09:60:6b:85:cf:1e:d1:04:b6:ad:6f:cd:63:c1:61: 51:73:30:9d:58:76:c4:bc:52:95:b1:41:5d:1a:2b:b6:0a:8b: 51:a4:b7:6d:14:01:b0:df:da:02:00:19:40:63:07:0b:89:3d: fe:b4:68:6e:e9:3f:3c:8b:e6:90:ef:71:cf:d4:c4:cf:e2:1b: 91:03:27:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vul0IpAV/LEBmvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmE0YjRmOTYtYmY1ZC00NGM3LWFjZjAtZjNiZjQxN2VjNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0NvQFPWYdttuWWHIijlPfnl5bUHCtwkhEPu 36n0q/1vFe4WWzzoRET6BpanFGN3CVtOYQxk13Fm9+L+HIcKem0dl3Gg/s9OxDVM eRlwaVAA4QeCnAtZjmhIf4hnI3t8e0NRj+MfCRakl7lOLqm6hRUFjztgtvt5Dcar Sl7Y5Ka54AML2Vy4K2YjESBaWNYO64UrAGrCAZQ6TQ/KMq7hsEcQ0nP5kQMZSI2s WE1/1y/Ri5asdTqYLYhMX7jaFbtkXngbguS5b/TlDl65KBRnREQCi8e4EAZ6iqBP D0zdLm+5KED2F3lYF67Zs8+jlD9BJA1A8iZMcG5I0j+4Zq955wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII2bmwd6iK8KV1bhqWa4mhJHrdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg0OWMyYTctOGFlZS0z ODNjLWE3NTQtMWY0ZDM3NDJhNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAwqKJdJJykzCOrNhSsn5xZN8m5LBiZGPwxuvgD8eRcqDwNuGQ6xJZP IzErAuKq4V93U3Y7ZNkae8HweV8DH14FXpYWHYQfS9b1fkaOF37UE8jZgs3ilW0w kPv86OANMR8IHK0xoY/19E2ui1B80tlNi+e/oIsbc7EjZycJnAskmfZZrV8FD5zD vP1cXZqkakuTLpvveTf+l03d2XboQazTWt3vb+jx267Ayh++3rf34gCCH8KwVwlg a4XPHtEEtq1vzWPBYVFzMJ1YdsS8UpWxQV0aK7YKi1Gkt20UAbDf2gIAGUBjBwuJ Pf60aG7pPzyL5pDvcc/UxM/iG5EDJ9Y= -----END CERTIFICATE-----Generated at Fri Apr 17 12:01:12 2026 by rpki-client