$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa7f52a4-abe4-37a4-9c4e-29af973050c1.roa File: fa7f52a4-abe4-37a4-9c4e-29af973050c1.roa (raw, json) Hash identifier: kUxurVFcPX3VLyKKiE6Fy4el+OTdzh2luXELk7f4dZo= Subject key identifier: 7D:5D:0A:42:44:40:89:05:75:78:AA:BC:CE:FF:9D:46:20:1E:41:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB93BFAE91846D60810C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa7f52a4-abe4-37a4-9c4e-29af973050c1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 71.238.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:93:bf:ae:91:84:6d:60:81:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3f04281f-5d1d-4bcc-9912-52be9627b4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:58:ca:40:2f:e9:73:9e:57:45:37:b9:14: 55:67:cc:49:95:92:6f:2b:30:a8:45:df:1a:b8:c8: 6e:c0:32:c2:74:4c:87:09:88:3c:e9:9b:25:27:f2: 4a:d9:e7:64:32:d1:bd:dc:9a:d8:bd:4e:c0:d7:37: b6:3c:c7:f6:66:12:37:5f:6b:7e:53:bd:d5:15:78: 5a:6b:4c:df:d9:d8:c8:28:67:23:78:4f:28:55:29: 21:bc:9a:7c:27:24:40:20:6e:46:65:9a:00:02:32: b3:5c:38:f0:5f:dd:72:0a:6c:5d:13:d3:42:f5:a8: 30:42:bc:44:59:a0:a6:57:37:5d:da:10:15:db:17: 25:eb:2c:6e:74:fe:12:7a:c8:0f:ef:e2:eb:af:2a: 26:15:2c:6a:85:7f:f3:ab:69:ca:a1:df:83:33:05: ab:72:30:8b:77:7b:a6:96:11:14:60:e7:38:4f:d0: 85:ae:a5:bb:37:4c:2f:54:34:94:86:73:45:45:d6: 69:92:a6:31:9b:14:7c:8a:32:3b:d9:4a:a3:01:6a: 7d:4e:4e:c2:52:14:08:6d:9c:05:79:7b:9f:8f:ca: 17:d0:3c:6a:6c:ed:56:66:cd:06:5d:41:7a:b3:8a: bf:36:04:87:0e:d7:19:43:4e:ea:ca:04:3e:29:d1: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5D:0A:42:44:40:89:05:75:78:AA:BC:CE:FF:9D:46:20:1E:41:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa7f52a4-abe4-37a4-9c4e-29af973050c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d2:45:7a:91:86:09:69:aa:02:d0:0c:34:a8:08:06:3b:ca: 82:4a:c9:f5:62:07:54:a9:39:ca:35:4f:a9:1d:7a:36:6f:64: 02:68:fe:a2:53:ab:e4:80:c9:70:a6:cc:50:82:b4:5f:93:da: 5b:20:4e:a4:c3:cc:f5:2f:9c:64:b7:a7:2c:55:63:b8:71:a0: 8e:fd:12:da:5f:ef:cc:36:fa:47:ec:cc:c8:53:69:d4:59:74: 51:56:bd:2c:91:fc:bb:37:9b:45:81:35:f7:31:88:5e:83:6d: 19:4f:1f:92:53:f9:15:24:cd:60:5e:42:f9:c8:aa:02:f7:59: 12:e6:b2:6f:b0:c8:2f:c8:bd:a6:cf:23:48:8d:d9:d0:8f:b4: b4:8f:fa:ff:7f:55:b3:95:a5:21:09:be:6e:5d:3c:74:10:cc: 94:ef:e7:47:98:a9:42:2f:c4:05:43:7b:da:a6:14:02:bc:d3: 3b:d8:38:dc:5f:4e:c9:86:fb:69:54:2a:4e:5f:06:09:03:c6: c3:26:19:79:1a:c8:4c:56:7a:68:69:be:fb:ca:15:e0:d7:42: 4f:0f:4d:30:77:9f:d3:f7:53:2c:49:cf:aa:04:75:87:7b:00: 8a:3b:9a:5d:0e:c7:ac:32:b7:28:d8:c8:fa:8a:5b:e9:84:df: c6:5f:dc:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu5O/rpGEbWCBDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2YwNDI4MWYtNWQxZC00YmNjLTk5MTItNTJiZTk2MjdiNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruVYykAv6XOeV0U3uRRVZ8xJlZJvKzCoRd8a uMhuwDLCdEyHCYg86ZslJ/JK2edkMtG93JrYvU7A1ze2PMf2ZhI3X2t+U73VFXha a0zf2djIKGcjeE8oVSkhvJp8JyRAIG5GZZoAAjKzXDjwX91yCmxdE9NC9agwQrxE WaCmVzdd2hAV2xcl6yxudP4SesgP7+LrryomFSxqhX/zq2nKod+DMwWrcjCLd3um lhEUYOc4T9CFrqW7N0wvVDSUhnNFRdZpkqYxmxR8ijI72UqjAWp9Tk7CUhQIbZwF eXufj8oX0DxqbO1WZs0GXUF6s4q/NgSHDtcZQ07qygQ+KdEBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1dCkJEQIkFdXiqvM7/nUYgHkH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE3ZjUyYTQtYWJlNC0z N2E0LTljNGUtMjlhZjk3MzA1MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/SRXqRhglpqgLQDDSoCAY7yoJKyfViB1SpOco1T6kdejZvZAJo/qJT q+SAyXCmzFCCtF+T2lsgTqTDzPUvnGS3pyxVY7hxoI79Etpf78w2+kfszMhTadRZ dFFWvSyR/Ls3m0WBNfcxiF6DbRlPH5JT+RUkzWBeQvnIqgL3WRLmsm+wyC/IvabP I0iN2dCPtLSP+v9/VbOVpSEJvm5dPHQQzJTv50eYqUIvxAVDe9qmFAK80zvYONxf TsmG+2lUKk5fBgkDxsMmGXkayExWemhpvvvKFeDXQk8PTTB3n9P3UyxJz6oEdYd7 AIo7ml0Ox6wytyjYyPqKW+mE38Zf3Gc= -----END CERTIFICATE-----Generated at Fri Apr 17 05:09:02 2026 by rpki-client