$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa File: 60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa (raw, json) Hash identifier: MwYvjXkGw6YS16OJohTp1NxOxBlKuVvkMZ2MS2AFxgY= Subject key identifier: 4F:7F:B5:38:D5:ED:8C:3E:88:07:A6:04:09:7F:F1:AB:E6:81:C2:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF75102DC30E3FD912E8120 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 71.225.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:51:02:dc:30:e3:fd:91:2e:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=1c4d7daa-8f65-4a18-b450-6519bdd9d02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:ad:11:27:2f:ea:40:11:fc:17:16:68:e1: 8c:73:b8:52:15:45:4e:41:4c:80:34:c0:f1:86:26: 38:9d:af:7b:bc:32:0f:5f:f0:94:3b:03:30:a5:b0: 51:a0:0b:3b:8d:df:81:98:02:35:84:e8:f6:94:2e: 65:b7:c8:e9:3f:79:24:83:12:7a:9e:05:6d:cb:cf: db:1c:fb:c9:04:d1:13:1c:82:b6:bc:2d:dc:06:ac: 14:82:a2:0e:6d:c6:a5:f4:41:83:91:5d:dd:de:57: df:fb:55:13:7d:35:71:33:c9:5e:37:da:ff:35:74: 73:bc:7e:f4:8c:95:77:6d:f3:68:aa:5b:bb:6c:ae: fb:ea:ac:32:52:fb:47:46:27:01:d0:12:c2:82:0a: 0d:c8:13:9c:88:3d:60:ab:bb:7c:65:67:23:bf:13: 65:1c:3d:8e:84:cf:a6:0c:51:eb:3c:31:ab:05:10: 16:e7:84:78:64:e6:6f:74:44:49:8c:91:4a:f3:79: d5:c2:f1:1c:1e:b6:f2:aa:b8:0f:f5:0e:f0:5d:a8: 0e:b9:c3:e2:ad:30:fc:5a:b1:cc:2d:d0:3f:cc:47: bf:cb:cf:58:0d:47:f6:fb:17:07:84:f4:e5:c3:a3: f2:fe:8e:65:6a:cd:53:8e:ec:69:75:b6:f9:da:e6: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7F:B5:38:D5:ED:8C:3E:88:07:A6:04:09:7F:F1:AB:E6:81:C2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f96f2b-84fe-312f-8819-0e7ed67a1ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d8:cd:22:58:6d:44:4f:d1:0f:b8:03:20:62:9b:0b:a6:9e: 49:68:40:ce:93:ec:d4:4f:01:5f:44:5c:b1:ff:07:57:ac:cc: a8:61:65:93:9f:db:8d:fa:ee:70:cc:b6:3a:0c:04:c7:07:55: ea:54:60:93:cf:c2:79:9e:b0:42:fe:0b:75:0a:4d:54:19:8a: d5:d8:5a:08:24:02:54:93:bb:90:ce:9e:a2:fc:07:9b:5f:4f: b3:f4:38:60:3d:53:e6:fa:ba:d8:12:d8:ad:49:b6:96:b5:9d: 3b:20:b1:93:a9:9a:11:2a:3b:71:17:4c:bf:dd:d7:f4:d0:4f: 91:48:da:dd:5d:90:b2:37:13:38:9b:e9:2d:ab:ea:87:09:88: 30:56:58:20:f5:14:06:21:ff:6f:03:84:45:d0:88:f9:07:23: 8c:89:3f:b0:67:a5:39:55:0e:80:70:e9:e2:78:83:ab:8c:f8: b2:06:74:24:4f:7d:7e:26:a3:a7:72:06:0f:0d:b8:9f:5c:1a: 5c:5c:b5:9d:ab:13:18:cb:ca:87:8d:b6:b6:ff:69:4c:33:d8: 17:7c:a1:97:d7:ca:43:0d:67:55:9f:43:ea:fd:e0:b2:a3:29: 40:13:f0:2d:24:d6:59:45:26:bc:b8:85:15:83:cf:4d:e7:b7: 86:01:9b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O91EC3DDj/ZEugSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MWM0ZDdkYWEtOGY2NS00YTE4LWI0NTAtNjUxOWJkZDlkMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQKtEScv6kAR/BcWaOGMc7hSFUVOQUyANMDx hiY4na97vDIPX/CUOwMwpbBRoAs7jd+BmAI1hOj2lC5lt8jpP3kkgxJ6ngVty8/b HPvJBNETHIK2vC3cBqwUgqIObcal9EGDkV3d3lff+1UTfTVxM8leN9r/NXRzvH70 jJV3bfNoqlu7bK776qwyUvtHRicB0BLCggoNyBOciD1gq7t8ZWcjvxNlHD2OhM+m DFHrPDGrBRAW54R4ZOZvdERJjJFK83nVwvEcHrbyqrgP9Q7wXagOucPirTD8WrHM LdA/zEe/y89YDUf2+xcHhPTlw6Py/o5las1Tjuxpdbb52uaZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9/tTjV7Yw+iAemBAl/8avmgcIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBmOTZmMmItODRmZS0z MTJmLTg4MTktMGU3ZWQ2N2ExZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjYzSJYbURP0Q+4AyBimwumnkloQM6T7NRPAV9EXLH/B1eszKhhZZOf 24367nDMtjoMBMcHVepUYJPPwnmesEL+C3UKTVQZitXYWggkAlSTu5DOnqL8B5tf T7P0OGA9U+b6utgS2K1Jtpa1nTsgsZOpmhEqO3EXTL/d1/TQT5FI2t1dkLI3Ezib 6S2r6ocJiDBWWCD1FAYh/28DhEXQiPkHI4yJP7BnpTlVDoBw6eJ4g6uM+LIGdCRP fX4mo6dyBg8NuJ9cGlxctZ2rExjLyoeNtrb/aUwz2Bd8oZfXykMNZ1WfQ+r94LKj KUAT8C0k1llFJry4hRWDz03nt4YBm+c= -----END CERTIFICATE-----Generated at Wed May 13 13:10:56 2026 by rpki-client