$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d873e0a-c132-3492-8606-971422f74d38.roa File: 0d873e0a-c132-3492-8606-971422f74d38.roa (raw, json) Hash identifier: dQNjDgbV7WtVEwAuQ81Qy4gu9l7XnBczJclJH9Z1Rs0= Subject key identifier: BD:34:7C:F7:51:C8:94:6D:AA:3D:68:A7:A1:C3:FF:C0:B9:79:CC:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5FF1CE7F0F4953E6B6600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d873e0a-c132-3492-8606-971422f74d38.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 76.124.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:ff:1c:e7:f0:f4:95:3e:6b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a89f864b-faa4-4a34-83f3-5a3090e8b47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:23:9e:bd:d3:27:4c:40:95:d1:7c:8b:a3: 2a:1a:76:be:17:8e:76:ed:06:46:43:d5:2e:66:db: ce:7d:c4:0c:2e:27:d6:c7:7a:43:8a:cc:dd:e5:cf: bd:de:63:2a:dc:41:e6:b7:09:11:b4:f7:87:89:06: 5c:c5:97:63:3a:dc:b1:32:ac:c0:de:d8:1e:3f:9d: 37:34:41:83:59:a9:40:5a:bc:7d:13:72:c1:e8:69: 3a:bf:62:c4:10:31:d9:98:6e:f1:9c:f2:f2:af:4f: 7b:f8:c1:02:0b:2b:4d:e3:f7:78:ba:4a:0b:3f:2b: c4:a9:60:33:1f:38:fc:e1:2a:e8:1d:29:51:48:0d: be:ce:3d:04:54:e5:7d:7b:3e:52:34:9e:de:fa:bf: ce:e2:b5:f7:97:7a:a9:ce:e6:fd:85:b4:f6:5c:d2: 88:e4:3f:11:5d:b4:2e:1e:d8:72:fc:2e:24:d8:ec: f6:e1:e4:9a:e8:9d:0f:e2:5b:bb:c5:e9:4e:30:32: d8:63:dc:3f:6b:0f:b5:06:04:4b:06:3d:12:a7:89: 29:67:e6:37:d7:74:a5:8a:8d:79:2f:61:51:d9:90: 49:19:13:55:e2:56:a8:ba:75:bc:8c:21:bc:0e:39: 9a:d3:78:ef:6f:16:41:ab:e9:1b:29:c7:7e:49:3f: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:7C:F7:51:C8:94:6D:AA:3D:68:A7:A1:C3:FF:C0:B9:79:CC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d873e0a-c132-3492-8606-971422f74d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5d:25:5a:e3:4f:a2:a7:09:c5:41:d9:bd:18:8a:41:ee:c2: 87:17:fe:14:b5:a7:f6:e0:b9:1e:db:97:e9:3c:b1:91:30:ae: 6f:48:12:71:43:d2:0f:22:0a:fd:3a:ba:d4:ed:64:97:a1:a1: 20:0b:ca:f2:d2:18:43:e3:04:61:84:cc:b7:e1:16:f9:4c:ac: c9:11:00:b6:52:38:21:14:71:39:89:83:4b:e3:db:08:50:20: 7f:05:56:6e:b7:42:7f:af:dc:c8:9c:19:01:7d:2d:2c:62:1f: 23:c9:fc:fc:42:a4:af:82:42:28:86:f9:5f:1e:92:83:57:2a: 01:0a:ef:c8:06:eb:ba:f5:31:64:09:ff:c7:08:f1:2e:db:a0: f6:ce:6c:a2:01:9d:9c:08:ab:0c:e6:7b:86:d1:d6:ec:f4:66: 3f:64:67:19:84:bc:56:b2:24:f3:99:83:89:c5:46:4f:49:93: b9:a4:ad:ee:a7:b4:94:23:8c:35:8c:39:1b:53:77:71:de:54: 69:c7:35:ec:41:f4:39:ff:f8:a9:20:3e:9b:cd:3b:c6:cf:bb: 76:6d:6d:0e:e4:04:81:f1:92:1e:19:8f:ce:e5:da:50:50:3f: 80:ef:74:43:e1:e0:70:4f:f1:30:ed:04:09:95:24:07:dc:a8: b5:55:95:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9f8c5/D0lT5rZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTg5Zjg2NGItZmFhNC00YTM0LTgzZjMtNWEzMDkwZThiNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhykjnr3TJ0xAldF8i6MqGna+F4527QZGQ9Uu ZtvOfcQMLifWx3pDiszd5c+93mMq3EHmtwkRtPeHiQZcxZdjOtyxMqzA3tgeP503 NEGDWalAWrx9E3LB6Gk6v2LEEDHZmG7xnPLyr097+MECCytN4/d4ukoLPyvEqWAz Hzj84SroHSlRSA2+zj0EVOV9ez5SNJ7e+r/O4rX3l3qpzub9hbT2XNKI5D8RXbQu Hthy/C4k2Oz24eSa6J0P4lu7xelOMDLYY9w/aw+1BgRLBj0Sp4kpZ+Y313Slio15 L2FR2ZBJGRNV4laounW8jCG8Djma03jvbxZBq+kbKcd+ST/8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL00fPdRyJRtqj1op6HD/8C5ecyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQ4NzNlMGEtYzEzMi0z NDkyLTg2MDYtOTcxNDIyZjc0ZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1dJVrjT6KnCcVB2b0YikHuwocX/hS1p/bguR7bl+k8sZEwrm9IEnFD 0g8iCv06utTtZJehoSALyvLSGEPjBGGEzLfhFvlMrMkRALZSOCEUcTmJg0vj2whQ IH8FVm63Qn+v3MicGQF9LSxiHyPJ/PxCpK+CQiiG+V8ekoNXKgEK78gG67r1MWQJ /8cI8S7boPbObKIBnZwIqwzme4bR1uz0Zj9kZxmEvFayJPOZg4nFRk9Jk7mkre6n tJQjjDWMORtTd3HeVGnHNexB9Dn/+KkgPpvNO8bPu3ZtbQ7kBIHxkh4Zj87l2lBQ P4DvdEPh4HBP8TDtBAmVJAfcqLVVlT4= -----END CERTIFICATE-----Generated at Tue Apr 21 20:54:47 2026 by rpki-client