$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e0c55a-fc13-3471-89a4-814eb6a21f91.roa File: 20e0c55a-fc13-3471-89a4-814eb6a21f91.roa (raw, json) Hash identifier: 9DWNJ7ZFIjMqxQxRTx+TM9gtBvMmUQwWr3mP6sjtlLU= Subject key identifier: B6:3A:34:73:AB:4A:61:CB:8C:61:85:4D:27:1A:35:3C:D3:02:94:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6DBE8B0BE2D7CC86CD780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e0c55a-fc13-3471-89a4-814eb6a21f91.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.126.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:db:e8:b0:be:2d:7c:c8:6c:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=81b935b4-19b6-4dc0-9886-f8636058ec18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:64:20:c3:1c:b5:13:38:96:99:e5:4a:c0: 71:e0:80:70:87:91:0a:0d:81:d0:b9:d4:14:c4:c7: fa:14:b4:e0:f0:cf:55:18:b3:ba:61:a1:59:70:84: d9:d2:e7:27:da:73:08:de:2b:b4:71:21:56:a6:7f: a1:42:e6:bb:8e:a7:a1:ba:ee:ed:ac:b7:7b:f9:6f: c5:30:52:d0:61:d1:1a:ac:fe:8e:ff:dd:1f:29:28: 9a:58:b3:35:9e:3d:c9:a0:7b:16:43:30:9b:de:29: 91:1a:64:58:25:49:f3:08:5b:02:58:06:8f:54:18: c9:c8:3b:1a:d1:b1:27:73:ea:fc:d1:c0:c4:7a:1b: 2a:77:f9:f3:d4:00:e7:13:f7:c7:15:1b:11:f0:65: ed:4a:75:5c:37:ba:bf:62:3c:ab:96:c6:32:8b:20: fe:14:6a:62:bc:f9:46:00:fd:cb:5b:1d:06:9c:47: 30:7e:a9:63:59:24:88:4f:f3:40:f3:d7:8d:96:21: 96:79:79:f0:8e:fc:ac:96:06:59:32:d1:fd:b6:84: d1:58:8f:de:bb:47:c1:53:7f:a9:7b:39:fc:54:de: 95:b2:89:65:3a:42:15:a7:2a:75:d0:c4:25:5e:ec: c6:36:2e:9c:3b:c4:a7:46:68:d9:e9:c4:18:ee:82: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:34:73:AB:4A:61:CB:8C:61:85:4D:27:1A:35:3C:D3:02:94:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e0c55a-fc13-3471-89a4-814eb6a21f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:11:83:5a:81:a3:2f:05:f6:27:ea:1a:64:4d:0b:08:e1:da: a6:39:c9:19:0d:4b:67:57:46:03:f7:80:d5:72:76:8e:0a:dd: 43:c4:90:2f:da:ab:81:28:5c:c0:fc:65:b7:1e:9e:39:3a:e7: ef:ff:d8:b7:70:61:af:94:71:82:91:28:fb:d4:6f:9e:2d:1a: 41:63:3d:17:e4:f2:7b:36:61:99:83:7a:2e:25:a8:6d:7b:c3: 23:db:ea:e2:29:1e:11:ce:4e:5c:cb:44:1a:63:14:19:09:83: a4:1b:13:50:8f:6b:1b:f3:76:fa:64:9f:d9:2c:f2:4e:f7:58: 2a:67:26:b8:43:92:f1:eb:06:5f:71:4f:32:c7:07:cc:fc:c6: 4e:0c:3b:50:9a:49:28:17:31:82:c8:d6:9e:20:6a:5f:a1:57: f3:dd:26:e0:b4:2a:5b:fc:e1:6f:54:ce:1b:45:4d:df:22:9d: 6c:e6:e3:1d:51:76:d0:50:17:cc:9c:3e:bf:83:6c:b1:97:8f: 9e:1c:6c:79:2b:c1:3b:28:95:4b:f6:aa:0f:1f:62:5a:ce:24: 6b:c7:94:c3:33:e9:33:a8:94:66:b7:fe:01:4d:1b:80:dd:94: 8a:59:c6:e4:b6:12:a6:3c:11:5a:9c:02:d7:a5:8f:c9:ce:68: ad:68:0b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9tvosL4tfMhs14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODFiOTM1YjQtMTliNi00ZGMwLTk4ODYtZjg2MzYwNThlYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+1kIMMctRM4lpnlSsBx4IBwh5EKDYHQudQU xMf6FLTg8M9VGLO6YaFZcITZ0ucn2nMI3iu0cSFWpn+hQua7jqehuu7trLd7+W/F MFLQYdEarP6O/90fKSiaWLM1nj3JoHsWQzCb3imRGmRYJUnzCFsCWAaPVBjJyDsa 0bEnc+r80cDEehsqd/nz1ADnE/fHFRsR8GXtSnVcN7q/YjyrlsYyiyD+FGpivPlG AP3LWx0GnEcwfqljWSSIT/NA89eNliGWeXnwjvyslgZZMtH9toTRWI/eu0fBU3+p ezn8VN6VsollOkIVpyp10MQlXuzGNi6cO8SnRmjZ6cQY7oJNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY6NHOrSmHLjGGFTScaNTzTApQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBlMGM1NWEtZmMxMy0z NDcxLTg5YTQtODE0ZWI2YTIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATH51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAURg1qBoy8F9ifqGmRNCwjh2qY5yRkNS2dXRgP3gNVydo4K3UPEkC/a q4EoXMD8Zbcenjk65+//2LdwYa+UcYKRKPvUb54tGkFjPRfk8ns2YZmDei4lqG17 wyPb6uIpHhHOTlzLRBpjFBkJg6QbE1CPaxvzdvpkn9ks8k73WCpnJrhDkvHrBl9x TzLHB8z8xk4MO1CaSSgXMYLI1p4gal+hV/PdJuC0Klv84W9UzhtFTd8inWzm4x1R dtBQF8ycPr+DbLGXj54cbHkrwTsolUv2qg8fYlrOJGvHlMMz6TOolGa3/gFNG4Dd lIpZxuS2EqY8EVqcAtelj8nOaK1oC68= -----END CERTIFICATE-----Generated at Tue Apr 21 19:35:06 2026 by rpki-client