$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2903ff79-f8ee-3e9c-881e-f2a2be0642c9.roa File: 2903ff79-f8ee-3e9c-881e-f2a2be0642c9.roa (raw, json) Hash identifier: sNgQPuUjXcgD4x1Kcnzmy2WltYlTFhr4XKvscoUHfBQ= Subject key identifier: 68:24:44:B4:71:E7:A8:4E:EC:25:A6:25:8C:06:5A:A3:36:A0:6D:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7E3805B6AF03C4AA8EF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2903ff79-f8ee-3e9c-881e-f2a2be0642c9.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.136.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:e3:80:5b:6a:f0:3c:4a:a8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4bd85a73-6e77-4992-bd3f-a91b3513d17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5a:d4:fc:ce:69:25:bb:47:a0:af:97:cb:88: 24:6c:5b:f9:8e:bd:ba:2d:55:ae:fb:e6:93:6a:05: 3d:8f:5d:d6:28:41:ca:50:6e:a3:32:f5:62:c3:53: c8:c2:3d:ea:1b:88:99:f6:50:19:a1:7e:18:f1:af: 73:d6:76:19:12:25:60:06:0e:0d:ac:33:2f:c1:e8: 48:62:fe:32:8b:40:bb:dd:e2:5c:83:f6:0f:d0:e0: c5:07:a8:60:c7:2d:9c:4c:e5:d1:1b:4e:ff:08:82: 15:02:97:50:00:68:3f:32:c1:df:03:36:2c:ce:5a: f7:6f:b5:45:da:6d:19:a2:2b:59:b9:67:5e:13:78: 57:75:e1:20:b1:cc:80:9d:ed:64:10:ac:d7:0b:e3: 4f:5a:4f:bc:3b:35:ed:34:d7:bc:7f:b0:7c:fd:cb: 62:3b:2b:31:05:ff:84:e2:00:b3:6e:b0:1f:8c:56: 11:8b:9e:21:21:28:09:b9:32:c5:fb:02:06:fb:52: 5a:96:68:b5:a0:f6:a8:9b:b7:4f:9c:a7:45:0c:05: 2f:1a:c7:96:73:54:5c:b9:2a:de:89:f2:1b:00:00: 3a:85:ec:2b:32:54:93:4d:27:6c:0a:c9:3b:c5:3f: 32:9f:c2:ee:5d:9f:f6:21:13:81:61:6b:66:1b:8f: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:24:44:B4:71:E7:A8:4E:EC:25:A6:25:8C:06:5A:A3:36:A0:6D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2903ff79-f8ee-3e9c-881e-f2a2be0642c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e7:41:74:a5:61:40:6c:d6:ca:6f:62:d3:98:58:87:59:4a: 81:bc:29:c3:52:88:a2:8d:48:33:04:74:6d:ef:39:90:09:f3: b4:82:28:bd:c4:36:d9:9b:d8:f4:df:fd:d9:63:5d:c2:8e:97: f0:3e:ee:56:ee:ad:ee:af:3e:66:e8:25:5b:76:00:ee:12:1e: 5a:37:8c:ce:a4:c8:1a:81:6e:11:2e:13:b4:aa:1a:fc:aa:54: d3:fd:a5:a9:f1:2d:a7:a1:b9:de:14:36:c7:e8:d0:38:41:32: 9d:e2:f2:d1:c9:65:87:26:80:b7:ba:5e:d7:a4:c9:36:05:b1: 66:ef:39:e7:80:cc:ae:e0:80:58:dc:48:d1:0f:50:21:4d:3a: ba:d8:90:19:0e:5e:f9:83:f8:e2:95:e1:bc:fb:fa:2b:9b:1e: d5:f5:81:27:bf:2c:e1:15:4c:99:97:37:7f:75:21:b1:ff:31: b3:db:da:c4:a2:b4:b9:2f:24:e2:fe:53:8b:a1:e0:1c:87:a0: fe:ec:3d:d1:d0:02:7c:7d:d4:1f:66:5f:d2:ed:82:c9:4a:71: a7:64:97:20:1c:16:17:33:49:de:bb:e5:a0:76:81:cb:47:35: 4a:f6:d9:72:a2:a8:79:e1:46:83:2d:dc:45:5d:bd:c0:cc:8e: 94:8e:96:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9+OAW2rwPEqo74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGJkODVhNzMtNmU3Ny00OTkyLWJkM2YtYTkxYjM1MTNkMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVrU/M5pJbtHoK+Xy4gkbFv5jr26LVWu++aT agU9j13WKEHKUG6jMvViw1PIwj3qG4iZ9lAZoX4Y8a9z1nYZEiVgBg4NrDMvwehI Yv4yi0C73eJcg/YP0ODFB6hgxy2cTOXRG07/CIIVApdQAGg/MsHfAzYszlr3b7VF 2m0ZoitZuWdeE3hXdeEgscyAne1kEKzXC+NPWk+8OzXtNNe8f7B8/ctiOysxBf+E 4gCzbrAfjFYRi54hISgJuTLF+wIG+1Jalmi1oPaom7dPnKdFDAUvGseWc1RcuSre ifIbAAA6hewrMlSTTSdsCsk7xT8yn8LuXZ/2IROBYWtmG48NJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgkRLRx56hO7CWmJYwGWqM2oG0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjkwM2ZmNzktZjhlZS0z ZTljLTg4MWUtZjJhMmJlMDY0MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHnQXSlYUBs1spvYtOYWIdZSoG8KcNSiKKNSDMEdG3vOZAJ87SCKL3E Ntmb2PTf/dljXcKOl/A+7lbure6vPmboJVt2AO4SHlo3jM6kyBqBbhEuE7SqGvyq VNP9panxLaehud4UNsfo0DhBMp3i8tHJZYcmgLe6XtekyTYFsWbvOeeAzK7ggFjc SNEPUCFNOrrYkBkOXvmD+OKV4bz7+iubHtX1gSe/LOEVTJmXN391IbH/MbPb2sSi tLkvJOL+U4uh4ByHoP7sPdHQAnx91B9mX9LtgslKcadklyAcFhczSd675aB2gctH NUr22XKiqHnhRoMt3EVdvcDMjpSOlhU= -----END CERTIFICATE-----Generated at Tue Apr 21 20:56:32 2026 by rpki-client