$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa File: 3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa (raw, json) Hash identifier: bDJo4HwMchmRs9tpGYaxFVWktj2X02JytyrRqfJ1VWw= Subject key identifier: E7:96:D0:73:E3:D7:73:CA:3E:41:05:A7:30:12:57:34:BB:33:9D:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6799DF7BFBE8D9EEF3BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.16.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:79:9d:f7:bf:be:8d:9e:ef:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=be0e16ba-f690-42b4-b509-761826ee9e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:7b:58:aa:8d:81:1c:36:04:6d:5f:0c:5f: b7:d8:51:fd:04:cc:ed:99:3b:4e:cf:06:00:7a:e0: 45:05:4b:7f:aa:df:6c:97:2b:91:32:cd:5a:88:86: fc:f5:a5:fb:ec:ef:cc:ba:04:ad:fc:3a:38:61:97: 68:45:d4:6b:9d:38:cc:4e:cc:5c:87:82:6e:6c:30: fa:dd:81:30:66:f8:61:96:65:d9:6c:b3:5d:c1:19: b1:df:36:d9:61:1b:77:b5:8e:6f:04:33:93:8f:06: 09:62:49:ec:f8:57:05:56:0e:54:82:4a:47:fd:bd: 3b:65:a4:63:13:a9:14:c9:73:dc:32:d7:cc:9a:de: 8a:40:f2:c6:02:3d:83:4a:97:0b:94:01:a8:34:90: 43:a2:7c:ba:80:8d:4a:6a:7d:20:bf:25:b9:f7:66: e7:9a:7e:5f:91:63:4d:12:83:bd:88:a6:fb:88:71: 6a:e1:18:91:03:fd:90:8a:73:29:8e:c4:57:86:cf: f7:d8:1c:f9:8b:7c:dd:36:94:a2:b1:23:7c:bd:3e: 3a:50:d2:fa:13:69:6e:b4:8d:87:24:d9:c5:11:f1: 04:7c:e9:3e:87:83:78:7c:e3:1a:b9:bd:c6:8b:51: be:7c:e5:8e:b0:db:eb:d5:60:1b:15:73:5f:a3:e8: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:96:D0:73:E3:D7:73:CA:3E:41:05:A7:30:12:57:34:BB:33:9D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3121740a-f046-3a87-83fd-6bdb3bbd6cd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:11:62:52:93:72:02:90:1a:79:1c:ae:ce:11:29:4f:db:72: a7:0d:3e:53:f8:b9:f0:3a:c4:7d:1b:a7:b7:9e:97:f1:42:12: 14:25:66:a9:ca:23:79:2a:aa:50:ea:f1:10:88:81:e8:aa:d1: 79:c8:a6:aa:6b:d2:fe:69:a0:e2:a4:b2:bf:cb:e2:ca:94:7e: 94:25:b3:60:4b:fa:3e:56:ad:45:0a:fc:e6:86:3d:dd:a6:13: c4:b6:65:0d:fc:52:f6:32:c2:7b:c1:b3:e8:ae:08:7b:9c:45: 77:4c:40:d4:05:ec:1f:8a:6f:0a:96:56:64:83:cd:3e:0b:2a: 15:16:19:64:67:27:5a:b6:0c:ef:7e:94:30:31:69:cc:f5:20: 83:5f:47:70:2f:91:58:46:cf:85:57:38:3d:69:fe:fd:50:83: c5:f0:26:00:b2:dc:ec:72:bf:85:60:3f:b9:94:31:3d:43:cf: 2e:e4:54:da:1f:54:7d:89:94:99:41:5a:95:ee:05:06:30:d4: b3:97:56:ad:b1:47:18:b1:c9:ed:da:fa:76:eb:3a:56:21:3e: 3d:79:9f:b2:14:6f:d4:05:54:01:71:4e:a9:f2:09:13:a1:1f: bb:e7:3b:34:5d:7c:18:b2:cf:1d:cd:04:0c:67:6f:43:8d:3a: 0c:5e:76:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9nmd97++jZ7vO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmUwZTE2YmEtZjY5MC00MmI0LWI1MDktNzYxODI2ZWU5ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVx7WKqNgRw2BG1fDF+32FH9BMztmTtOzwYA euBFBUt/qt9slyuRMs1aiIb89aX77O/MugSt/Do4YZdoRdRrnTjMTsxch4JubDD6 3YEwZvhhlmXZbLNdwRmx3zbZYRt3tY5vBDOTjwYJYkns+FcFVg5UgkpH/b07ZaRj E6kUyXPcMtfMmt6KQPLGAj2DSpcLlAGoNJBDony6gI1Kan0gvyW592bnmn5fkWNN EoO9iKb7iHFq4RiRA/2QinMpjsRXhs/32Bz5i3zdNpSisSN8vT46UNL6E2lutI2H JNnFEfEEfOk+h4N4fOMaub3Gi1G+fOWOsNvr1WAbFXNfo+hLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeW0HPj13PKPkEFpzASVzS7M539MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzEyMTc0MGEtZjA0Ni0z YTg3LTgzZmQtNmJkYjNiYmQ2Y2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIARYlKTcgKQGnkcrs4RKU/bcqcNPlP4ufA6xH0bp7eel/FCEhQlZqnK I3kqqlDq8RCIgeiq0XnIpqpr0v5poOKksr/L4sqUfpQls2BL+j5WrUUK/OaGPd2m E8S2ZQ38UvYywnvBs+iuCHucRXdMQNQF7B+KbwqWVmSDzT4LKhUWGWRnJ1q2DO9+ lDAxacz1IINfR3AvkVhGz4VXOD1p/v1Qg8XwJgCy3Oxyv4VgP7mUMT1Dzy7kVNof VH2JlJlBWpXuBQYw1LOXVq2xRxixye3a+nbrOlYhPj15n7IUb9QFVAFxTqnyCROh H7vnOzRdfBiyzx3NBAxnb0ONOgxedq4= -----END CERTIFICATE-----Generated at Wed Apr 22 00:50:08 2026 by rpki-client