$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a1a7e7d-35da-3a48-80e0-30036dceee50.roa File: 3a1a7e7d-35da-3a48-80e0-30036dceee50.roa (raw, json) Hash identifier: nT8fEJybbcX5C5hH/0bRGk3B9W+7vkqPvKBhVwB/WFU= Subject key identifier: 1F:3D:B3:99:D7:86:1B:03:2B:53:3A:0E:8F:79:12:B5:1E:80:B9:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6E0914C137FE757169200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a1a7e7d-35da-3a48-80e0-30036dceee50.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.133.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:e0:91:4c:13:7f:e7:57:16:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9c58d38a-35bf-46f8-97b2-eaea1fb91e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:16:f2:85:5c:cc:a6:56:37:87:c2:0f:c7: 63:c8:46:db:dc:c4:0a:2e:13:8f:13:38:6b:09:fb: 02:c1:d3:e3:c4:0c:84:c4:f2:03:e8:c9:fe:f9:c0: 5f:f0:8f:ed:9e:0d:ec:91:5b:50:76:bc:d6:05:72: 78:15:85:58:96:8e:ea:e7:46:f4:3c:05:0c:92:2e: 55:68:5a:eb:eb:03:38:02:0d:3b:61:6d:4b:4e:79: 68:70:f3:78:ff:39:ee:8d:b9:0f:3b:7d:10:0f:19: 93:77:26:07:98:d6:c3:6a:31:fe:31:55:4a:18:a0: cd:d9:d2:df:27:4d:2d:e4:55:81:47:13:27:27:51: 76:91:d4:5a:74:7e:f1:d3:37:aa:8d:2f:68:8a:35: 87:16:a0:77:db:bf:67:f7:c9:c2:1b:16:e5:fd:ee: a3:94:c1:98:cc:52:64:34:06:e5:dd:5c:7c:11:0b: 2d:1b:af:39:1a:78:af:a5:64:46:09:1d:18:bb:66: 66:23:bc:30:f2:db:af:d8:97:c7:15:8e:20:20:20: 84:80:e2:17:f1:d7:c7:ad:c6:66:7e:ad:49:68:5b: c2:58:af:b8:99:5b:c5:ee:e5:b7:0d:f4:52:9d:58: 2b:ac:80:c9:06:9e:7a:1b:a0:18:c7:56:c5:99:fb: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3D:B3:99:D7:86:1B:03:2B:53:3A:0E:8F:79:12:B5:1E:80:B9:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a1a7e7d-35da-3a48-80e0-30036dceee50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:80:b4:f3:04:10:55:dc:b7:eb:ac:6e:9a:fa:6a:b0:25:6b: 1d:61:f8:31:21:81:ed:d2:7a:63:fe:a4:a9:df:d2:f9:11:ed: d3:ce:8c:c5:e1:97:9d:8b:5b:3a:f2:66:ac:32:51:60:d2:d5: 95:46:7c:22:7a:b2:34:df:67:37:f4:f9:75:7c:07:69:2e:b9: a1:96:8a:e0:59:12:05:b2:80:31:29:ac:41:9a:d5:07:2a:f0: 2f:4c:ad:f0:fc:0a:e7:2d:e3:ec:5b:93:39:b4:40:f2:a6:28: ed:e0:02:f5:7b:cc:9a:1c:c9:66:f6:eb:23:1d:59:2b:8a:86: fc:9d:fc:36:50:93:23:de:69:2e:0a:3e:ba:98:7f:f9:87:6d: 86:6f:2c:cf:a8:7f:c3:7b:30:40:fb:9d:56:97:36:c9:a3:5b: 48:fe:c5:fd:10:cc:4c:a3:21:22:d9:07:de:a3:01:60:28:af: 03:90:b3:56:0f:b3:6c:e2:c9:2c:e9:1b:13:42:cc:61:3a:09: b3:26:a0:cb:84:eb:d3:69:91:2a:f2:87:66:27:bc:a1:35:33: d5:3d:6f:1e:28:44:99:d8:e3:48:33:36:7d:57:39:de:48:35: 00:b0:a9:60:0f:ca:e8:96:fb:eb:cd:52:c0:ec:12:c9:70:5d: 1c:ec:29:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9uCRTBN/51cWkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWM1OGQzOGEtMzViZi00NmY4LTk3YjItZWFlYTFmYjkxZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/YW8oVczKZWN4fCD8djyEbb3MQKLhOPEzhr CfsCwdPjxAyExPID6Mn++cBf8I/tng3skVtQdrzWBXJ4FYVYlo7q50b0PAUMki5V aFrr6wM4Ag07YW1LTnlocPN4/znujbkPO30QDxmTdyYHmNbDajH+MVVKGKDN2dLf J00t5FWBRxMnJ1F2kdRadH7x0zeqjS9oijWHFqB3279n98nCGxbl/e6jlMGYzFJk NAbl3Vx8EQstG685GnivpWRGCR0Yu2ZmI7ww8tuv2JfHFY4gICCEgOIX8dfHrcZm fq1JaFvCWK+4mVvF7uW3DfRSnVgrrIDJBp56G6AYx1bFmfubBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB89s5nXhhsDK1M6Do95ErUegLn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ExYTdlN2QtMzVkYS0z YTQ4LTgwZTAtMzAwMzZkY2VlZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaAtPMEEFXct+usbpr6arAlax1h+DEhge3SemP+pKnf0vkR7dPOjMXh l52LWzryZqwyUWDS1ZVGfCJ6sjTfZzf0+XV8B2kuuaGWiuBZEgWygDEprEGa1Qcq 8C9MrfD8Cuct4+xbkzm0QPKmKO3gAvV7zJocyWb26yMdWSuKhvyd/DZQkyPeaS4K PrqYf/mHbYZvLM+of8N7MED7nVaXNsmjW0j+xf0QzEyjISLZB96jAWAorwOQs1YP s2ziySzpGxNCzGE6CbMmoMuE69NpkSryh2YnvKE1M9U9bx4oRJnY40gzNn1XOd5I NQCwqWAPyuiW++vNUsDsEslwXRzsKcM= -----END CERTIFICATE-----Generated at Tue Apr 21 20:23:22 2026 by rpki-client