$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3add8255-b3a2-39f5-a607-be3ad159e241.roa File: 3add8255-b3a2-39f5-a607-be3ad159e241.roa (raw, json) Hash identifier: yynJrIHdJva5mVL+hEPZQ+t7qaLs6gQ79m8s1mN74JQ= Subject key identifier: 2A:2E:6E:4B:66:3A:C8:8A:63:15:A1:0E:9F:3A:61:51:F5:DD:81:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6710B8BB66080F9B3CB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3add8255-b3a2-39f5-a607-be3ad159e241.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.136.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:71:0b:8b:b6:60:80:f9:b3:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2b59a70f-163f-4c3f-9d29-ce599a54743a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:48:fc:42:f7:ba:d2:09:5d:9a:8e:16:a0:16: 40:88:35:3c:34:b3:5b:47:d7:52:b5:a9:3b:bd:16: 70:5f:3d:14:22:aa:f0:dd:6b:a5:c5:7e:72:55:ad: 50:b6:99:b7:2a:e3:01:fc:b1:c9:43:83:6f:39:8a: f2:73:41:8f:9e:bc:4a:df:a7:c4:bd:86:a1:d5:2e: f9:50:5f:dd:ee:a1:5c:76:c6:13:df:0a:d4:05:7e: db:29:13:fb:79:d6:78:65:a6:66:6c:55:b7:0e:7b: 2b:bd:7f:b0:7d:61:83:43:ef:9c:ff:c2:19:51:71: db:7c:23:12:de:7b:47:82:33:5f:ef:0e:5b:7f:91: 45:78:b9:64:00:ef:0f:66:d9:3c:54:ce:3d:b9:c4: 71:7d:ef:bd:00:62:ab:c8:c5:de:46:61:c2:18:2b: 26:b4:28:01:58:45:ff:86:a0:99:b3:54:cd:25:8b: c1:f6:b0:9e:15:ed:a2:27:49:cc:d1:ce:1e:fc:bb: 47:2e:7a:71:79:7d:95:d2:f2:ec:72:cc:73:c0:4c: cd:d4:d6:4d:1a:f1:d1:62:0f:86:91:02:db:10:d3: ab:b4:aa:74:d0:83:5c:53:c8:ea:00:ce:27:b4:5d: 84:cf:31:fb:da:29:63:25:6c:fe:c6:fa:05:ed:7f: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2E:6E:4B:66:3A:C8:8A:63:15:A1:0E:9F:3A:61:51:F5:DD:81:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3add8255-b3a2-39f5-a607-be3ad159e241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:2a:11:17:f4:0d:54:26:a8:a8:7d:06:60:cd:75:a0:fb:a6: 47:37:5e:db:ad:d3:8f:f9:b2:96:44:8e:26:c1:4e:63:4d:6b: 34:0a:87:72:8e:90:87:7a:35:88:53:21:98:ef:e0:f0:53:0d: 83:c1:e0:87:c0:6b:7b:0f:5d:87:d8:98:1b:f9:cf:3b:cc:c5: b2:70:1a:7a:60:cd:0b:17:69:6b:75:9c:50:cb:c4:15:91:d6: 10:30:90:63:4e:cb:a4:8f:ea:4c:82:3b:a5:c4:cf:45:f0:8d: d7:e6:82:cc:95:ee:6b:b9:91:6e:e3:7c:bb:6d:bd:2a:a8:aa: f0:33:19:13:46:66:10:ee:c2:39:46:22:18:23:21:23:d8:87: 7c:3a:60:a3:6f:dd:06:5d:d3:2a:1e:30:a7:e2:69:e9:47:d7: be:f0:21:26:cc:87:56:55:cb:d2:b6:96:7b:02:9c:2c:06:5a: 87:ec:62:bf:a7:da:32:43:b7:89:c3:a7:1c:8c:5c:a2:45:e3: 21:41:86:a8:61:b0:52:ee:6d:ce:24:04:1b:79:ff:29:82:ad: 94:cd:59:e1:dd:62:71:da:d6:31:c4:7c:c1:f2:37:2c:9f:66: 55:60:c6:0a:4c:e4:eb:1a:1a:df:3e:22:a7:8d:7a:ae:33:22: 61:0c:cf:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9nELi7ZggPmzywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmI1OWE3MGYtMTYzZi00YzNmLTlkMjktY2U1OTlhNTQ3NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkj8Qve60gldmo4WoBZAiDU8NLNbR9dStak7 vRZwXz0UIqrw3WulxX5yVa1Qtpm3KuMB/LHJQ4NvOYryc0GPnrxK36fEvYah1S75 UF/d7qFcdsYT3wrUBX7bKRP7edZ4ZaZmbFW3DnsrvX+wfWGDQ++c/8IZUXHbfCMS 3ntHgjNf7w5bf5FFeLlkAO8PZtk8VM49ucRxfe+9AGKryMXeRmHCGCsmtCgBWEX/ hqCZs1TNJYvB9rCeFe2iJ0nM0c4e/LtHLnpxeX2V0vLscsxzwEzN1NZNGvHRYg+G kQLbENOrtKp00INcU8jqAM4ntF2EzzH72iljJWz+xvoF7X+4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoubktmOsiKYxWhDp86YVH13YGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FkZDgyNTUtYjNhMi0z OWY1LWE2MDctYmUzYWQxNTllMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEqERf0DVQmqKh9BmDNdaD7pkc3Xtut04/5spZEjibBTmNNazQKh3KO kId6NYhTIZjv4PBTDYPB4IfAa3sPXYfYmBv5zzvMxbJwGnpgzQsXaWt1nFDLxBWR 1hAwkGNOy6SP6kyCO6XEz0XwjdfmgsyV7mu5kW7jfLttvSqoqvAzGRNGZhDuwjlG IhgjISPYh3w6YKNv3QZd0yoeMKfiaelH177wISbMh1ZVy9K2lnsCnCwGWofsYr+n 2jJDt4nDpxyMXKJF4yFBhqhhsFLubc4kBBt5/ymCrZTNWeHdYnHa1jHEfMHyNyyf ZlVgxgpM5OsaGt8+IqeNeq4zImEMz0w= -----END CERTIFICATE-----Generated at Wed Apr 22 00:22:29 2026 by rpki-client