$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd59646-4d52-3a16-9832-5147afee1f60.roa File: 3dd59646-4d52-3a16-9832-5147afee1f60.roa (raw, json) Hash identifier: TbNl/ACm7CzR6SkSEo5QM5igbFKJEAYhxfsmy0HOcLg= Subject key identifier: 51:56:02:87:A3:F8:77:6C:92:E1:4B:1E:37:B1:5B:EE:E5:73:9E:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7E6BE4C5E73B203E35F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd59646-4d52-3a16-9832-5147afee1f60.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.141.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:e6:be:4c:5e:73:b2:03:e3:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f6ef0bd0-7ca3-49e0-8044-48237fb6228e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:15:8b:a6:17:f4:c0:ef:62:46:ab:ca:4a: fc:86:f6:5a:86:a7:c3:df:2b:56:8b:f5:af:34:59: b7:25:ff:47:bb:50:c0:99:5a:f6:71:2d:53:95:21: fc:c0:24:cc:6e:08:52:a1:83:3f:55:23:ac:cb:7d: d6:00:a8:a7:4e:3e:64:32:47:c2:01:57:cd:01:42: 70:0a:99:32:f9:97:2c:40:b1:52:24:36:af:4d:e2: e4:58:c6:c6:5a:ee:75:8e:01:51:6f:f3:c1:0f:16: 8a:2b:2b:19:59:c4:d0:92:6e:a9:90:2d:d3:04:e7: 89:10:69:4f:b4:89:27:2b:52:14:d9:d1:0c:cb:e0: 02:5c:76:bf:17:92:4a:78:71:d1:c1:f1:7e:01:4d: e1:77:bd:98:e3:4f:90:9f:12:03:30:0d:fa:c5:18: 57:80:c6:04:c0:1d:8a:39:19:6f:67:b2:ed:89:8a: 51:0f:ec:24:bf:fc:8a:ba:ce:5d:7c:01:54:83:d2: 8e:b7:e1:90:03:e3:09:61:b8:ae:bd:70:70:ef:0b: 53:2e:67:df:ba:32:ed:cd:e1:18:40:37:e2:b0:1b: fc:96:e7:78:13:18:9d:95:75:9f:be:99:af:d1:3c: 2e:cb:d0:31:4b:de:79:19:ed:9d:9f:c5:8e:dc:6b: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:02:87:A3:F8:77:6C:92:E1:4B:1E:37:B1:5B:EE:E5:73:9E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dd59646-4d52-3a16-9832-5147afee1f60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.141.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d0:26:b4:67:da:29:85:a1:ba:a3:49:84:ef:5f:47:bd:d9: 17:52:60:6d:0a:a8:b3:7e:fc:66:c3:5f:64:f6:ae:8e:3d:33: d0:84:ed:29:a7:f1:aa:84:c6:89:dd:f8:44:cc:7e:5f:f6:89: 9c:8f:2c:a4:c9:6b:b0:f2:d6:df:43:4b:57:81:0f:d0:c9:bb: 8c:22:4e:17:21:0d:44:1a:6c:db:03:3a:da:16:71:6d:7d:35: dc:dc:67:4a:76:24:b8:37:d1:dc:fb:63:2b:c9:41:b7:c0:3c: 46:90:12:9e:ad:53:da:ed:e5:0e:48:22:74:d5:0a:f8:4d:23: 7f:0f:24:76:5d:22:29:49:c1:48:ea:84:38:26:c4:7a:ff:8c: 14:45:6d:8a:ba:ed:da:b5:ed:c8:e6:b1:bd:2f:a8:44:28:a6: 69:db:59:37:15:d3:47:a0:0e:5f:f9:29:cc:69:76:c2:c6:35: c6:ac:b2:d8:2d:4b:33:64:d6:a7:54:fd:7a:e7:ff:37:25:70: 8d:d5:ad:33:88:9f:f8:bd:16:5a:ce:11:7a:7d:6e:4e:47:fc: 84:3e:0a:30:f6:26:cc:8b:bd:b1:6a:0f:90:0c:21:a1:18:44: e1:db:32:08:42:c9:c8:36:ea:53:10:4a:ba:88:4a:f6:af:2c: 99:0c:01:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9+a+TF5zsgPjX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjZlZjBiZDAtN2NhMy00OWUwLTgwNDQtNDgyMzdmYjYyMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5sVi6YX9MDvYkarykr8hvZahqfD3ytWi/Wv NFm3Jf9Hu1DAmVr2cS1TlSH8wCTMbghSoYM/VSOsy33WAKinTj5kMkfCAVfNAUJw Cpky+ZcsQLFSJDavTeLkWMbGWu51jgFRb/PBDxaKKysZWcTQkm6pkC3TBOeJEGlP tIknK1IU2dEMy+ACXHa/F5JKeHHRwfF+AU3hd72Y40+QnxIDMA36xRhXgMYEwB2K ORlvZ7LtiYpRD+wkv/yKus5dfAFUg9KOt+GQA+MJYbiuvXBw7wtTLmffujLtzeEY QDfisBv8lud4ExidlXWfvpmv0Twuy9AxS955Ge2dn8WO3Gve1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFWAoej+HdskuFLHjexW+7lc55kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2RkNTk2NDYtNGQ1Mi0z YTE2LTk4MzItNTE0N2FmZWUxZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnQJrRn2imFobqjSYTvX0e92RdSYG0KqLN+/GbDX2T2ro49M9CE7Smn 8aqExond+ETMfl/2iZyPLKTJa7Dy1t9DS1eBD9DJu4wiThchDUQabNsDOtoWcW19 NdzcZ0p2JLg30dz7YyvJQbfAPEaQEp6tU9rt5Q5IInTVCvhNI38PJHZdIilJwUjq hDgmxHr/jBRFbYq67dq17cjmsb0vqEQopmnbWTcV00egDl/5KcxpdsLGNcasstgt SzNk1qdU/Xrn/zclcI3VrTOIn/i9FlrOEXp9bk5H/IQ+CjD2JsyLvbFqD5AMIaEY ROHbMghCycg26lMQSrqISvavLJkMAdI= -----END CERTIFICATE-----Generated at Tue Apr 21 19:31:16 2026 by rpki-client