$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e360be2-09d2-3ca7-9354-1b057cde905b.roa File: 3e360be2-09d2-3ca7-9354-1b057cde905b.roa (raw, json) Hash identifier: KMNBttpFwMBn/vpCnf0D4k13qv1D1KhxYO3PAtJz9kA= Subject key identifier: 04:54:E7:91:B8:C9:13:F9:24:5B:A4:BB:6B:BD:32:32:C6:B3:23:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF919A0B2B7A959A8BEB480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e360be2-09d2-3ca7-9354-1b057cde905b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.132.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:19:a0:b2:b7:a9:59:a8:be:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=43ed62e5-9e7a-4668-8634-a339d131c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:28:fb:2a:df:89:53:4b:01:04:74:82:9c: 29:2d:b8:da:aa:05:fc:ca:85:f6:0c:c4:26:24:9f: 65:8e:d0:7a:85:f0:83:a6:07:e8:2a:e8:a9:d8:4f: ee:b8:db:f4:3f:9c:fa:ce:79:4b:98:83:ab:59:4d: a4:4f:76:26:49:0b:49:20:ab:45:6b:66:89:ec:98: 20:bc:0e:7f:54:b3:44:00:ad:e1:e8:d0:64:96:b3: 69:fa:c9:9e:60:e9:ea:5c:b6:51:88:8f:48:b7:57: 6c:0b:b2:57:38:db:65:bb:6c:10:63:8c:aa:e9:39: f7:f3:a1:34:34:b2:9e:6f:0e:ad:94:dd:1b:b8:7d: 9c:fb:b8:6f:9a:66:90:bb:f7:68:7d:e6:35:e3:1c: fa:d8:87:6a:77:62:68:dd:73:54:31:f6:9a:e3:d2: 9a:49:7a:66:c6:50:ac:92:8d:9c:d9:23:e4:fa:c3: ef:a2:bc:bd:7c:a6:a8:43:aa:c2:4e:51:f1:e0:2a: 3a:ad:81:9a:46:c2:2f:9a:70:46:3c:64:5c:fd:e1: 10:fb:15:6a:1d:f2:3e:f4:d4:2a:43:26:77:ec:c6: 46:db:1e:05:c4:4a:dc:f4:ab:f3:44:57:85:74:94: 6c:e4:8e:44:25:53:07:6d:09:61:90:60:57:89:b4: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:54:E7:91:B8:C9:13:F9:24:5B:A4:BB:6B:BD:32:32:C6:B3:23:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e360be2-09d2-3ca7-9354-1b057cde905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:88:7f:ca:1a:37:0d:f7:33:1a:73:77:44:44:92:18:9f:dc: 81:1f:69:df:17:11:09:5e:ed:ba:4f:d2:62:db:5a:19:87:7c: da:ac:7e:16:45:8d:68:ed:7c:88:ef:2e:19:3c:dd:be:78:49: 52:ac:3e:0f:14:f8:cf:92:0c:b9:7a:4d:04:a4:a8:6b:01:a3: 32:03:e8:f8:32:f3:38:68:c8:7c:34:22:5d:0f:50:82:06:55: bc:05:18:5f:bc:a5:86:41:12:2b:7e:fc:da:f9:fe:97:7e:42: 16:22:aa:38:d2:aa:1b:0c:10:a5:8a:2c:68:d7:8a:da:f0:72: 85:16:81:ed:9a:22:d3:2f:1d:e3:c8:bd:16:ae:34:97:3c:fc: 81:b0:43:ce:37:14:09:df:94:39:35:62:eb:dd:e1:44:2b:47: 0e:e3:13:d5:46:78:4c:6b:da:58:f8:72:37:cb:36:ea:f4:c2: 5b:34:3b:a3:d2:49:a2:67:42:bd:8e:7d:d6:cb:64:a7:c6:68: 2d:15:b1:e9:8f:1d:bd:53:c3:5e:a2:5e:d0:a0:74:94:f4:ce: 80:23:e5:bc:13:05:3b:63:db:8b:1f:39:6d:af:2b:cd:6e:87: 29:00:b3:d2:cc:2a:9f:ca:66:46:2a:cd:c5:4a:89:e0:4c:55: 39:c2:d6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+RmgsrepWai+tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDNlZDYyZTUtOWU3YS00NjY4LTg2MzQtYTMzOWQxMzFjODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRAo+yrfiVNLAQR0gpwpLbjaqgX8yoX2DMQm JJ9ljtB6hfCDpgfoKuip2E/uuNv0P5z6znlLmIOrWU2kT3YmSQtJIKtFa2aJ7Jgg vA5/VLNEAK3h6NBklrNp+smeYOnqXLZRiI9It1dsC7JXONtlu2wQY4yq6Tn386E0 NLKebw6tlN0buH2c+7hvmmaQu/dofeY14xz62Idqd2Jo3XNUMfaa49KaSXpmxlCs ko2c2SPk+sPvory9fKaoQ6rCTlHx4Co6rYGaRsIvmnBGPGRc/eEQ+xVqHfI+9NQq QyZ37MZG2x4FxErc9KvzRFeFdJRs5I5EJVMHbQlhkGBXibR4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARU55G4yRP5JFuku2u9MjLGsyPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UzNjBiZTItMDlkMi0z Y2E3LTkzNTQtMWIwNTdjZGU5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTISqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSIf8oaNw33Mxpzd0REkhif3IEfad8XEQle7bpP0mLbWhmHfNqsfhZF jWjtfIjvLhk83b54SVKsPg8U+M+SDLl6TQSkqGsBozID6Pgy8zhoyHw0Il0PUIIG VbwFGF+8pYZBEit+/Nr5/pd+QhYiqjjSqhsMEKWKLGjXitrwcoUWge2aItMvHePI vRauNJc8/IGwQ843FAnflDk1Yuvd4UQrRw7jE9VGeExr2lj4cjfLNur0wls0O6PS SaJnQr2OfdbLZKfGaC0VsemPHb1Tw16iXtCgdJT0zoAj5bwTBTtj24sfOW2vK81u hykAs9LMKp/KZkYqzcVKieBMVTnC1rQ= -----END CERTIFICATE-----Generated at Tue Apr 21 20:39:53 2026 by rpki-client