$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe9d56-5c7b-3713-9905-b8aac82760b2.roa File: 3efe9d56-5c7b-3713-9905-b8aac82760b2.roa (raw, json) Hash identifier: fj8GnAQ3jlLl3/u5ndjhIg1NBChaaaHd0ximmlRS1ps= Subject key identifier: 12:00:E6:D2:F8:10:BC:AB:E0:14:92:22:F4:FF:50:88:F5:BB:E1:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7EB5361F6BBB934BE6530 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe9d56-5c7b-3713-9905-b8aac82760b2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.157.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:eb:53:61:f6:bb:b9:34:be:65:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d36a14e6-6854-4571-b668-9c5615763998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:6a:f5:ee:0e:39:f9:79:07:3a:d7:0e:b6: b4:d4:9c:23:a3:df:36:a7:4a:9a:9a:58:08:79:1a: d2:3a:68:4c:3d:26:15:da:74:77:95:c7:51:38:bb: 6a:67:53:15:5b:72:2f:f2:13:1a:2b:c8:eb:76:5b: 70:c0:1c:d4:60:85:81:7d:de:30:cb:a7:40:52:21: 88:0d:d4:6e:4e:96:6e:00:79:3a:bc:82:d6:db:14: 2d:75:c0:a4:e6:67:a6:c9:01:e7:f0:5e:f9:24:f7: 6a:70:a3:8c:96:2b:a1:3d:9d:8b:af:3a:f3:eb:80: d3:d7:e4:d8:7e:fc:99:ff:78:42:89:f6:72:2c:fa: c7:f0:f0:a6:c9:ed:53:02:53:c9:2a:08:57:bf:2a: 7b:1d:3f:72:40:c9:46:b1:51:a1:86:ef:8b:7e:cf: 65:77:12:26:90:f7:db:f0:46:3c:15:0b:a3:32:fa: 1b:c3:d3:de:bd:2d:41:4b:bc:54:37:e4:16:a2:df: 0c:77:08:34:36:7f:23:5c:e4:d9:6d:d4:d8:90:71: a6:7c:12:d1:d9:d4:eb:7d:39:71:5a:81:db:df:a7: 88:dd:aa:99:39:69:f8:71:2b:23:10:bf:de:13:7d: 4b:19:cb:eb:63:07:55:88:43:ea:34:23:cf:e3:9a: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:00:E6:D2:F8:10:BC:AB:E0:14:92:22:F4:FF:50:88:F5:BB:E1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe9d56-5c7b-3713-9905-b8aac82760b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:85:14:4e:6c:0d:7d:cd:14:05:f4:ac:11:ea:98:fa:28: a2:af:63:75:ef:a1:03:16:76:0f:d1:fe:0b:cd:18:79:3a:f9: 22:c1:ca:99:10:cb:dc:ff:bd:19:1f:64:9a:3f:58:1b:6d:24: 3d:84:09:bd:7d:94:a2:a8:65:c7:dd:ea:6b:e6:00:f1:66:72: b5:96:96:a0:06:96:1a:e3:af:26:46:02:ed:fa:b7:5b:63:ba: 09:e5:de:37:dd:c5:49:63:22:b2:93:e4:57:17:e0:06:ad:ad: 9c:a0:4d:2e:57:9a:14:36:e9:fc:34:c1:66:6a:fb:22:ab:ef: 7c:3a:04:3b:a2:27:7c:71:f3:48:5e:6f:e1:c6:8d:73:f3:11: b3:9e:95:09:67:c4:6b:5c:1a:d2:9c:40:95:9a:8d:97:4d:c3: c2:d9:8f:9e:e9:e4:e5:4d:43:4b:08:88:c5:d4:38:33:22:cb: 45:44:1c:20:fb:48:12:b3:e2:6b:d6:e7:74:ea:0c:8c:9c:23: 4a:a1:3a:80:c9:28:81:7e:2f:fc:8e:ee:aa:ec:ad:0e:cd:10: 5d:5e:02:b0:2d:7f:c7:ed:cd:75:65:a6:c5:9c:87:aa:c6:ce: 3b:44:a9:73:79:53:3d:f9:45:58:99:70:9c:2a:3d:04:90:11: fa:bb:f2:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9+tTYfa7uTS+ZTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDM2YTE0ZTYtNjg1NC00NTcxLWI2NjgtOWM1NjE1NzYzOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz9q9e4OOfl5BzrXDra01Jwjo982p0qamlgI eRrSOmhMPSYV2nR3lcdROLtqZ1MVW3Iv8hMaK8jrdltwwBzUYIWBfd4wy6dAUiGI DdRuTpZuAHk6vILW2xQtdcCk5memyQHn8F75JPdqcKOMliuhPZ2Lrzrz64DT1+TY fvyZ/3hCifZyLPrH8PCmye1TAlPJKghXvyp7HT9yQMlGsVGhhu+Lfs9ldxImkPfb 8EY8FQujMvobw9PevS1BS7xUN+QWot8Mdwg0Nn8jXOTZbdTYkHGmfBLR2dTrfTlx WoHb36eI3aqZOWn4cSsjEL/eE31LGcvrYwdViEPqNCPP45rEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIA5tL4ELyr4BSSIvT/UIj1u+FmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VmZTlkNTYtNWM3Yi0z NzEzLTk5MDUtYjhhYWM4Mjc2MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJ0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk8hRRObA19zRQF9KwR6pj6KKKvY3XvoQMWdg/R/gvNGHk6+SLBypkQ y9z/vRkfZJo/WBttJD2ECb19lKKoZcfd6mvmAPFmcrWWlqAGlhrjryZGAu36t1tj ugnl3jfdxUljIrKT5FcX4AatrZygTS5XmhQ26fw0wWZq+yKr73w6BDuiJ3xx80he b+HGjXPzEbOelQlnxGtcGtKcQJWajZdNw8LZj57p5OVNQ0sIiMXUODMiy0VEHCD7 SBKz4mvW53TqDIycI0qhOoDJKIF+L/yO7qrsrQ7NEF1eArAtf8ftzXVlpsWch6rG zjtEqXN5Uz35RViZcJwqPQSQEfq78h0= -----END CERTIFICATE-----Generated at Tue Apr 21 20:40:44 2026 by rpki-client