$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa File: 4416e7ce-fc92-3e42-95c2-ce3732232a19.roa (raw, json) Hash identifier: MNM9jnNe2mVl5VCija2rwQO3/CDKHTRbaHh6+c1g7sM= Subject key identifier: 54:CF:AB:42:B6:96:B8:14:4C:0D:29:AC:3C:8C:03:92:8E:6C:CB:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6787E216D1A6D773DAB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.157.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:78:7e:21:6d:1a:6d:77:3d:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a603e1ad-4246-4e98-9e08-72bcf6b75c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:a2:6e:64:0a:01:2f:a6:31:62:7b:95:46: d5:a2:a9:ee:0e:c5:c2:8e:20:81:fc:a7:58:f6:d1: fe:8b:64:47:4e:8e:a1:b8:04:ae:3f:33:46:9f:bf: ab:89:2e:3c:3a:94:d2:42:f7:f3:d6:a7:d7:b2:88: 5b:cf:3e:0f:7b:a9:da:6c:59:06:42:94:df:00:42: f3:0d:f1:15:be:e1:4e:5a:6f:4b:ab:37:3f:78:e6: 6a:d5:5b:a1:54:8c:10:b8:72:2f:00:5c:72:96:06: d4:17:61:02:34:a9:0a:39:02:14:a9:f8:c5:85:7c: 70:0d:42:4d:4e:6d:bd:88:91:11:ee:62:61:33:22: e5:40:ba:38:5c:68:f9:87:85:f1:31:22:50:4d:40: 53:24:b3:f0:e2:34:a9:6a:b7:63:65:dd:e2:76:99: 38:39:59:16:b9:aa:bb:f0:27:b0:d0:d1:4c:c2:37: da:aa:18:30:1b:fa:31:59:7f:24:07:e0:ca:73:1c: e4:b3:d1:cb:db:b6:3a:99:6f:80:3e:18:2d:c3:ba: 8d:d6:c8:66:cd:3b:ab:a0:35:76:59:9d:88:31:e2: ad:99:71:c8:62:f0:15:3f:65:33:c4:6f:5f:33:f4: 21:15:d2:c1:aa:7a:81:d6:85:97:5b:69:cf:f1:44: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CF:AB:42:B6:96:B8:14:4C:0D:29:AC:3C:8C:03:92:8E:6C:CB:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:e6:7d:9d:fb:33:2a:f6:28:1b:e2:1d:d1:56:17:c1:81:15: bc:ec:38:87:8c:0e:2c:5d:6c:4a:6b:36:a2:e6:7d:f6:43:c8: 3d:27:34:75:ae:23:95:2b:0d:13:e8:10:5d:90:79:89:eb:b5: 75:b6:22:fa:31:9e:17:f8:6e:c5:66:a2:19:83:0d:fe:dc:e8: 83:6a:64:b5:d1:9b:47:bd:63:3e:32:07:86:9a:a7:92:6c:81: f1:41:ca:99:9d:67:58:3b:ff:0a:9d:9f:95:c1:49:ea:bc:8f: 4c:f0:0f:94:78:e1:02:42:1b:13:c0:52:ad:fd:1e:01:55:f5: a5:fe:cf:a7:55:75:52:e9:dd:8f:e8:b4:b3:ef:70:92:00:c6: d6:f1:3b:cf:12:cf:78:a8:16:08:fc:41:96:2c:34:73:b2:92: 11:df:19:94:bd:d7:8f:e4:0d:0a:13:e1:ee:ec:db:1c:27:cb: 26:ca:b1:6b:11:71:09:b5:99:03:c6:20:5b:18:61:08:1c:c2: a6:07:1b:b5:05:11:c6:eb:e1:a1:b1:40:87:b1:55:64:93:1c: 16:ed:d7:1e:6a:95:ec:1f:d9:ae:52:c3:22:5b:f7:49:1c:26: 63:22:50:d1:22:84:8b:2b:80:9c:86:76:c4:37:d8:12:65:e1: da:d7:f7:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9nh+IW0abXc9q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTYwM2UxYWQtNDI0Ni00ZTk4LTllMDgtNzJiY2Y2Yjc1YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G2ibmQKAS+mMWJ7lUbVoqnuDsXCjiCB/KdY 9tH+i2RHTo6huASuPzNGn7+riS48OpTSQvfz1qfXsohbzz4Pe6nabFkGQpTfAELz DfEVvuFOWm9Lqzc/eOZq1VuhVIwQuHIvAFxylgbUF2ECNKkKOQIUqfjFhXxwDUJN Tm29iJER7mJhMyLlQLo4XGj5h4XxMSJQTUBTJLPw4jSpardjZd3idpk4OVkWuaq7 8Cew0NFMwjfaqhgwG/oxWX8kB+DKcxzks9HL27Y6mW+APhgtw7qN1shmzTuroDV2 WZ2IMeKtmXHIYvAVP2UzxG9fM/QhFdLBqnqB1oWXW2nP8UR7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTPq0K2lrgUTA0prDyMA5KObMt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQxNmU3Y2UtZmM5Mi0z ZTQyLTk1YzItY2UzNzMyMjMyYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJ2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnmfZ37Myr2KBviHdFWF8GBFbzsOIeMDixdbEprNqLmffZDyD0nNHWu I5UrDRPoEF2QeYnrtXW2Ivoxnhf4bsVmohmDDf7c6INqZLXRm0e9Yz4yB4aap5Js gfFBypmdZ1g7/wqdn5XBSeq8j0zwD5R44QJCGxPAUq39HgFV9aX+z6dVdVLp3Y/o tLPvcJIAxtbxO88Sz3ioFgj8QZYsNHOykhHfGZS914/kDQoT4e7s2xwnyybKsWsR cQm1mQPGIFsYYQgcwqYHG7UFEcbr4aGxQIexVWSTHBbt1x5qlewf2a5SwyJb90kc JmMiUNEihIsrgJyGdsQ32BJl4drX97E= -----END CERTIFICATE-----Generated at Tue Apr 21 19:35:27 2026 by rpki-client