$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849dc4a7-6634-3bf6-817f-542358fe2906.roa File: 849dc4a7-6634-3bf6-817f-542358fe2906.roa (raw, json) Hash identifier: a4jRJuTxyatuWdMyBaX+AyIbTC/rDrCRvHzi4jPcrKg= Subject key identifier: 34:75:CD:85:45:F9:57:86:FC:46:CA:D3:73:6B:2E:0F:BA:64:8E:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6DEC5126639C5E247B580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849dc4a7-6634-3bf6-817f-542358fe2906.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.132.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:de:c5:12:66:39:c5:e2:47:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7567bf66-294a-4bef-8175-6d3a43d3a0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:d1:38:91:36:b7:05:f0:7a:a5:71:0b:79: 4e:90:fa:6a:6c:df:50:13:b6:f1:39:a0:a3:71:47: 7c:b3:a5:66:43:3b:de:c4:94:23:0a:56:ec:5e:eb: a1:b4:d0:fa:d0:47:15:a2:56:39:6e:ec:b7:f8:68: f8:70:29:83:60:75:a3:6d:dc:d2:73:12:bd:56:93: 31:cf:d6:9c:ac:ee:a8:94:81:5b:a4:e2:db:f7:bb: fa:34:5e:e7:5e:06:06:b0:7f:e6:52:da:c9:40:95: 4e:16:42:e0:b7:00:7f:91:e2:ca:16:2e:64:fc:96: 76:5e:d0:c0:bc:70:39:ac:3a:db:bb:1a:7c:92:5f: ca:2d:10:b2:db:f6:24:72:35:cf:62:ef:df:07:aa: ea:6d:b1:7b:5e:5e:76:61:cd:60:8d:61:3b:38:2b: fc:be:e2:bf:1e:3a:fe:a3:ee:c4:4f:f6:1f:20:c4: 51:fc:90:40:2c:23:63:32:8a:75:7c:57:9c:6b:d8: 22:60:d0:47:c9:cd:3a:a1:da:c7:b8:ea:68:cc:a6: 25:4b:a2:22:5a:4f:04:98:f9:fc:66:8b:6b:c5:90: 2b:6a:7c:30:6a:46:99:fa:60:e8:ca:b5:57:ac:d7: bd:e2:39:18:55:f3:ac:ac:48:75:83:48:7f:5b:09: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:CD:85:45:F9:57:86:FC:46:CA:D3:73:6B:2E:0F:BA:64:8E:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/849dc4a7-6634-3bf6-817f-542358fe2906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:f5:3c:a9:97:cc:bd:20:f2:22:39:e9:12:98:35:68:5c:31: aa:4b:b1:a7:f9:a4:c1:5e:8a:f0:2f:2d:4a:ee:3b:72:03:d5: f7:2d:da:56:92:cf:66:72:cd:58:28:c2:7e:1c:b5:a9:52:db: fb:ef:c4:6d:9f:78:7b:c7:f9:04:f5:41:e7:04:a7:e7:cd:86: 5c:9d:01:d9:fc:86:66:8c:5d:4a:9d:14:5e:9a:bf:c1:e5:e6: c1:e1:a9:e0:4d:98:d1:cf:e2:cd:75:2d:e2:43:61:9d:51:4b: b6:de:3a:61:0a:48:9e:4f:af:b0:30:c4:a7:ce:43:4a:a0:c3: a9:70:77:d0:d0:67:d3:41:81:c6:04:3c:fd:fc:e7:3e:dc:9a: c0:00:4e:d5:7e:48:e7:dd:d7:10:0d:83:ac:7b:c5:06:02:13: 70:98:15:cb:d1:ce:63:5c:91:4f:0b:73:88:f4:c6:bb:3e:2c: a9:9f:2f:a9:3b:8a:3c:1d:eb:ea:77:60:3e:7c:5b:62:13:de: 41:23:8b:bc:1b:75:fd:f8:52:99:12:c8:ef:a0:5f:42:fa:32: 66:72:c9:6c:f7:10:7c:31:34:e2:53:06:a2:36:ea:6a:29:02: e5:8b:de:c0:8d:59:03:d8:3b:9a:93:ff:65:16:49:5f:fb:38: b2:29:a9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9t7FEmY5xeJHtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzU2N2JmNjYtMjk0YS00YmVmLTgxNzUtNmQzYTQzZDNhMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovTROJE2twXweqVxC3lOkPpqbN9QE7bxOaCj cUd8s6VmQzvexJQjClbsXuuhtND60EcVolY5buy3+Gj4cCmDYHWjbdzScxK9VpMx z9acrO6olIFbpOLb97v6NF7nXgYGsH/mUtrJQJVOFkLgtwB/keLKFi5k/JZ2XtDA vHA5rDrbuxp8kl/KLRCy2/YkcjXPYu/fB6rqbbF7Xl52Yc1gjWE7OCv8vuK/Hjr+ o+7ET/YfIMRR/JBALCNjMop1fFeca9giYNBHyc06odrHuOpozKYlS6IiWk8EmPn8 ZotrxZAranwwakaZ+mDoyrVXrNe94jkYVfOsrEh1g0h/Wwk9eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR1zYVF+VeG/EbK03NrLg+6ZI7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQ5ZGM0YTctNjYzNC0z YmY2LTgxN2YtNTQyMzU4ZmUyOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTITYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMz1PKmXzL0g8iI56RKYNWhcMapLsaf5pMFeivAvLUruO3ID1fct2laS z2ZyzVgown4ctalS2/vvxG2feHvH+QT1QecEp+fNhlydAdn8hmaMXUqdFF6av8Hl 5sHhqeBNmNHP4s11LeJDYZ1RS7beOmEKSJ5Pr7AwxKfOQ0qgw6lwd9DQZ9NBgcYE PP385z7cmsAATtV+SOfd1xANg6x7xQYCE3CYFcvRzmNckU8Lc4j0xrs+LKmfL6k7 ijwd6+p3YD58W2IT3kEji7wbdf34UpkSyO+gX0L6MmZyyWz3EHwxNOJTBqI26mop AuWL3sCNWQPYO5qT/2UWSV/7OLIpqX0= -----END CERTIFICATE-----Generated at Tue Apr 21 20:54:34 2026 by rpki-client