$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa File: 8870e85a-f3ab-31f0-a214-b4e8c460512d.roa (raw, json) Hash identifier: b5B7GiGKitiQuxOtJbqTriSgPMmKGuJ2qBDLfZU4Z9M= Subject key identifier: 3A:B7:17:CC:0D:08:45:FE:53:C1:42:E7:70:75:84:DC:7D:CF:F5:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF734E22611948E37464280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 76.116.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:34:e2:26:11:94:8e:37:46:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9128f474-9080-4eb4-9e40-75e0fa3ac78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:90:52:9a:9b:11:74:6a:d5:a4:40:10:42: fe:df:51:48:77:02:97:e3:cb:b4:e4:ac:96:e3:e5: fd:d8:b7:47:f3:3f:40:49:f8:5d:fa:5b:c8:57:e6: a4:34:24:7c:fe:a2:0c:4d:56:5c:34:85:5a:c3:f7: 39:0f:b7:d1:8b:72:7b:ab:d8:32:4c:be:5b:5b:d5: 6b:5d:f2:b6:7e:95:5a:5b:cb:75:97:ac:cd:2a:04: bc:91:ad:0e:e4:60:1c:89:db:35:57:3e:3e:fb:2f: 6c:79:75:8a:73:70:95:46:e0:59:a6:c9:a7:81:aa: d7:05:95:17:39:99:ad:12:6f:cf:fb:35:b7:22:a2: 84:5a:f8:4e:de:ff:5c:52:f6:24:61:e8:74:2d:45: 11:89:87:b9:65:c3:b5:f3:3a:ce:c7:75:14:68:e0: 4c:d2:92:00:71:45:06:f3:10:f4:dc:26:d0:62:f3: 64:8b:cb:53:a6:e3:ee:02:e7:26:e8:3d:11:5c:83: 88:8a:7c:87:5e:fa:4a:e8:1f:39:89:63:49:70:5d: ee:12:6a:4f:72:2c:b4:db:72:a3:53:19:29:65:67: b2:fd:c1:35:c2:5f:52:16:c6:9a:87:8e:6e:c1:b7: d7:5a:0e:29:24:6d:ca:6c:b3:ee:f8:94:e4:21:36: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:17:CC:0D:08:45:FE:53:C1:42:E7:70:75:84:DC:7D:CF:F5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8870e85a-f3ab-31f0-a214-b4e8c460512d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7b:6c:35:c4:eb:ef:0b:02:06:66:8a:19:37:4d:9d:ae:46: 57:59:7a:00:63:9b:65:f2:a0:40:69:2c:08:d6:35:fe:af:20: ff:b5:23:a2:2c:89:4e:9c:80:bb:e6:0f:44:76:b3:13:ef:70: 68:13:3b:ae:d2:e3:65:ff:00:a2:86:e7:bd:57:48:8d:88:18: 87:2c:b1:c6:18:87:65:a1:63:ee:e6:00:24:0c:d6:1a:71:a4: 75:6a:52:c0:61:92:ed:43:55:f5:c2:40:1c:65:4e:41:23:a5: ef:7e:7c:61:b2:f5:30:1d:bf:8c:3c:e0:38:d6:f5:78:dd:31: 25:3c:bd:1c:5d:54:cc:d3:59:ea:13:29:68:cc:78:48:37:a1: 93:3e:f7:9d:89:49:23:f7:d5:b4:33:f2:6f:86:83:11:3e:ad: ee:10:af:f7:95:70:97:11:8e:08:1d:ba:0f:75:38:1f:c4:73: 14:2e:c8:d4:25:80:11:b6:71:57:38:0d:81:08:3f:5c:81:1b: 2e:fd:81:e1:c9:61:09:5d:b1:98:86:6d:d8:f4:54:08:aa:99: 10:cf:1e:c2:2a:e2:37:e8:7a:98:67:86:9c:cd:98:45:1e:a4: 1f:65:31:94:73:fb:ba:06:af:12:14:93:38:da:40:a5:d9:d6: f3:c0:37:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9zTiJhGUjjdGQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTEyOGY0NzQtOTA4MC00ZWI0LTllNDAtNzVlMGZhM2FjNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD2QUpqbEXRq1aRAEEL+31FIdwKX48u05KyW 4+X92LdH8z9ASfhd+lvIV+akNCR8/qIMTVZcNIVaw/c5D7fRi3J7q9gyTL5bW9Vr XfK2fpVaW8t1l6zNKgS8ka0O5GAcids1Vz4++y9seXWKc3CVRuBZpsmngarXBZUX OZmtEm/P+zW3IqKEWvhO3v9cUvYkYeh0LUURiYe5ZcO18zrOx3UUaOBM0pIAcUUG 8xD03CbQYvNki8tTpuPuAucm6D0RXIOIinyHXvpK6B85iWNJcF3uEmpPciy023Kj UxkpZWey/cE1wl9SFsaah45uwbfXWg4pJG3KbLPu+JTkITaPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq3F8wNCEX+U8FC53B1hNx9z/UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg3MGU4NWEtZjNhYi0z MWYwLWEyMTQtYjRlOGM0NjA1MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB7bDXE6+8LAgZmihk3TZ2uRldZegBjm2XyoEBpLAjWNf6vIP+1I6Is iU6cgLvmD0R2sxPvcGgTO67S42X/AKKG571XSI2IGIcsscYYh2WhY+7mACQM1hpx pHVqUsBhku1DVfXCQBxlTkEjpe9+fGGy9TAdv4w84DjW9XjdMSU8vRxdVMzTWeoT KWjMeEg3oZM+952JSSP31bQz8m+GgxE+re4Qr/eVcJcRjggdug91OB/EcxQuyNQl gBG2cVc4DYEIP1yBGy79geHJYQldsZiGbdj0VAiqmRDPHsIq4jfoephnhpzNmEUe pB9lMZRz+7oGrxIUkzjaQKXZ1vPAN+Y= -----END CERTIFICATE-----Generated at Tue Apr 21 23:02:03 2026 by rpki-client