$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e28a406-c592-37b0-81fe-8e5bcfbdd727.roa File: 9e28a406-c592-37b0-81fe-8e5bcfbdd727.roa (raw, json) Hash identifier: iNF1fLbb/z9LaxxW0limUrZwlnRjl1fLRg4pNQqPUtg= Subject key identifier: 14:B6:06:C2:86:10:91:4B:6A:04:C8:5E:9A:A7:CA:B7:6E:28:B5:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF677BC93447FFFC9086180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e28a406-c592-37b0-81fe-8e5bcfbdd727.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 76.150.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:77:bc:93:44:7f:ff:c9:08:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4fd6bf17-fad6-44da-9b34-6d1e4c68b000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:e4:d0:f9:11:b0:78:c7:f3:fb:7c:d4:c9: 3b:44:3e:e0:27:74:22:0d:e8:cc:8f:33:ba:84:20: de:4f:40:b6:df:78:4f:8c:9b:dd:47:92:f2:55:8b: 94:14:4a:16:79:ca:0e:6c:19:d6:18:a5:db:00:60: fb:af:4f:c4:87:87:b4:c9:33:eb:81:8c:e1:3d:07: 6a:bc:d0:06:53:6e:d7:83:ed:ec:ae:2f:20:0e:96: 52:c4:5d:53:13:ee:e1:16:35:aa:82:ab:a9:08:82: 41:dc:b8:3e:de:57:64:e3:79:40:d3:fb:ce:ee:86: 92:bd:43:67:3b:81:a8:fa:8f:73:c0:14:06:93:bb: 8f:18:db:3a:f0:8b:ca:1a:50:14:21:21:17:87:3f: 1f:1c:f4:49:a5:44:df:74:9b:ed:d3:4f:d0:89:0b: dc:b3:cc:45:9f:6f:5a:f2:e0:df:4c:97:8f:50:36: a6:ec:b9:7f:e0:79:30:1d:6f:75:8b:81:d5:02:ae: ed:0e:4b:7d:cb:3b:7c:db:1c:dd:79:19:d8:7c:ff: bf:9c:a7:b4:93:cd:4e:69:b6:56:c2:cb:43:89:f5: 11:8d:32:2f:20:47:a5:4b:53:c1:cd:20:95:dc:ba: 7f:65:6c:28:de:f5:25:66:f8:8b:8f:58:13:9f:c9: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:06:C2:86:10:91:4B:6A:04:C8:5E:9A:A7:CA:B7:6E:28:B5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e28a406-c592-37b0-81fe-8e5bcfbdd727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:77:e3:4a:be:a8:47:97:9a:57:d0:dd:b1:80:43:7c:a7:22: cf:aa:f7:21:98:86:22:21:1c:be:2a:11:63:e8:11:7c:f8:96: 4b:60:4c:29:0c:1d:f7:5c:35:84:08:e3:1b:0c:02:e7:7c:bb: b2:c2:cf:f5:d2:55:04:d1:f5:5a:4b:21:69:89:3d:65:04:16: 9b:ad:2a:f5:be:1b:04:27:e4:05:ef:95:9b:03:21:5c:ea:95: 7a:a0:7c:62:00:48:9e:aa:21:94:da:6c:63:9a:22:27:15:7a: e7:64:8f:59:58:1b:66:cd:04:eb:73:94:3f:f1:b9:f3:5d:fe: f4:2c:ac:0b:5e:a7:7c:4b:42:03:0c:91:81:5c:76:45:b6:e1: f6:f1:06:e3:e1:d1:6f:dc:a8:50:b3:1a:ce:71:6c:a4:98:93: 46:33:60:ba:64:09:24:53:b8:69:58:4c:da:11:5c:06:97:33: e5:23:36:8d:30:b5:f6:5c:22:64:e1:f8:90:7b:47:15:6f:51: 3e:db:47:07:79:40:1c:36:a2:9a:72:4f:e3:d8:da:30:3a:1c: 0d:ac:76:c6:3d:61:7b:6f:82:4e:47:7a:2d:38:62:37:bc:29: e9:c1:50:71:11:1a:25:85:9a:df:bd:8d:67:8d:71:c2:d2:b8: 9d:83:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9ne8k0R//8kIYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGZkNmJmMTctZmFkNi00NGRhLTliMzQtNmQxZTRjNjhiMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK7k0PkRsHjH8/t81Mk7RD7gJ3QiDejMjzO6 hCDeT0C233hPjJvdR5LyVYuUFEoWecoObBnWGKXbAGD7r0/Eh4e0yTPrgYzhPQdq vNAGU27Xg+3sri8gDpZSxF1TE+7hFjWqgqupCIJB3Lg+3ldk43lA0/vO7oaSvUNn O4Go+o9zwBQGk7uPGNs68IvKGlAUISEXhz8fHPRJpUTfdJvt00/QiQvcs8xFn29a 8uDfTJePUDam7Ll/4HkwHW91i4HVAq7tDkt9yzt82xzdeRnYfP+/nKe0k81OabZW wstDifURjTIvIEelS1PBzSCV3Lp/ZWwo3vUlZviLj1gTn8ntowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS2BsKGEJFLagTIXpqnyrduKLUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWUyOGE0MDYtYzU5Mi0z N2IwLTgxZmUtOGU1YmNmYmRkNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ340q+qEeXmlfQ3bGAQ3ynIs+q9yGYhiIhHL4qEWPoEXz4lktgTCkM HfdcNYQI4xsMAud8u7LCz/XSVQTR9VpLIWmJPWUEFputKvW+GwQn5AXvlZsDIVzq lXqgfGIASJ6qIZTabGOaIicVeudkj1lYG2bNBOtzlD/xufNd/vQsrAtep3xLQgMM kYFcdkW24fbxBuPh0W/cqFCzGs5xbKSYk0YzYLpkCSRTuGlYTNoRXAaXM+UjNo0w tfZcImTh+JB7RxVvUT7bRwd5QBw2oppyT+PY2jA6HA2sdsY9YXtvgk5Hei04Yje8 KenBUHERGiWFmt+9jWeNccLSuJ2DDbA= -----END CERTIFICATE-----Generated at Tue Apr 21 20:33:14 2026 by rpki-client