$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4458aac-3b1a-3aaa-8221-2666a3c482f5.roa File: a4458aac-3b1a-3aaa-8221-2666a3c482f5.roa (raw, json) Hash identifier: qtMopRjZ+TrAnPB/FGipMwMSuW6YuiWBXPjwpeMSGh4= Subject key identifier: C7:D9:D7:CC:45:44:01:37:6F:A1:BC:0A:86:72:D1:7B:A7:52:E1:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7357143312BCBA129B700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4458aac-3b1a-3aaa-8221-2666a3c482f5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 76.116.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:35:71:43:31:2b:cb:a1:29:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9c14c208-14b5-4af1-a2f0-f52e545c5cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:b1:80:23:30:60:a1:b6:31:c5:ff:12:85: b2:ce:bd:1d:42:1f:24:bf:ed:48:19:84:b4:48:bf: 49:32:bd:a2:9a:01:f3:76:b2:24:bf:a7:61:b0:9f: 12:37:6d:32:56:c7:6a:5a:ca:1b:3c:1c:ab:3a:ac: 53:0d:9b:f6:ef:48:7f:d1:e3:aa:fd:e2:e7:a5:eb: 09:3e:78:fe:74:b9:ce:ad:67:7e:3c:50:a8:ce:bf: be:a7:b2:74:12:3e:a1:8d:b4:df:c1:02:62:7b:82: 55:e3:a7:06:04:9b:7b:fd:6a:31:78:82:7e:63:3b: 56:c5:10:33:05:7f:5e:9d:a8:fe:2a:d3:af:b2:e7: d5:b1:19:d7:8c:e9:ea:ee:f1:ad:87:0f:25:04:ec: cf:ae:91:5b:07:d6:1b:07:96:6c:31:97:d1:6c:79: 44:a3:11:62:18:81:58:e2:48:76:9f:d7:28:3b:a5: 87:6e:f6:21:e5:4e:c6:de:df:8a:cb:2d:40:8d:58: 83:bb:f9:e4:4c:0e:18:e3:26:c2:4e:b6:f6:f3:99: 6d:48:66:d2:44:f9:07:7c:c2:2e:38:a7:23:f2:dd: 5c:1e:bd:58:72:06:69:a1:7b:4b:68:71:3c:6b:ff: bb:2b:d3:77:56:01:b0:59:9c:b3:9a:6f:25:69:25: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D9:D7:CC:45:44:01:37:6F:A1:BC:0A:86:72:D1:7B:A7:52:E1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4458aac-3b1a-3aaa-8221-2666a3c482f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8a:94:16:d6:b6:de:2d:ac:fb:bd:b8:46:c1:ba:04:9f:02: 6e:60:e2:c8:ef:b6:2b:33:c4:1d:cb:ee:74:b2:20:59:c1:bd: bd:6c:2d:89:33:cc:47:6d:0e:75:35:c9:b3:8b:49:87:23:62: 41:e2:f1:82:88:dc:ea:c8:cb:c6:29:92:78:37:9a:91:00:fe: fc:11:24:1c:2c:03:b1:3e:62:0e:ad:a8:1f:40:9e:8b:87:ce: d1:44:6f:2a:fe:35:f3:e6:da:ba:c6:57:4c:dc:47:72:47:ee: 6a:4c:ad:4d:b7:4c:f5:c4:b7:73:0d:c7:50:bd:a5:48:91:39: c6:30:dc:50:b0:4c:d1:11:93:e1:ab:28:ad:bb:4f:5e:eb:99: 4d:40:5b:38:54:34:5e:0a:d5:ae:35:05:3b:67:0c:19:f5:a4: 77:28:3d:7d:b5:99:f9:c3:ec:28:ba:af:18:69:98:a0:09:19: af:eb:51:73:5d:6a:e9:97:9f:6c:63:93:c5:1f:e6:59:91:93: 1a:fb:74:f8:cf:f3:71:fb:ef:f5:07:16:9e:83:da:75:3b:d9: 59:5f:a9:8e:ad:bb:74:49:ee:b6:cd:38:af:bb:04:b2:4c:c7: 12:94:e8:37:6a:b6:58:21:8f:ab:74:96:48:72:9b:47:6f:fd: f2:c4:9e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9zVxQzEry6EptwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWMxNGMyMDgtMTRiNS00YWYxLWEyZjAtZjUyZTU0NWM1Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnixgCMwYKG2McX/EoWyzr0dQh8kv+1IGYS0 SL9JMr2imgHzdrIkv6dhsJ8SN20yVsdqWsobPByrOqxTDZv270h/0eOq/eLnpesJ Pnj+dLnOrWd+PFCozr++p7J0Ej6hjbTfwQJie4JV46cGBJt7/WoxeIJ+YztWxRAz BX9enaj+KtOvsufVsRnXjOnq7vGthw8lBOzPrpFbB9YbB5ZsMZfRbHlEoxFiGIFY 4kh2n9coO6WHbvYh5U7G3t+Kyy1AjViDu/nkTA4Y4ybCTrb285ltSGbSRPkHfMIu OKcj8t1cHr1YcgZpoXtLaHE8a/+7K9N3VgGwWZyzmm8laSWdWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfZ18xFRAE3b6G8CoZy0XunUuG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ0NThhYWMtM2IxYS0z YWFhLTgyMjEtMjY2NmEzYzQ4MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeKlBbWtt4trPu9uEbBugSfAm5g4sjvtiszxB3L7nSyIFnBvb1sLYkz zEdtDnU1ybOLSYcjYkHi8YKI3OrIy8Ypkng3mpEA/vwRJBwsA7E+Yg6tqB9AnouH ztFEbyr+NfPm2rrGV0zcR3JH7mpMrU23TPXEt3MNx1C9pUiROcYw3FCwTNERk+Gr KK27T17rmU1AWzhUNF4K1a41BTtnDBn1pHcoPX21mfnD7Ci6rxhpmKAJGa/rUXNd aumXn2xjk8Uf5lmRkxr7dPjP83H77/UHFp6D2nU72VlfqY6tu3RJ7rbNOK+7BLJM xxKU6Ddqtlghj6t0lkhym0dv/fLEnnE= -----END CERTIFICATE-----Generated at Tue Apr 21 19:26:33 2026 by rpki-client