$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a4495-10dd-3bcb-b48c-78cfc76af99b.roa File: bf5a4495-10dd-3bcb-b48c-78cfc76af99b.roa (raw, json) Hash identifier: 9EUuqmjkquCrKLGhjo+iVAerPxwVTcAl28/DdnjTxEg= Subject key identifier: 40:6A:0A:56:58:C5:2C:23:DB:38:FB:B2:4F:F2:F0:8A:89:AC:40:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6DCEC579C642E1277BDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a4495-10dd-3bcb-b48c-78cfc76af99b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.126.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:dc:ec:57:9c:64:2e:12:77:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d02f71c3-ed78-4246-8d27-e2e0e3dfe311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:9f:56:6e:d6:c0:af:a7:b3:a8:01:ef:60: c9:b9:a2:43:bc:1b:87:17:40:24:c4:d9:0b:c5:67: 34:5b:49:a7:7e:e2:a6:ba:dc:fb:ac:9c:5d:6b:1c: fe:18:27:77:a9:42:a9:24:f3:8f:e1:65:44:26:a1: 0e:55:d8:5c:1a:b8:2d:e4:8f:bd:62:c9:8c:d8:bc: 21:0d:96:1a:38:a4:d7:55:21:0b:4d:42:45:cd:ac: e3:1c:56:a5:61:31:1a:6c:26:0b:9d:69:34:48:02: aa:2d:1f:43:75:17:9f:6d:7e:c5:a9:8c:95:bd:e3: 6a:a2:34:9d:34:a3:5c:e0:ba:06:db:de:7a:85:7f: 8e:b5:77:f1:db:ab:91:18:b0:a8:74:65:45:de:24: 51:16:dc:07:e7:63:8f:bb:c3:aa:cd:04:f3:aa:81: 88:b0:cf:b8:81:77:d3:b7:aa:b0:d4:1c:ff:08:f8: d6:6b:4a:aa:03:9c:4b:28:21:b4:58:d1:78:ab:6e: 1e:50:4f:33:cc:ff:e1:fa:20:ec:82:78:fa:64:a9: 55:a1:16:37:11:9e:8e:29:9e:9e:20:9e:f6:88:22: c4:d1:38:38:ed:3f:b0:d0:a2:94:02:4d:be:bd:8f: fe:54:96:ce:13:00:bb:f4:2c:6e:68:48:18:40:b8: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:0A:56:58:C5:2C:23:DB:38:FB:B2:4F:F2:F0:8A:89:AC:40:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf5a4495-10dd-3bcb-b48c-78cfc76af99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.126.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:56:81:ef:22:96:74:55:e5:a9:c2:c3:86:4c:e0:70:5b:d0: 00:c1:59:4e:c6:0e:ec:5c:83:6b:16:aa:90:6c:9e:ad:67:39: 25:0b:a5:1b:c9:cf:9f:20:3d:6b:36:11:ed:b0:7d:c7:7d:14: ca:9d:a3:9c:53:df:1b:f8:11:e1:34:bb:c4:7b:05:cc:f0:d0: a7:21:e9:5c:9a:92:2c:15:ef:14:64:7c:ce:31:7e:63:41:04: 5b:d4:9d:f7:55:32:c7:c1:de:e1:38:81:71:70:8f:9a:2f:42: dc:14:83:1d:18:ca:38:26:fe:26:90:45:be:64:36:bc:a9:c0: 1d:d9:71:7f:9b:23:9d:6f:d0:a2:bd:02:53:6d:1a:4f:15:37: 26:1f:e1:69:2f:62:d6:63:b9:80:cf:77:b4:34:9d:13:22:24: b5:1e:1a:84:37:ee:fd:7c:00:9e:ce:d0:85:d7:c3:08:29:3a: 26:8e:0d:c6:c3:a5:6a:af:7c:d9:05:7d:11:4c:2f:d4:5f:d5: a2:35:90:0a:e1:0c:fe:63:67:d1:e4:c6:46:9e:71:55:2f:d5: 4e:22:18:3b:60:52:bb:8e:7e:0f:dd:92:f1:a6:70:94:26:a4: ee:d1:70:a7:ff:cd:5e:37:8c:50:8b:a4:65:d7:de:a8:cb:33: c1:a0:f9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9tzsV5xkLhJ3vcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDAyZjcxYzMtZWQ3OC00MjQ2LThkMjctZTJlMGUzZGZlMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuKfVm7WwK+ns6gB72DJuaJDvBuHF0AkxNkL xWc0W0mnfuKmutz7rJxdaxz+GCd3qUKpJPOP4WVEJqEOVdhcGrgt5I+9YsmM2Lwh DZYaOKTXVSELTUJFzazjHFalYTEabCYLnWk0SAKqLR9DdRefbX7FqYyVveNqojSd NKNc4LoG2956hX+OtXfx26uRGLCodGVF3iRRFtwH52OPu8OqzQTzqoGIsM+4gXfT t6qw1Bz/CPjWa0qqA5xLKCG0WNF4q24eUE8zzP/h+iDsgnj6ZKlVoRY3EZ6OKZ6e IJ72iCLE0Tg47T+w0KKUAk2+vY/+VJbOEwC79CxuaEgYQLhgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBqClZYxSwj2zj7sk/y8IqJrECAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY1YTQ0OTUtMTBkZC0z YmNiLWI0OGMtNzhjZmM3NmFmOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATH7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNWge8ilnRV5anCw4ZM4HBb0ADBWU7GDuxcg2sWqpBsnq1nOSULpRvJ z58gPWs2Ee2wfcd9FMqdo5xT3xv4EeE0u8R7Bczw0Kch6VyakiwV7xRkfM4xfmNB BFvUnfdVMsfB3uE4gXFwj5ovQtwUgx0Yyjgm/iaQRb5kNrypwB3ZcX+bI51v0KK9 AlNtGk8VNyYf4WkvYtZjuYDPd7Q0nRMiJLUeGoQ37v18AJ7O0IXXwwgpOiaODcbD pWqvfNkFfRFML9Rf1aI1kArhDP5jZ9HkxkaecVUv1U4iGDtgUruOfg/dkvGmcJQm pO7RcKf/zV43jFCLpGXX3qjLM8Gg+So= -----END CERTIFICATE-----Generated at Tue Apr 21 21:39:30 2026 by rpki-client