$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1ee408-9d58-3bd5-91d9-77f2c1da8dbe.roa File: da1ee408-9d58-3bd5-91d9-77f2c1da8dbe.roa (raw, json) Hash identifier: WVy5MW3QWnnQbqD1GcCR/Wv/azEZm4CC5Otn3BhOz+4= Subject key identifier: 14:03:D2:D1:3C:3D:45:B6:78:1C:BD:8F:69:1D:0D:2F:6D:8F:22:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6D9231382F07E79CD1A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1ee408-9d58-3bd5-91d9-77f2c1da8dbe.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 76.102.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:d9:23:13:82:f0:7e:79:cd:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3e8b2bad-9981-49d2-acc1-3447ae0a48cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:9a:e3:1b:4e:8a:38:f1:5e:25:35:9b:56: c6:cf:50:10:57:ad:fb:25:d9:68:66:7b:a2:46:16: 98:99:ba:c5:c3:17:2c:31:4d:1a:02:7c:fa:68:3f: 04:0d:10:f8:e7:aa:fa:57:97:9f:f2:b8:d6:fe:96: e5:42:4f:b8:66:0e:25:82:4f:6d:19:76:25:6a:a1: 40:81:6e:c9:77:25:90:10:6b:41:e3:ab:7e:46:b6: b4:17:78:dc:8d:6e:46:10:c7:06:97:4a:2a:7e:b2: d8:45:ae:04:8d:4d:52:86:e7:aa:ac:fb:af:cf:fb: ef:da:e1:12:c6:66:fd:47:40:27:47:92:16:d9:17: 67:f2:40:f5:5f:16:7d:25:3a:31:ca:c2:08:af:b9: f5:5c:a4:8c:fe:32:1b:49:4a:fb:20:0e:a1:bd:67: 7f:aa:02:05:19:ce:ca:f5:0f:96:65:df:e7:2d:c2: 1d:8e:fc:56:0c:d4:4c:e1:d3:84:6f:c9:c4:00:86: 02:f5:03:ed:8b:a3:2a:b1:c9:52:14:21:40:f2:08: 54:15:8b:f3:9d:6c:eb:0d:62:3f:c1:8e:80:b6:d2: e6:37:df:8f:07:c4:ba:f2:d1:f8:55:8c:ee:06:d4: 4d:81:3c:3b:4b:6f:56:de:e2:ef:54:21:66:75:49: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:03:D2:D1:3C:3D:45:B6:78:1C:BD:8F:69:1D:0D:2F:6D:8F:22:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da1ee408-9d58-3bd5-91d9-77f2c1da8dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:37:14:8d:ff:74:80:cd:37:71:08:42:06:f3:a6:39:4f:39: 7a:e8:67:7d:ac:98:c4:17:56:a2:ed:0e:87:8a:92:16:01:b1: be:c6:5d:9f:ba:9d:0a:cf:e5:f3:67:9f:c7:e4:d0:ab:36:4e: 38:81:10:73:ac:68:90:0f:e6:41:c4:59:46:52:0b:d1:56:9d: 88:61:a8:99:d6:4e:f7:ad:99:25:16:b9:5d:66:6f:bf:40:bf: da:40:46:a8:42:45:e6:f4:1e:76:88:54:b0:0b:b4:81:f2:bf: c5:28:8b:f5:f5:18:64:ee:10:7d:b6:15:a4:20:86:65:c4:59: a1:c9:6e:ba:b7:29:a1:cb:27:b6:c7:a9:17:b8:8f:b5:cf:d9: 44:9f:e1:cf:89:6a:37:a8:d0:50:14:6a:99:96:2d:15:41:60: 1e:06:26:22:bb:fa:b5:19:fb:60:30:f2:81:5c:09:c9:35:7f: cd:0a:dd:b9:3f:c1:79:b2:cf:d8:43:4a:d6:84:76:b3:6d:7a: 28:00:71:27:d9:24:c7:3f:40:4e:03:16:19:c1:fa:39:36:1e: 5e:d3:95:8f:8b:4d:b5:20:61:ca:ec:34:5b:c3:b1:8b:85:cd: d0:d0:3f:d7:1b:8d:1e:89:d5:98:f1:84:24:f5:b2:34:c4:89: 45:e6:bf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9tkjE4LwfnnNGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk M2U4YjJiYWQtOTk4MS00OWQyLWFjYzEtMzQ0N2FlMGE0OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKKa4xtOijjxXiU1m1bGz1AQV637JdloZnui RhaYmbrFwxcsMU0aAnz6aD8EDRD456r6V5ef8rjW/pblQk+4Zg4lgk9tGXYlaqFA gW7JdyWQEGtB46t+Rra0F3jcjW5GEMcGl0oqfrLYRa4EjU1ShueqrPuvz/vv2uES xmb9R0AnR5IW2Rdn8kD1XxZ9JToxysIIr7n1XKSM/jIbSUr7IA6hvWd/qgIFGc7K 9Q+WZd/nLcIdjvxWDNRM4dOEb8nEAIYC9QPti6MqsclSFCFA8ghUFYvznWzrDWI/ wY6AttLmN9+PB8S68tH4VYzuBtRNgTw7S29W3uLvVCFmdUk3OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQD0tE8PUW2eBy9j2kdDS9tjyLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGExZWU0MDgtOWQ1OC0z YmQ1LTkxZDktNzdmMmMxZGE4ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB03FI3/dIDNN3EIQgbzpjlPOXroZ32smMQXVqLtDoeKkhYBsb7GXZ+6 nQrP5fNnn8fk0Ks2TjiBEHOsaJAP5kHEWUZSC9FWnYhhqJnWTvetmSUWuV1mb79A v9pARqhCReb0HnaIVLALtIHyv8Uoi/X1GGTuEH22FaQghmXEWaHJbrq3KaHLJ7bH qRe4j7XP2USf4c+Jajeo0FAUapmWLRVBYB4GJiK7+rUZ+2Aw8oFcCck1f80K3bk/ wXmyz9hDStaEdrNteigAcSfZJMc/QE4DFhnB+jk2Hl7TlY+LTbUgYcrsNFvDsYuF zdDQP9cbjR6J1ZjxhCT1sjTEiUXmv6M= -----END CERTIFICATE-----Generated at Tue Apr 21 20:18:11 2026 by rpki-client