$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3edefe-8492-322c-a71f-c676dd0426cd.roa File: fa3edefe-8492-322c-a71f-c676dd0426cd.roa (raw, json) Hash identifier: tXoflgziEiTpmLqSh4sw3+bWjQBEn1XSjUXMrL1M474= Subject key identifier: 65:92:ED:8D:F1:62:0D:72:51:51:68:78:64:73:60:D0:A0:0F:FD:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E31CF7482C3545AF4737C2C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3edefe-8492-322c-a71f-c676dd0426cd.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 22258 IP address blocks: 76.107.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:74:82:c3:54:5a:f4:73:7c:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=9dacbb9d-d693-4dc8-88fd-8504a8e6fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:cf:83:e9:77:5e:1b:47:ce:58:bd:d6:26: 36:af:46:74:fe:e9:88:8f:1a:99:2c:d0:ce:47:b2: c3:9c:ed:1f:a7:89:8d:a3:1a:59:96:d6:8e:a3:ac: dc:14:91:b2:41:39:8b:bb:7d:e6:93:1b:16:f9:4a: 84:f8:20:69:da:3b:ef:6c:c6:2f:d7:35:42:3b:59: 76:8e:b8:b4:6a:e5:7e:2e:06:ae:a1:d8:ed:58:bc: e9:f1:b5:98:f6:d8:24:22:d2:02:1c:b6:2b:75:aa: b4:c3:d4:31:ef:cf:31:48:33:12:70:a7:b5:96:b1: 5e:72:60:67:79:66:69:5a:94:13:24:0f:bf:2d:9f: dd:b4:52:ee:16:a7:d4:c6:5e:23:2e:a0:1d:dd:7e: 15:fa:0e:40:e1:27:97:e1:1d:67:bf:a0:86:bd:94: bb:8c:88:08:8e:b4:88:6b:eb:68:78:33:b3:b3:5e: 48:e1:12:a4:d9:75:77:d1:15:97:30:52:f0:e8:51: 28:10:99:31:09:99:7d:a9:86:93:17:42:55:e2:d3: a4:da:5c:7e:c9:9d:68:8e:0e:51:1e:79:d5:92:e7: 9d:27:cc:cf:c1:5f:4b:5c:75:8b:95:59:d6:7e:bd: e9:74:4d:20:a0:5f:e7:a6:f0:10:a0:76:b1:8b:c5: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:ED:8D:F1:62:0D:72:51:51:68:78:64:73:60:D0:A0:0F:FD:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa3edefe-8492-322c-a71f-c676dd0426cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.107.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:26:bb:70:a0:f8:04:8c:86:a0:88:93:b3:1f:72:77:b2: 74:52:8e:ff:12:b3:1f:ea:f0:c3:12:b9:4d:a8:77:08:d9:4f: 68:b8:e4:56:b0:c4:ea:d1:14:95:36:ac:cd:02:47:00:58:d3: 1a:e9:e1:e1:36:87:df:09:66:b4:82:7f:e2:c3:c8:b8:6d:a6: 7f:df:de:9d:4c:2b:87:85:aa:2d:c2:08:d8:a3:6b:07:9d:f3: d5:1f:10:9f:13:fd:9e:22:ad:dc:0f:0e:a9:d3:e9:97:cb:9d: e7:2b:3b:50:7f:d4:52:b2:67:e0:26:fa:5e:11:88:62:aa:22: 8f:21:92:fa:23:a3:8a:75:11:6a:4b:63:16:e8:a0:9e:2e:51: 5a:5a:25:16:78:73:16:29:2a:11:45:c9:97:8e:49:a7:2e:d8: 7e:fe:f2:fc:59:e6:37:03:84:94:67:e6:37:49:1b:96:9d:19: 2e:ba:e8:76:77:89:14:81:a8:7a:57:9a:bd:78:89:31:ba:77: 65:92:c9:ac:13:21:80:95:44:d0:67:9d:a2:d5:03:48:4c:82: 17:0f:aa:3d:66:64:e0:60:6e:75:3b:25:6d:95:3c:a6:5c:84: 63:4f:22:d5:7f:6b:18:28:b3:97:63:f6:e5:37:48:dd:6d:26: 46:ee:53:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz3SCw1Ra9HN8LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk OWRhY2JiOWQtZDY5My00ZGM4LTg4ZmQtODUwNGE4ZTZmYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIrPg+l3XhtHzli91iY2r0Z0/umIjxqZLNDO R7LDnO0fp4mNoxpZltaOo6zcFJGyQTmLu33mkxsW+UqE+CBp2jvvbMYv1zVCO1l2 jri0auV+LgauodjtWLzp8bWY9tgkItICHLYrdaq0w9Qx788xSDMScKe1lrFecmBn eWZpWpQTJA+/LZ/dtFLuFqfUxl4jLqAd3X4V+g5A4SeX4R1nv6CGvZS7jIgIjrSI a+toeDOzs15I4RKk2XV30RWXMFLw6FEoEJkxCZl9qYaTF0JV4tOk2lx+yZ1ojg5R HnnVkuedJ8zPwV9LXHWLlVnWfr3pdE0goF/npvAQoHaxi8XrhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWS7Y3xYg1yUVFoeGRzYNCgD/2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmEzZWRlZmUtODQ5Mi0z MjJjLWE3MWYtYzY3NmRkMDQyNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELHJrtwoPgEjIagiJOzH3J3snRSjv8Ssx/q8MMSuU2odwjZT2i45Faw xOrRFJU2rM0CRwBY0xrp4eE2h98JZrSCf+LDyLhtpn/f3p1MK4eFqi3CCNijawed 89UfEJ8T/Z4irdwPDqnT6ZfLnecrO1B/1FKyZ+Am+l4RiGKqIo8hkvojo4p1EWpL YxbooJ4uUVpaJRZ4cxYpKhFFyZeOSacu2H7+8vxZ5jcDhJRn5jdJG5adGS666HZ3 iRSBqHpXmr14iTG6d2WSyawTIYCVRNBnnaLVA0hMghcPqj1mZOBgbnU7JW2VPKZc hGNPItV/axgos5dj9uU3SN1tJkbuU5M= -----END CERTIFICATE-----Generated at Wed Jul 22 00:18:53 2026 by rpki-client