$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa File: bca776cf-9d86-36a6-a59d-18187fd4bd84.roa (raw, json) Hash identifier: ltN5XCVrV1qX6E+vhU8PnhcnNvXiVbwcbLvXdmCnNyk= Subject key identifier: AE:58:96:D2:AF:84:D6:70:B2:E3:EF:71:92:0D:43:96:C5:FA:FA:5E Certificate issuer: /CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Certificate serial: 010D0C9F4328584D59EA5637202A73C1A1492A28 Authority key identifier: 95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14585 IP address blocks: 208.76.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:56:37:20:2a:73:c1:a1:49:2a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd381626-0b70-4bbc-b2f1-0eac4f0801f6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=7041b08f-a04a-41f3-8a29-813e9f63d931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:c7:97:ef:d8:32:34:2f:62:24:d5:59:be: 58:25:9c:18:54:60:57:e7:f1:86:a4:3b:59:ae:1c: 3a:a1:ad:5d:7e:f2:d3:3d:13:53:bb:fc:4b:79:44: 86:37:a1:ed:83:a0:bf:ea:1c:d7:a8:52:0a:db:aa: e5:74:ae:5c:99:e1:6e:74:09:0b:00:0a:28:97:a9: 9a:49:04:21:5d:e7:99:39:cd:10:e3:c4:ce:f7:10: f1:bc:d6:10:6a:0b:55:e4:69:83:21:c0:fc:82:92: af:b0:f6:ff:15:5d:4b:d5:8b:40:98:6f:99:49:6c: c4:5d:f6:03:f3:a0:6a:16:9a:84:9e:df:4b:63:b7: f6:f2:97:df:b6:f1:e6:a3:06:a2:96:f0:f4:a5:f5: 30:f5:fe:bd:7f:34:a4:d3:3b:f6:a9:47:86:1d:fb: 5e:bf:55:05:30:d5:4a:6d:a4:a4:7a:3a:73:43:6b: f1:d0:b2:d6:a8:0f:3d:1c:ff:39:09:92:c7:cd:f7: ba:d0:b3:cc:ae:d4:9c:73:9a:14:64:12:78:09:be: 84:c7:4e:ea:66:81:70:5f:de:10:68:e3:4a:cf:55: 33:c3:23:c8:80:c8:aa:fb:8d:cb:c5:ec:ef:23:ce: 0d:ee:40:fc:1f:14:e1:d2:04:17:26:e2:aa:b1:a9: 8d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:96:D2:AF:84:D6:70:B2:E3:EF:71:92:0D:43:96:C5:FA:FA:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/bca776cf-9d86-36a6-a59d-18187fd4bd84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.crl X509v3 Authority Key Identifier: keyid:95:E0:D3:C0:AA:AA:D8:F5:A6:F2:E1:82:C9:59:72:16:F0:62:51:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd381626-0b70-4bbc-b2f1-0eac4f0801f6.cer sbgp-ipAddrBlock: critical IPv4: 208.76.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:1b:38:52:44:ac:ae:b9:8f:00:da:92:b7:c4:74:40:23:10: d2:c3:ea:50:77:63:55:5d:f6:ba:b8:b3:55:5d:ed:82:42:b8: 24:8c:66:10:c7:32:c0:77:1e:df:03:90:f3:c0:fb:cf:f9:57: 3e:9f:6f:56:27:4e:5c:cf:fd:d4:0d:1e:22:22:b4:77:e8:28: 5b:38:7f:55:4c:fc:6c:6a:63:81:21:0a:64:38:1e:a2:6d:e0: b5:61:8a:84:b6:9d:e0:e6:ec:2f:ce:2d:0b:0c:f9:cf:98:46: 0f:30:d1:7e:d9:f6:a3:87:7f:c4:3e:01:af:fb:af:73:c3:c2: 2b:d9:f5:1a:7d:7a:97:f6:c9:06:25:da:91:ed:96:22:48:07: 70:ed:ab:9f:99:3b:45:25:62:f9:47:1b:05:96:50:67:be:31: 79:f5:43:72:3f:6e:52:89:82:e1:a7:c6:eb:77:21:8f:35:2d: 7f:e6:a2:12:d0:4b:0c:e5:84:bd:a0:a3:3e:c1:02:68:75:9c: 8e:f3:02:a9:18:1a:6b:84:e8:73:1e:1b:93:b1:30:87:74:67: 2d:c4:b5:9b:f6:40:06:59:03:2a:e9:15:47:83:c2:67:cc:0d: 03:17:95:0b:a7:04:26:ec:bf:4c:f1:0a:fc:0e:87:ea:0d:f4: 8d:44:2e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lY3ICpzwaFJKigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QzODE2MjYtMGI3MC00YmJjLWIyZjEtMGVhYzRmMDgw MWY2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzA0MWIwOGYtYTA0YS00MWYzLThhMjktODEzZTlmNjNkOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka3Hl+/YMjQvYiTVWb5YJZwYVGBX5/GGpDtZ rhw6oa1dfvLTPRNTu/xLeUSGN6Htg6C/6hzXqFIK26rldK5cmeFudAkLAAool6ma SQQhXeeZOc0Q48TO9xDxvNYQagtV5GmDIcD8gpKvsPb/FV1L1YtAmG+ZSWzEXfYD 86BqFpqEnt9LY7f28pfftvHmowailvD0pfUw9f69fzSk0zv2qUeGHftev1UFMNVK baSkejpzQ2vx0LLWqA89HP85CZLHzfe60LPMrtScc5oUZBJ4Cb6Ex07qZoFwX94Q aONKz1UzwyPIgMiq+43LxezvI84N7kD8HxTh0gQXJuKqsamNbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5YltKvhNZwsuPvcZINQ5bF+vpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4 MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFjNGYwODAxZjYvYmNhNzc2Y2YtOWQ4Ni0z NmE2LWE1OWQtMTgxODdmZDRiZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2QzODE2MjYtMGI3MC00YmJjLWIy ZjEtMGVhYzRmMDgwMWY2L2NkMzgxNjI2LTBiNzAtNGJiYy1iMmYxLTBlYWM0ZjA4 MDFmNi5jcmwwHwYDVR0jBBgwFoAUleDTwKqq2PWm8uGCyVlyFvBiUfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jZDM4MTYyNi0wYjcwLTRiYmMtYjJmMS0wZWFj NGYwODAxZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4bOFJErK65jwDakrfEdEAjENLD6lB3Y1Vd9rq4s1Vd7YJCuCSMZhDH MsB3Ht8DkPPA+8/5Vz6fb1YnTlzP/dQNHiIitHfoKFs4f1VM/GxqY4EhCmQ4HqJt 4LVhioS2neDm7C/OLQsM+c+YRg8w0X7Z9qOHf8Q+Aa/7r3PDwivZ9Rp9epf2yQYl 2pHtliJIB3Dtq5+ZO0UlYvlHGwWWUGe+MXn1Q3I/blKJguGnxut3IY81LX/mohLQ SwzlhL2goz7BAmh1nI7zAqkYGmuE6HMeG5OxMId0Zy3EtZv2QAZZAyrpFUeDwmfM DQMXlQunBCbsv0zxCvwOh+oN9I1ELoo= -----END CERTIFICATE-----Generated at Thu Apr 9 02:27:18 2026 by rpki-client