$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa File: 13402c56-2c3f-33e2-8588-2b7482b36522.roa (raw, json) Hash identifier: 7/zUb9Vz135mT3YbprE6H9ppO5iVsR5wtJSKWWWJ510= Subject key identifier: 5C:9A:83:A7:17:50:E6:25:FC:F5:67:1C:97:A2:10:7B:89:57:8B:C6 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D6AAA8F23B0911B152EFAE080 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 834 IP address blocks: 75.127.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:8f:23:b0:91:1b:15:2e:fa:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=962eb2f5-8331-46ba-8fa0-5838a829ac76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:06:09:6b:6c:13:18:db:37:d4:ca:6c:00: 0b:c0:19:3d:52:e5:1d:a8:b7:16:e5:e4:33:cf:eb: 94:c8:63:b7:79:b6:05:bf:98:69:e2:37:e1:b4:38: fd:dc:53:04:d2:12:e0:1f:13:07:31:7b:2b:c2:33: 9c:ce:e3:88:58:14:1a:39:65:b6:7d:45:17:73:34: 6b:e5:49:56:bf:3a:f5:bb:ac:5c:a6:57:2d:77:36: d7:6f:e2:9a:30:b9:50:ca:17:b1:a3:05:db:2b:0f: 31:dd:fe:ed:03:29:d7:3d:45:c5:f7:49:f0:30:30: be:26:37:f1:17:eb:dd:09:b9:7a:1c:61:dc:6f:d9: f0:00:d3:f7:1f:40:ef:8d:c7:d1:72:3c:64:fa:14: 5b:3b:b0:b2:82:89:0a:cd:2a:ab:07:e4:d9:90:2c: 22:f1:ad:74:2c:c8:72:35:0a:e7:23:01:05:a6:c2: 15:db:e7:e3:67:fc:66:29:37:fd:14:0b:5f:fa:eb: a6:84:db:6d:5b:58:e2:9e:27:a9:e5:63:a1:87:51: a3:04:83:f4:f0:cd:7f:b4:f0:86:34:b7:e7:f8:aa: e1:84:34:25:f1:4e:76:09:f6:cc:bd:fa:75:cf:c4: fc:e4:47:34:8a:5e:7f:b1:a4:c0:a6:d2:82:1e:fa: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9A:83:A7:17:50:E6:25:FC:F5:67:1C:97:A2:10:7B:89:57:8B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/13402c56-2c3f-33e2-8588-2b7482b36522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c1:00:82:11:02:53:fd:0b:c7:fe:2f:66:04:b1:18:f3:1e: c7:d3:69:ca:e9:75:6f:1a:1f:5e:a0:26:73:f0:29:86:6e:71: 71:13:12:04:d8:1d:d0:03:df:94:dc:db:be:6f:31:9e:c4:34: c0:85:d0:f3:2c:ed:a7:3d:c7:34:54:c1:51:7e:55:f4:7e:b4: 00:46:9c:60:8a:f2:f5:db:06:1d:e4:42:7a:38:a9:92:8b:85: 16:5d:04:a6:ef:6e:5a:8b:80:73:2d:cf:9d:90:5d:ca:17:12: 74:f3:27:d7:f5:bf:9d:95:de:f8:f2:ab:8d:64:44:a6:ed:e5: 80:77:ac:c4:61:6d:07:9c:30:aa:20:41:af:3f:76:d5:3d:65: 50:e0:79:8d:37:7d:34:10:8b:e4:ee:bc:ee:15:b2:9b:95:f1: a1:ad:4c:88:18:e3:06:6d:4f:eb:db:b1:46:22:62:be:13:9a: 18:69:54:db:24:36:08:71:e9:8e:3a:75:b8:47:0f:89:c3:e7: 13:18:51:91:f3:bb:78:af:d0:0f:40:b8:80:dd:78:3d:96:5d: 92:b6:58:0e:0b:69:0c:fd:fe:87:99:54:fa:07:12:0e:67:f1: 23:18:dd:1b:75:9a:7e:57:22:a5:b2:34:a5:ff:be:60:0b:23: 1d:39:d7:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqo8jsJEbFS764IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk OTYyZWIyZjUtODMzMS00NmJhLThmYTAtNTgzOGE4MjlhYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn0GCWtsExjbN9TKbAALwBk9UuUdqLcW5eQz z+uUyGO3ebYFv5hp4jfhtDj93FME0hLgHxMHMXsrwjOczuOIWBQaOWW2fUUXczRr 5UlWvzr1u6xcplctdzbXb+KaMLlQyhexowXbKw8x3f7tAynXPUXF90nwMDC+Jjfx F+vdCbl6HGHcb9nwANP3H0DvjcfRcjxk+hRbO7CygokKzSqrB+TZkCwi8a10LMhy NQrnIwEFpsIV2+fjZ/xmKTf9FAtf+uumhNttW1jiniep5WOhh1GjBIP08M1/tPCG NLfn+KrhhDQl8U52CfbMvfp1z8T85Ec0il5/saTAptKCHvpN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyag6cXUOYl/PVnHJeiEHuJV4vGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMTM0MDJjNTYtMmMzZi0z M2UyLTg1ODgtMmI3NDgyYjM2NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS394MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbBAIIRAlP9C8f+L2YEsRjzHsfTacrpdW8aH16gJnPwKYZucXETEgTY HdAD35Tc275vMZ7ENMCF0PMs7ac9xzRUwVF+VfR+tABGnGCK8vXbBh3kQno4qZKL hRZdBKbvblqLgHMtz52QXcoXEnTzJ9f1v52V3vjyq41kRKbt5YB3rMRhbQecMKog Qa8/dtU9ZVDgeY03fTQQi+TuvO4VspuV8aGtTIgY4wZtT+vbsUYiYr4TmhhpVNsk Nghx6Y46dbhHD4nD5xMYUZHzu3iv0A9AuIDdeD2WXZK2WA4LaQz9/oeZVPoHEg5n 8SMY3Rt1mn5XIqWyNKX/vmALIx051+I= -----END CERTIFICATE-----Generated at Sat Apr 11 02:46:14 2026 by rpki-client