$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa File: 0c840dcf-e21d-3af3-a648-32582eeff7c4.roa (raw, json) Hash identifier: nU/2RfE4y7dQgHMaV9qQPsqYS6iCc5nTFKSQ2cxhErI= Subject key identifier: 91:94:73:26:1A:23:E8:B0:13:7D:51:1A:F5:08:75:08:DD:63:BC:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB640C4EE73905CF6961C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 76.143.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:64:0c:4e:e7:39:05:cf:69:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5aaef2f9-791f-4919-aaf9-64dbb3591a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:0a:9c:65:8d:f9:b3:85:e0:7e:e9:9f:a8: c1:42:8e:c5:b2:0e:ac:83:d8:85:e9:4b:b1:a6:07: 9f:2a:b1:bd:60:80:70:e5:09:f9:92:20:c4:41:0c: dc:9f:4f:f9:51:13:d8:07:96:8e:d6:63:07:3a:b3: 1f:7b:f4:b3:40:ff:bd:b1:35:f6:e8:47:6e:21:9f: 8e:ee:b2:97:25:12:8d:50:a7:55:3d:28:47:00:7b: 04:ca:59:65:53:99:95:d8:dc:62:be:31:3b:59:8d: 46:f6:80:d9:b6:46:ec:e2:66:ab:ac:27:2f:dd:36: e1:f8:e2:ec:28:7f:49:ab:eb:80:99:d1:f4:60:64: 4e:e8:50:16:8c:cc:66:61:44:3d:86:52:c3:5e:9b: aa:7f:1c:ae:b5:54:0c:9b:be:fb:d5:1c:6a:aa:15: bf:11:c3:9e:da:5a:54:52:3c:cc:c0:b6:61:a9:e4: 4f:0a:12:91:c8:37:44:f5:ab:1c:0e:67:54:ac:f8: 16:69:24:49:99:e7:fe:0b:cc:d3:8b:41:24:c7:5d: 51:e1:d4:5e:2c:4c:4a:fc:cd:a2:5e:06:61:66:b4: 49:5a:43:fc:78:95:69:c5:37:73:71:2c:f8:a4:77: 62:ca:13:21:da:2a:aa:b4:bb:37:3d:0e:8d:01:1b: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:94:73:26:1A:23:E8:B0:13:7D:51:1A:F5:08:75:08:DD:63:BC:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c840dcf-e21d-3af3-a648-32582eeff7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:17:7e:be:27:06:7f:e3:9e:7f:1a:29:92:aa:a0:b5:0c:d6: c1:3e:af:b0:bb:59:ca:fd:1d:64:d8:f8:80:88:94:fd:e1:6a: 9a:88:f0:5c:e3:3b:49:d4:a0:db:30:7c:83:a9:0f:9e:4d:dc: d4:15:83:cc:cc:79:10:dc:3d:8b:8c:3a:28:42:79:90:59:7b: 5f:e7:ae:08:79:3b:d4:1c:ea:3f:f2:f3:5c:ce:01:66:26:40: 58:99:11:50:ff:76:1c:b8:b1:50:09:81:8d:f2:e1:3c:7f:b6: f3:f0:92:39:98:b1:13:1e:6e:dd:d4:d8:f2:96:f9:fd:ec:67: d1:99:d5:9d:d8:46:1e:84:d8:f1:d5:83:8e:6d:da:be:2f:8e: 87:e9:19:8b:96:a6:c1:71:d7:f2:27:9c:f5:0a:79:cc:64:2a: 3d:95:b6:80:08:3c:c0:8e:90:91:c0:64:19:33:c8:a6:62:a5: b5:c4:1c:60:7d:39:90:7d:27:3b:5f:71:8e:c7:c6:a7:38:f1: 66:d4:72:93:58:c6:84:e0:b6:3d:d1:e1:e9:f4:32:ea:b0:ed: 3b:52:8b:a7:92:14:a8:35:cd:b2:e5:cd:4f:d4:11:39:5c:1e: 97:54:98:f8:cb:d2:e0:fd:ba:23:62:28:0c:8b:70:7b:0a:e5: 05:bf:b4:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2QMTuc5Bc9pYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NWFhZWYyZjktNzkxZi00OTE5LWFhZjktNjRkYmIzNTkxYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQKnGWN+bOF4H7pn6jBQo7Fsg6sg9iF6Uux pgefKrG9YIBw5Qn5kiDEQQzcn0/5URPYB5aO1mMHOrMfe/SzQP+9sTX26EduIZ+O 7rKXJRKNUKdVPShHAHsEylllU5mV2NxivjE7WY1G9oDZtkbs4marrCcv3Tbh+OLs KH9Jq+uAmdH0YGRO6FAWjMxmYUQ9hlLDXpuqfxyutVQMm7771RxqqhW/EcOe2lpU UjzMwLZhqeRPChKRyDdE9ascDmdUrPgWaSRJmef+C8zTi0Ekx11R4dReLExK/M2i XgZhZrRJWkP8eJVpxTdzcSz4pHdiyhMh2iqqtLs3PQ6NARvqmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGUcyYaI+iwE31RGvUIdQjdY7yMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM4NDBkY2YtZTIxZC0z YWYzLWE2NDgtMzI1ODJlZWZmN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwXfr4nBn/jnn8aKZKqoLUM1sE+r7C7Wcr9HWTY+ICIlP3hapqI8Fzj O0nUoNswfIOpD55N3NQVg8zMeRDcPYuMOihCeZBZe1/nrgh5O9Qc6j/y81zOAWYm QFiZEVD/dhy4sVAJgY3y4Tx/tvPwkjmYsRMebt3U2PKW+f3sZ9GZ1Z3YRh6E2PHV g45t2r4vjofpGYuWpsFx1/InnPUKecxkKj2VtoAIPMCOkJHAZBkzyKZipbXEHGB9 OZB9JztfcY7Hxqc48WbUcpNYxoTgtj3R4en0Muqw7TtSi6eSFKg1zbLlzU/UETlc HpdUmPjL0uD9uiNiKAyLcHsK5QW/tKk= -----END CERTIFICATE-----Generated at Fri Apr 17 09:58:29 2026 by rpki-client