$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa File: 1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa (raw, json) Hash identifier: 88uvn78+AUXgMwLO34QQonGyJLuxWNo2zPiwhyXAY68= Subject key identifier: 8F:FF:06:A8:7A:8F:AD:A2:83:9B:95:8E:C0:78:0F:E3:AA:B8:BC:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB63666DD28902539C3900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 76.142.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:63:66:6d:d2:89:02:53:9c:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1f693cd5-4fb9-4e31-9c32-19b59bdd4962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:16:6f:1c:7e:89:8e:3c:fe:67:6b:cb:e3: ac:f4:d8:e0:55:7f:3f:61:fd:10:80:a2:68:09:8e: 8f:ff:a0:68:ff:1c:db:a5:c2:1f:77:75:dc:18:79: 00:b8:3d:69:58:e5:31:c0:12:ad:3d:5c:65:09:cd: 0e:2a:2d:66:42:fa:5c:33:36:6f:88:ca:f4:93:95: 9d:37:62:97:c6:bb:28:83:f5:09:2b:75:93:7a:ba: 9d:4b:4a:0e:2f:94:80:7b:3c:ce:13:1f:8c:2f:86: f6:45:38:56:7f:54:0c:94:e2:1b:ea:8d:2f:d0:72: 55:35:4f:92:9d:58:dc:12:5e:ad:20:aa:55:4a:6f: 07:3c:0b:49:62:e6:e8:db:7d:61:f3:ab:5a:6f:01: 2a:f7:60:90:1a:09:37:c8:a0:d4:28:ba:01:2c:43: a4:99:ec:1b:80:22:6f:dc:81:9d:48:66:50:1e:e3: 83:eb:2b:48:65:f4:82:61:b4:6c:e8:c6:f1:94:ac: 75:91:e5:03:f5:c1:8d:15:c7:f2:35:5f:61:15:ca: fd:67:83:bd:78:59:62:02:7d:e5:18:f8:b4:98:47: eb:a3:56:80:f7:bc:c6:ee:e7:75:0f:a8:33:d9:d5: e0:21:04:e4:9a:b9:0d:42:ba:b2:74:37:bd:0d:bd: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:06:A8:7A:8F:AD:A2:83:9B:95:8E:C0:78:0F:E3:AA:B8:BC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1051cd0a-eef0-3121-965d-bbca3e9c00b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.142.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5f:8d:46:a2:76:39:3d:0b:08:27:ae:21:ad:ab:83:d2:d7: 44:8f:1a:e6:22:a4:5d:67:1d:f0:25:f3:89:33:36:24:3d:2d: 1c:2d:6e:5e:b2:c8:44:d4:af:ee:32:16:9a:63:56:32:56:db: 08:ca:f1:c0:17:37:8a:72:4e:6b:1e:95:a0:8d:b3:7e:73:67: ef:1d:16:4a:c1:66:6b:05:62:21:ff:f8:ad:93:85:11:fb:8d: 0b:a1:f3:65:69:0c:20:53:2c:04:24:68:cf:90:71:60:ba:ce: ca:64:cf:6c:ea:82:73:0b:bb:96:be:b4:a4:0c:c8:54:54:ec: f8:d9:59:29:34:d8:fe:5c:a2:60:ac:16:fa:ab:46:a9:12:8c: 2c:6e:6d:32:5a:39:ae:c3:59:ae:b1:61:8b:6a:a9:ab:02:64: 5e:94:8b:fe:a9:c3:92:01:b7:7e:b3:50:8f:37:16:ab:d1:9f: fc:ca:a1:3a:20:c0:89:7c:96:6c:51:e8:dc:20:c1:e2:86:04: d6:63:0b:e1:0b:0c:c5:b3:2a:6c:eb:2a:84:90:78:ec:86:d3: 3a:7b:7d:c7:4e:00:23:31:af:47:b5:49:e5:8d:df:78:aa:91: c0:9b:a2:11:b5:0c:99:d9:81:e4:bf:7a:45:65:78:a4:31:9b: 0a:57:58:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2NmbdKJAlOcOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MWY2OTNjZDUtNGZiOS00ZTMxLTljMzItMTliNTliZGQ0OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqcWbxx+iY48/mdry+Os9NjgVX8/Yf0QgKJo CY6P/6Bo/xzbpcIfd3XcGHkAuD1pWOUxwBKtPVxlCc0OKi1mQvpcMzZviMr0k5Wd N2KXxrsog/UJK3WTerqdS0oOL5SAezzOEx+ML4b2RThWf1QMlOIb6o0v0HJVNU+S nVjcEl6tIKpVSm8HPAtJYubo231h86tabwEq92CQGgk3yKDUKLoBLEOkmewbgCJv 3IGdSGZQHuOD6ytIZfSCYbRs6MbxlKx1keUD9cGNFcfyNV9hFcr9Z4O9eFliAn3l GPi0mEfro1aA97zG7ud1D6gz2dXgIQTkmrkNQrqydDe9Db2kmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI//Bqh6j62ig5uVjsB4D+OquLyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA1MWNkMGEtZWVmMC0z MTIxLTk2NWQtYmJjYTNlOWMwMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTI5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5fjUaidjk9CwgnriGtq4PS10SPGuYipF1nHfAl84kzNiQ9LRwtbl6y yETUr+4yFppjVjJW2wjK8cAXN4pyTmselaCNs35zZ+8dFkrBZmsFYiH/+K2ThRH7 jQuh82VpDCBTLAQkaM+QcWC6zspkz2zqgnMLu5a+tKQMyFRU7PjZWSk02P5comCs FvqrRqkSjCxubTJaOa7DWa6xYYtqqasCZF6Ui/6pw5IBt36zUI83FqvRn/zKoTog wIl8lmxR6NwgweKGBNZjC+ELDMWzKmzrKoSQeOyG0zp7fcdOACMxr0e1SeWN33iq kcCbohG1DJnZgeS/ekVleKQxmwpXWCI= -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:19 2026 by rpki-client