$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10ed7433-1100-3822-b897-76b8fb4187bc.roa File: 10ed7433-1100-3822-b897-76b8fb4187bc.roa (raw, json) Hash identifier: LBkX9C87K7EVK2Bro+ojCMAcmXLWiV7LFLL/NxDBaj0= Subject key identifier: 45:89:13:80:7E:16:C2:EE:18:E2:56:DD:E7:DD:59:10:A8:1E:BD:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBB0C97B84D629D014E714 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10ed7433-1100-3822-b897-76b8fb4187bc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 76.138.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:b0:c9:7b:84:d6:29:d0:14:e7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ab2f168a-b3b3-4a62-a908-ed61ef9d6256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:47:7e:f6:25:16:80:ee:a9:d8:63:bc:6b: b4:2b:46:81:6f:93:d9:8b:cb:c9:da:12:25:5e:fa: ca:c5:98:ca:02:8d:ef:d1:0e:8a:65:02:3e:c3:48: 99:75:67:6a:90:b6:18:5c:20:92:ea:45:bb:fa:67: 7a:54:75:98:40:f5:f6:4f:2b:c3:5e:59:44:da:2b: ca:70:d5:5e:bc:d3:54:d9:11:7b:82:94:0c:d7:27: 20:91:bd:9f:52:e7:9a:b1:5e:69:de:9d:1f:f6:4d: 21:78:3d:cb:82:d3:0f:e8:12:59:62:3c:22:8a:4f: ea:6b:81:67:5d:78:98:24:3e:46:c1:03:6c:9c:30: d2:a2:17:95:38:2d:a6:4f:4d:62:94:f7:c1:dc:25: cb:c4:7a:3d:02:39:70:81:f1:94:fe:bc:d2:2a:be: 5b:d4:c3:d8:7d:f4:15:2d:aa:93:27:97:20:e1:5f: fc:5c:05:17:df:08:83:d0:ef:05:bb:77:df:fd:58: 1e:03:9f:4b:d7:c4:5a:bf:5c:19:2e:ed:25:4a:21: 2c:f2:d6:4d:be:5c:73:6f:cb:3a:24:31:c8:35:52: 51:eb:40:2e:48:b3:ca:cd:b7:78:18:65:92:0a:60: ef:1f:e3:e9:f9:36:fa:7f:fb:c4:84:13:58:67:93: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:13:80:7E:16:C2:EE:18:E2:56:DD:E7:DD:59:10:A8:1E:BD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10ed7433-1100-3822-b897-76b8fb4187bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3b:c0:bd:4c:36:1c:cc:93:91:6f:82:48:d3:fc:30:96:bf: 81:41:e6:91:88:36:71:c3:d7:9c:d6:83:7b:6d:6c:b3:64:b9: a5:08:45:95:ae:59:b1:59:51:7b:b5:90:34:8d:64:8d:bb:9b: 0c:bd:c7:85:44:5f:68:0b:ee:98:3c:6b:3d:ab:1c:f2:3f:ff: 07:ae:d5:d3:7d:02:7c:70:1b:da:fb:b8:13:2c:4c:69:71:0a: 54:0b:5e:c4:55:16:69:0e:7a:0a:73:b4:04:ad:06:da:df:82: a2:f9:0d:94:15:ac:b5:d8:8a:92:ad:5d:de:8e:11:2f:83:b7: 79:6a:dc:30:8a:81:51:31:6b:3d:ad:69:b7:a4:32:42:1e:7b: a7:a4:e7:9f:d9:6a:15:f5:19:da:73:91:c7:dd:8c:2c:3f:53: e6:97:eb:cd:06:92:9a:a2:2d:de:da:08:4c:68:9a:20:0b:0a: a7:05:ae:3a:f6:c2:25:09:ea:f9:65:98:2a:45:42:ee:d4:4b: 9a:bf:59:9a:93:b5:a7:e5:ae:63:41:0f:28:33:ce:01:be:1e: fc:5c:d1:06:9e:97:6d:27:93:42:2d:7e:0e:b0:5c:8b:62:0e: 28:18:c5:eb:c3:53:b4:91:1c:11:aa:a9:e5:dd:73:a8:c6:91: d1:b6:72:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu7DJe4TWKdAU5xQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YWIyZjE2OGEtYjNiMy00YTYyLWE5MDgtZWQ2MWVmOWQ2MjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixlHfvYlFoDuqdhjvGu0K0aBb5PZi8vJ2hIl XvrKxZjKAo3v0Q6KZQI+w0iZdWdqkLYYXCCS6kW7+md6VHWYQPX2TyvDXllE2ivK cNVevNNU2RF7gpQM1ycgkb2fUueasV5p3p0f9k0heD3LgtMP6BJZYjwiik/qa4Fn XXiYJD5GwQNsnDDSoheVOC2mT01ilPfB3CXLxHo9AjlwgfGU/rzSKr5b1MPYffQV LaqTJ5cg4V/8XAUX3wiD0O8Fu3ff/VgeA59L18Rav1wZLu0lSiEs8tZNvlxzb8s6 JDHINVJR60AuSLPKzbd4GGWSCmDvH+Pp+Tb6f/vEhBNYZ5OIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWJE4B+FsLuGOJW3efdWRCoHr15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBlZDc0MzMtMTEwMC0z ODIyLWI4OTctNzZiOGZiNDE4N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTIrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM7wL1MNhzMk5FvgkjT/DCWv4FB5pGINnHD15zWg3ttbLNkuaUIRZWu WbFZUXu1kDSNZI27mwy9x4VEX2gL7pg8az2rHPI//weu1dN9AnxwG9r7uBMsTGlx ClQLXsRVFmkOegpztAStBtrfgqL5DZQVrLXYipKtXd6OES+Dt3lq3DCKgVExaz2t abekMkIee6ek55/ZahX1GdpzkcfdjCw/U+aX680GkpqiLd7aCExomiALCqcFrjr2 wiUJ6vllmCpFQu7US5q/WZqTtaflrmNBDygzzgG+Hvxc0Qael20nk0Itfg6wXIti DigYxevDU7SRHBGqqeXdc6jGkdG2cmE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:05 2026 by rpki-client