$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2be78b7a-0383-359d-8313-589933d89a0c.roa File: 2be78b7a-0383-359d-8313-589933d89a0c.roa (raw, json) Hash identifier: Aa0HoFKjUU/exRiWzc5Caz87V9WUxYLMYv0R2Fq1dWU= Subject key identifier: A4:2E:32:E0:09:17:5D:16:91:02:E6:14:12:B7:D5:06:DD:7A:0F:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAEFDB3241F39AFF142D48 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2be78b7a-0383-359d-8313-589933d89a0c.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 76.19.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:ef:db:32:41:f3:9a:ff:14:2d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=21b582f4-6c22-4fe5-8b7d-1c6e95b06fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:45:81:c2:96:88:b1:f9:d3:12:c7:df:d0: 39:a6:6d:8d:53:d2:39:68:15:9f:01:9e:ac:ec:97: bd:fc:1a:10:06:e1:81:dc:53:b8:83:22:23:ef:2e: b6:d8:61:64:b2:0b:ab:2a:d8:48:1a:0a:01:aa:4b: 89:f0:68:65:aa:64:40:22:ab:8a:76:7e:d1:09:16: 5e:00:8d:26:f1:21:0f:13:f6:d9:88:e7:30:d7:ea: 41:f4:5b:71:35:ce:26:c1:71:cb:89:f0:cc:34:da: bb:cc:52:4f:96:b4:c1:16:34:d4:11:70:e1:38:57: ac:ab:83:c8:46:f0:9d:aa:a6:1f:eb:58:49:13:7b: c9:72:c1:84:c9:54:90:f7:26:62:b3:5f:c7:84:46: c6:38:e3:e1:eb:c0:c8:90:85:b6:23:64:01:f0:5d: 11:16:5d:2a:80:d1:67:ba:a4:d5:0c:4f:e3:39:0a: 09:a4:9f:c5:c8:3d:75:c9:d9:c5:b9:ed:ff:25:ca: c2:c4:bc:e8:51:4c:d5:5a:17:c6:59:83:bb:c5:bf: d1:69:01:a2:19:88:94:78:46:56:9c:e6:b1:40:28: 72:c4:53:77:c6:f1:bb:6b:16:b4:86:de:c9:23:b1: 45:b2:8d:d8:aa:bc:3c:70:30:0c:38:3c:40:07:6c: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:32:E0:09:17:5D:16:91:02:E6:14:12:B7:D5:06:DD:7A:0F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2be78b7a-0383-359d-8313-589933d89a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.19.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:22:32:d1:1e:c8:cb:f4:35:78:1e:5f:b6:d1:dd:71:1e:8e: 49:08:74:aa:31:e8:91:bb:8a:1c:ee:ea:f6:c6:75:15:80:ab: 30:6f:07:a2:0b:e6:d0:22:fc:e2:35:2a:c7:4c:ee:64:f3:15: f1:20:b9:8d:f1:72:b5:ba:0c:ff:cd:c7:ba:2c:45:f5:af:b5: 42:09:1f:05:f6:e1:61:73:47:6f:15:fc:28:4d:84:71:7a:98: 36:ed:4e:6a:2e:55:73:44:ba:2a:2c:60:f8:8b:94:d3:06:a4: 87:c0:e4:a9:77:74:6f:f9:fb:09:70:4d:c9:c9:c8:64:18:0d: 7c:07:b7:f2:2c:f5:17:bd:d9:79:c4:b9:9b:d1:eb:95:b7:ae: 8c:18:ad:d0:8c:b5:57:dd:80:ff:62:5c:24:8f:7b:05:6d:e4: 71:94:c1:21:00:96:2d:6b:20:9a:6c:da:27:9e:e7:ad:9b:7b: ee:55:eb:15:8a:96:9a:c1:ca:94:b4:9a:d2:6c:7b:f3:35:00: d0:fb:6e:bf:58:40:69:b0:b6:f7:97:a6:f7:51:b8:e4:82:4c: 02:81:62:96:24:77:51:9a:ea:e3:9a:65:7c:dd:0b:11:e7:87: a9:13:ce:7a:f9:33:81:c8:2f:fc:2e:0a:c9:a9:fc:a9:88:b5: 5f:a5:32:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuu/bMkHzmv8ULUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjFiNTgyZjQtNmMyMi00ZmU1LThiN2QtMWM2ZTk1YjA2ZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPhFgcKWiLH50xLH39A5pm2NU9I5aBWfAZ6s 7Je9/BoQBuGB3FO4gyIj7y622GFksgurKthIGgoBqkuJ8GhlqmRAIquKdn7RCRZe AI0m8SEPE/bZiOcw1+pB9FtxNc4mwXHLifDMNNq7zFJPlrTBFjTUEXDhOFesq4PI RvCdqqYf61hJE3vJcsGEyVSQ9yZis1/HhEbGOOPh68DIkIW2I2QB8F0RFl0qgNFn uqTVDE/jOQoJpJ/FyD11ydnFue3/JcrCxLzoUUzVWhfGWYO7xb/RaQGiGYiUeEZW nOaxQChyxFN3xvG7axa0ht7JI7FFso3Yqrw8cDAMODxAB2w5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQuMuAJF10WkQLmFBK31Qbdeg9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJlNzhiN2EtMDM4My0z NTlkLTgzMTMtNTg5OTMzZDg5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwiMtEeyMv0NXgeX7bR3XEejkkIdKox6JG7ihzu6vbGdRWAqzBvB6IL 5tAi/OI1KsdM7mTzFfEguY3xcrW6DP/Nx7osRfWvtUIJHwX24WFzR28V/ChNhHF6 mDbtTmouVXNEuiosYPiLlNMGpIfA5Kl3dG/5+wlwTcnJyGQYDXwHt/Is9Re92XnE uZvR65W3rowYrdCMtVfdgP9iXCSPewVt5HGUwSEAli1rIJps2iee562be+5V6xWK lprBypS0mtJse/M1AND7br9YQGmwtveXpvdRuOSCTAKBYpYkd1Ga6uOaZXzdCxHn h6kTznr5M4HIL/wuCsmp/KmItV+lMpE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:11:14 2026 by rpki-client