$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34334011-f7e4-3b49-b690-2d8b25a52d22.roa File: 34334011-f7e4-3b49-b690-2d8b25a52d22.roa (raw, json) Hash identifier: oPWvLgdIoVrpCR6dmkpHlwyO7NVXLVj98xBNUEdkNdk= Subject key identifier: 5D:B8:90:17:81:8C:28:D7:CD:81:FE:97:4E:A9:2E:5B:3D:AB:AA:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB3560F6A1833C72DF9080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34334011-f7e4-3b49-b690-2d8b25a52d22.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 76.20.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:35:60:f6:a1:83:3c:72:df:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=fce54c03-57a3-4ed4-b37f-09655bd63c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:bc:dc:0e:92:c7:dc:73:d4:af:88:35:73: 1d:fc:21:83:a7:90:e0:b6:81:4c:d8:9e:35:af:c6: fe:c8:17:7e:6a:73:ba:03:f4:43:ca:74:62:00:a8: c4:79:71:c7:16:e2:1f:2a:2b:c8:ec:5b:d6:e1:21: e1:53:08:cb:f1:92:62:b7:7f:76:ed:cf:c8:ef:43: ad:22:7f:07:17:ca:cd:d8:5e:a1:df:b9:d5:44:10: 48:e3:1e:1a:fb:c3:8a:41:c5:55:45:22:1d:61:1d: 5f:0c:03:3c:6f:64:e1:ee:ba:cd:58:ee:46:c3:02: 43:a8:b3:16:40:bd:aa:79:0c:d3:9e:a1:d1:75:da: 6a:cb:b7:aa:aa:b2:ed:cb:b0:72:d1:e7:1f:a2:67: 36:98:a7:80:cd:e2:88:ae:7f:d8:93:50:c2:67:51: f3:d5:95:56:e1:b2:40:63:0b:58:5b:65:06:77:3e: 23:7d:dc:06:6a:0d:4c:a2:4d:42:f7:5a:0c:d5:1e: ad:cf:4d:c6:67:ad:b1:5f:85:be:64:28:77:6b:f5: 72:f1:d7:02:7e:cc:59:56:5e:b6:ab:27:8e:41:02: 65:c8:10:93:61:79:f8:2a:43:41:f0:f3:6c:15:b7: c1:91:76:95:62:5e:66:54:65:ec:5f:0e:08:3a:b6: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B8:90:17:81:8C:28:D7:CD:81:FE:97:4E:A9:2E:5B:3D:AB:AA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34334011-f7e4-3b49-b690-2d8b25a52d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:72:d9:85:ce:84:9e:f0:5c:1f:f4:2a:a3:94:0f:e6:44:b8: 69:9b:87:1f:be:bb:fc:64:d5:06:6b:0b:ea:9c:5d:7b:1a:e8: ac:41:6c:44:39:51:40:ff:a7:c9:d1:73:b7:3f:e2:cd:43:19: a1:56:43:0f:31:b5:14:dc:bb:7d:62:f2:0f:19:d7:3f:fc:1f: ad:12:22:bf:a1:71:17:b2:f0:c9:fd:23:db:f2:cf:62:dc:9b: 19:6f:bf:9f:51:0f:6d:41:16:56:50:76:e8:d5:e7:f8:f9:5a: a8:b5:32:ef:a0:e7:84:ed:34:f9:2a:0b:17:1f:8b:1e:d6:b0: 9c:37:9c:e8:0d:86:c6:8d:68:96:fc:0b:28:19:ae:2e:f3:c9: 51:b6:c8:47:58:9e:b8:22:42:f8:dd:a3:ed:19:37:8f:c8:e4: 20:c7:f1:05:25:24:22:27:f1:3f:35:cb:db:c6:69:5e:12:b4: 56:cc:d7:bd:28:ae:16:fd:1c:d4:bc:fb:9b:d1:83:c5:b3:41: 2a:7c:af:81:f7:fa:83:0c:fb:e1:4c:27:38:8b:d4:b3:d3:03: 1a:db:a8:03:38:b1:cb:73:b3:86:5d:d0:39:a1:5e:f3:52:9b: 1f:17:1d:92:57:48:c7:1e:5f:09:d2:f5:ac:e6:0f:a7:62:95: ae:07:67:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzVg9qGDPHLfkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZmNlNTRjMDMtNTdhMy00ZWQ0LWIzN2YtMDk2NTViZDYzYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qK83A6Sx9xz1K+INXMd/CGDp5DgtoFM2J41 r8b+yBd+anO6A/RDynRiAKjEeXHHFuIfKivI7FvW4SHhUwjL8ZJit3927c/I70Ot In8HF8rN2F6h37nVRBBI4x4a+8OKQcVVRSIdYR1fDAM8b2Th7rrNWO5GwwJDqLMW QL2qeQzTnqHRddpqy7eqqrLty7By0ecfomc2mKeAzeKIrn/Yk1DCZ1Hz1ZVW4bJA YwtYW2UGdz4jfdwGag1Mok1C91oM1R6tz03GZ62xX4W+ZCh3a/Vy8dcCfsxZVl62 qyeOQQJlyBCTYXn4KkNB8PNsFbfBkXaVYl5mVGXsXw4IOrbJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF24kBeBjCjXzYH+l06pLls9q6rKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQzMzQwMTEtZjdlNC0z YjQ5LWI2OTAtMmQ4YjI1YTUyZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINy2YXOhJ7wXB/0KqOUD+ZEuGmbhx++u/xk1QZrC+qcXXsa6KxBbEQ5 UUD/p8nRc7c/4s1DGaFWQw8xtRTcu31i8g8Z1z/8H60SIr+hcRey8Mn9I9vyz2Lc mxlvv59RD21BFlZQdujV5/j5Wqi1Mu+g54TtNPkqCxcfix7WsJw3nOgNhsaNaJb8 CygZri7zyVG2yEdYnrgiQvjdo+0ZN4/I5CDH8QUlJCIn8T81y9vGaV4StFbM170o rhb9HNS8+5vRg8WzQSp8r4H3+oMM++FMJziL1LPTAxrbqAM4sctzs4Zd0DmhXvNS mx8XHZJXSMceXwnS9azmD6dila4HZwA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:22:52 2026 by rpki-client