$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a96df4f-eaea-32f5-8411-adbff674fe20.roa File: 3a96df4f-eaea-32f5-8411-adbff674fe20.roa (raw, json) Hash identifier: PWsf9rxcYm5MfCSwVb5mNumx0xLn9eQ1nNN1NhZeaE4= Subject key identifier: 4C:9E:B5:C3:E8:05:45:32:6B:62:CF:58:18:65:F0:8C:DB:99:45:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB35558FA39342851BD8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a96df4f-eaea-32f5-8411-adbff674fe20.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 76.20.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:35:55:8f:a3:93:42:85:1b:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2472de5a-107f-42a4-803d-e35a402f5dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:29:b2:60:a1:a2:7a:3f:56:41:56:ee:fb: ea:c8:55:e4:5d:3a:eb:74:0e:7a:18:6d:8b:b1:ba: 6f:14:f1:a7:ed:ec:37:d9:ef:2a:c2:92:e5:14:40: f4:42:f4:10:1f:ba:66:96:3a:94:01:eb:d8:e4:6d: f9:11:81:2a:cc:2e:10:76:fe:81:53:16:8b:e5:1e: 9e:49:17:6d:3a:10:a7:24:4d:20:1a:fb:84:10:1b: 01:b5:94:e3:2e:88:71:a0:17:23:eb:70:10:f0:0b: 39:02:13:98:85:14:75:35:ee:92:8c:c8:6b:e7:80: 8a:d7:07:58:b8:0f:32:5c:51:f5:52:2a:7a:0b:27: 10:08:a1:06:84:c4:cf:8f:1a:c0:a2:17:3e:a5:de: 9d:db:2a:d9:bd:35:95:f8:47:c3:4f:27:c8:80:37: 27:4b:dc:fc:3b:f8:27:d3:43:ae:0b:2e:dd:1c:97: 6f:3b:f6:50:0e:9b:35:e4:5b:60:62:66:55:d7:10: 21:c9:39:7b:2a:c5:60:5b:67:f4:97:3c:3c:90:33: e9:09:5a:66:dc:0a:97:21:a4:29:ef:26:72:b2:70: c4:5e:01:56:62:f8:74:3d:1c:6a:ce:61:b9:38:68: 07:7c:8e:ca:b1:3f:6b:39:10:b8:4e:e1:16:03:80: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:B5:C3:E8:05:45:32:6B:62:CF:58:18:65:F0:8C:DB:99:45:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a96df4f-eaea-32f5-8411-adbff674fe20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a1:db:7b:24:e2:0a:67:fd:f8:73:43:ed:05:2c:81:9e:82: 86:35:08:09:ef:d4:9f:94:ea:6a:d8:ea:39:b9:64:9f:67:02: 8a:28:52:bf:7e:40:15:1a:3e:3b:6e:e2:82:4d:87:84:45:bf: 26:32:3e:72:ee:9d:07:02:90:e4:ba:12:b2:3a:87:4e:97:42: af:9d:de:b5:37:3c:d3:b8:5e:bc:55:8f:eb:c4:72:9a:e1:32: e1:cc:fb:48:2e:67:e6:6a:79:50:9c:9b:d3:b1:58:19:0a:8d: 23:1a:a6:0a:ca:5f:07:da:2b:60:e6:db:11:95:fb:de:73:d6: c8:7b:94:95:de:90:3c:ad:97:a7:1c:c1:41:13:41:53:4b:69: 40:3c:e3:26:6f:7e:36:4e:2c:43:88:0b:94:7a:fe:9f:f7:9b: e8:c4:12:d7:b0:31:6c:fb:06:49:43:8a:33:19:70:27:8f:6b: 1b:02:56:11:3c:a6:db:8b:78:60:94:a9:2c:d8:e4:24:30:f5: 11:af:78:dc:6c:2d:54:b7:6f:a1:d0:ff:f0:ea:7e:70:19:4e: 69:37:81:90:98:3b:8d:7b:28:35:41:30:6f:6a:26:07:b4:4f: b1:ea:8c:ba:8c:13:7f:a9:b5:2a:2a:f8:d9:ea:f7:64:b4:8f: a3:e4:ac:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzVVj6OTQoUb2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjQ3MmRlNWEtMTA3Zi00MmE0LTgwM2QtZTM1YTQwMmY1ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxMpsmChono/VkFW7vvqyFXkXTrrdA56GG2L sbpvFPGn7ew32e8qwpLlFED0QvQQH7pmljqUAevY5G35EYEqzC4Qdv6BUxaL5R6e SRdtOhCnJE0gGvuEEBsBtZTjLohxoBcj63AQ8As5AhOYhRR1Ne6SjMhr54CK1wdY uA8yXFH1Uip6CycQCKEGhMTPjxrAohc+pd6d2yrZvTWV+EfDTyfIgDcnS9z8O/gn 00OuCy7dHJdvO/ZQDps15FtgYmZV1xAhyTl7KsVgW2f0lzw8kDPpCVpm3AqXIaQp 7yZysnDEXgFWYvh0PRxqzmG5OGgHfI7KsT9rORC4TuEWA4AxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyetcPoBUUya2LPWBhl8IzbmUU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E5NmRmNGYtZWFlYS0z MmY1LTg0MTEtYWRiZmY2NzRmZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBSiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+h23sk4gpn/fhzQ+0FLIGegoY1CAnv1J+U6mrY6jm5ZJ9nAoooUr9+ QBUaPjtu4oJNh4RFvyYyPnLunQcCkOS6ErI6h06XQq+d3rU3PNO4XrxVj+vEcprh MuHM+0guZ+ZqeVCcm9OxWBkKjSMapgrKXwfaK2Dm2xGV+95z1sh7lJXekDytl6cc wUETQVNLaUA84yZvfjZOLEOIC5R6/p/3m+jEEtewMWz7BklDijMZcCePaxsCVhE8 ptuLeGCUqSzY5CQw9RGveNxsLVS3b6HQ//DqfnAZTmk3gZCYO417KDVBMG9qJge0 T7HqjLqME3+ptSoq+Nnq92S0j6PkrIc= -----END CERTIFICATE-----Generated at Fri Apr 17 11:36:56 2026 by rpki-client