$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/400bbc11-3cf2-3a37-b28a-3f96fb1fa998.roa File: 400bbc11-3cf2-3a37-b28a-3f96fb1fa998.roa (raw, json) Hash identifier: X1LLvrVXzQe7D5tMRb48WLUneD5rlpQiUxUVmiqW6U0= Subject key identifier: 59:B0:26:AA:A9:D4:F2:87:69:9B:C3:A3:B3:7A:A4:C3:69:3A:0D:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC6248FC80BD1A1EC98400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/400bbc11-3cf2-3a37-b28a-3f96fb1fa998.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 76.139.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:62:48:fc:80:bd:1a:1e:c9:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=7be5f5dc-643e-439b-9395-440a454dc0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:a1:a8:a7:f6:92:4f:34:fe:75:f9:e5:02: 38:e9:ad:19:1c:6c:99:a9:69:43:74:ab:59:a6:84: 4e:8a:f4:96:2b:5e:36:62:50:fa:60:99:6b:6d:c3: e6:26:dd:40:41:c0:24:6a:cc:61:6c:12:c7:81:d6: 85:c2:2d:9f:16:07:03:97:33:a8:5b:eb:60:f4:7b: 00:da:33:2c:fc:24:e9:59:a8:9e:aa:92:7f:52:50: d3:ac:bd:87:1e:63:6c:ff:04:01:ec:90:6a:d7:08: 15:16:df:d5:83:d2:7b:e7:84:5c:2a:cc:90:bb:97: 72:9a:0f:5c:f0:4a:83:50:c7:52:c7:00:c1:cb:15: ae:31:2b:33:2e:c0:fc:93:e7:fe:93:92:2b:fd:23: b2:30:0a:58:dc:91:95:72:d7:8c:86:1a:8a:00:82: 18:f1:f6:32:5e:18:8d:f3:a8:3b:06:aa:6b:80:93: 6d:40:93:2f:fd:87:c5:ad:6c:ef:47:7f:f1:bd:a5: 0f:62:2f:07:40:d0:9a:ec:e2:9c:0c:f9:07:6c:8d: 31:71:a8:64:d7:f9:4b:f5:c5:20:98:64:ac:9f:c8: ee:7a:ab:a5:47:1a:77:c9:72:ac:d2:a7:0d:aa:60: ed:21:36:13:78:51:b8:41:2d:a1:9d:cd:5b:f7:e3: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B0:26:AA:A9:D4:F2:87:69:9B:C3:A3:B3:7A:A4:C3:69:3A:0D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/400bbc11-3cf2-3a37-b28a-3f96fb1fa998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:2b:12:23:60:0e:83:a8:dc:4e:63:cf:29:7b:0e:83:a4:b3: 6a:76:99:04:2e:ca:20:c5:47:a6:4d:44:46:61:7a:b0:68:cf: aa:c0:0b:af:17:a7:0c:2a:0e:3d:d6:94:86:94:6e:ac:2a:76: 2e:72:c2:6a:fb:da:c2:e9:7c:09:fd:0f:e0:c7:5d:14:50:c2: f9:8f:90:ff:a9:dc:0f:02:39:95:b4:db:f2:17:db:55:0b:7c: 44:74:c9:bf:82:cd:16:5e:5a:6e:45:a7:63:6b:0e:f7:d9:da: ff:a7:c7:1c:34:3b:38:04:f3:88:0a:9d:7e:61:d1:cf:af:95: 4a:c1:d6:ce:bb:ea:fe:4f:89:c9:ff:11:93:6b:f7:39:ca:4b: 20:fb:24:81:8a:3d:16:fb:b7:48:36:f0:7b:24:97:d0:20:36: 74:a8:90:6f:1e:59:f6:d0:40:8a:72:be:0e:48:3e:6a:66:ff: e0:98:bf:b7:56:ab:74:6f:5b:39:c3:b5:b2:44:d3:44:06:20: b6:cb:13:36:01:98:b3:eb:64:cd:04:94:de:fb:ba:73:2a:5a: 5f:b4:35:4a:19:77:a8:7a:d1:a3:9f:b9:0d:bc:7f:52:3e:5a: a3:73:57:d4:25:f7:3d:29:d3:b3:d4:44:d4:69:d6:0d:ef:31: 00:cf:48:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGJI/IC9Gh7JhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk N2JlNWY1ZGMtNjQzZS00MzliLTkzOTUtNDQwYTQ1NGRjMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB+hqKf2kk80/nX55QI46a0ZHGyZqWlDdKtZ poROivSWK142YlD6YJlrbcPmJt1AQcAkasxhbBLHgdaFwi2fFgcDlzOoW+tg9HsA 2jMs/CTpWaieqpJ/UlDTrL2HHmNs/wQB7JBq1wgVFt/Vg9J754RcKsyQu5dymg9c 8EqDUMdSxwDByxWuMSszLsD8k+f+k5Ir/SOyMApY3JGVcteMhhqKAIIY8fYyXhiN 86g7BqprgJNtQJMv/YfFrWzvR3/xvaUPYi8HQNCa7OKcDPkHbI0xcahk1/lL9cUg mGSsn8juequlRxp3yXKs0qcNqmDtITYTeFG4QS2hnc1b9+MpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmwJqqp1PKHaZvDo7N6pMNpOg0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAwYmJjMTEtM2NmMi0z YTM3LWIyOGEtM2Y5NmZiMWZhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8rEiNgDoOo3E5jzyl7DoOks2p2mQQuyiDFR6ZNREZherBoz6rAC68X pwwqDj3WlIaUbqwqdi5ywmr72sLpfAn9D+DHXRRQwvmPkP+p3A8COZW02/IX21UL fER0yb+CzRZeWm5Fp2NrDvfZ2v+nxxw0OzgE84gKnX5h0c+vlUrB1s676v5Picn/ EZNr9znKSyD7JIGKPRb7t0g28Hskl9AgNnSokG8eWfbQQIpyvg5IPmpm/+CYv7dW q3RvWznDtbJE00QGILbLEzYBmLPrZM0ElN77unMqWl+0NUoZd6h60aOfuQ28f1I+ WqNzV9Ql9z0p07PURNRp1g3vMQDPSPE= -----END CERTIFICATE-----Generated at Fri Apr 17 10:13:21 2026 by rpki-client