$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5389df1c-2ad6-36f7-bef0-992b746f2b54.roa File: 5389df1c-2ad6-36f7-bef0-992b746f2b54.roa (raw, json) Hash identifier: s2d7/3kcBMQLO0sEoKF50LpjbjlXM0XFfrYkWwgQIdM= Subject key identifier: 83:0F:83:F9:29:DB:1B:F1:BF:57:03:A0:0A:E7:AA:26:9B:66:C9:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBB0369D5AEC301462DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5389df1c-2ad6-36f7-bef0-992b746f2b54.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 76.138.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:b0:36:9d:5a:ec:30:14:62:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f09b1f3c-efd1-4176-824e-365557989e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:85:c9:ed:65:f7:c0:df:7f:aa:11:a3:6a: 38:2a:94:da:b9:82:ed:85:0f:d6:ca:68:50:91:90: d1:fe:1e:20:bf:59:33:b2:72:02:7c:11:d2:a1:1e: 8d:e7:5d:85:1f:36:ca:07:eb:c6:db:fd:42:a8:ad: a9:2b:d2:71:e7:f7:d5:88:c8:ef:c0:cd:c3:57:3f: e0:bd:d3:96:2b:2c:9d:2a:00:7a:90:92:e6:e7:7b: ef:2d:20:19:fe:92:32:90:10:b1:bf:fd:36:ec:e8: 96:3c:6f:1b:ba:f3:c2:8b:4c:2c:d8:6a:dc:5e:8b: bd:e6:02:d1:1b:66:85:8b:39:ce:52:d4:22:86:0e: 20:bb:88:9e:52:49:d3:d4:ad:0a:ab:3b:b0:0b:ec: 68:2f:61:f6:2d:82:34:02:86:fc:d6:92:13:4e:cf: 99:66:ac:c3:a5:ad:7f:3d:a6:91:2a:c7:9a:c1:c0: 3f:ab:da:d8:08:72:6f:b9:6e:f3:a8:f9:f0:1b:a8: a2:fb:05:84:43:c6:5e:59:5b:cf:df:7e:c6:7e:23: 63:5e:8f:f9:45:13:52:66:64:a9:d9:4f:2b:18:71: b7:97:28:6b:d8:1a:4c:a5:17:ba:35:56:bd:e2:3a: 2d:4f:63:48:c0:99:c0:fb:c5:58:1f:2d:22:ad:da: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:83:F9:29:DB:1B:F1:BF:57:03:A0:0A:E7:AA:26:9B:66:C9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5389df1c-2ad6-36f7-bef0-992b746f2b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ca:bf:48:52:9b:c1:9d:67:0a:d5:9d:40:01:83:a7:ba:c2: 3d:a3:45:35:b6:75:16:5e:c9:2d:9f:b6:97:0f:36:08:68:55: 74:c6:23:69:22:3b:bb:77:3f:6e:05:86:f9:ef:6c:ca:f3:9c: 4a:82:3d:ec:80:c8:8c:b5:04:c0:d4:b8:ca:8e:71:7f:aa:66: 4a:fb:84:6c:2b:e6:70:a4:2c:7f:3c:ce:f7:d1:ba:85:d8:7a: 0d:e0:02:5e:01:c7:a0:5c:05:0c:b0:f5:da:2b:53:e4:48:78: fd:63:2b:65:d7:d1:d5:6b:9d:84:b3:08:92:46:9c:07:f2:74: 76:86:fa:de:c7:21:02:33:31:4b:78:96:54:22:f6:82:fb:67: 31:8a:c5:2a:9d:0f:2f:83:36:32:54:69:44:0b:4a:54:13:31: 3b:a3:1b:cf:4a:9a:16:14:ff:71:98:ad:7c:24:15:30:35:b0: ba:da:ef:e9:1b:18:d8:81:7f:95:17:d9:ef:3a:86:84:92:f1: 39:26:39:48:d6:4f:f9:86:57:30:fc:fb:c7:de:40:e0:f5:c1: 8a:b3:8a:50:bf:38:98:6e:99:0b:30:e5:29:49:b8:23:61:13: e1:e2:d7:fa:b6:bd:f9:5c:d4:26:af:8e:f2:77:68:01:a4:2e: cb:9e:29:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu7A2nVrsMBRi3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZjA5YjFmM2MtZWZkMS00MTc2LTgyNGUtMzY1NTU3OTg5ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLKFye1l98Dff6oRo2o4KpTauYLthQ/WymhQ kZDR/h4gv1kzsnICfBHSoR6N512FHzbKB+vG2/1CqK2pK9Jx5/fViMjvwM3DVz/g vdOWKyydKgB6kJLm53vvLSAZ/pIykBCxv/027OiWPG8buvPCi0ws2GrcXou95gLR G2aFiznOUtQihg4gu4ieUknT1K0KqzuwC+xoL2H2LYI0Aob81pITTs+ZZqzDpa1/ PaaRKseawcA/q9rYCHJvuW7zqPnwG6ii+wWEQ8ZeWVvP337GfiNjXo/5RRNSZmSp 2U8rGHG3lyhr2BpMpRe6NVa94jotT2NIwJnA+8VYHy0irdpx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMPg/kp2xvxv1cDoArnqiabZsl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTM4OWRmMWMtMmFkNi0z NmY3LWJlZjAtOTkyYjc0NmYyYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Kv0hSm8GdZwrVnUABg6e6wj2jRTW2dRZeyS2ftpcPNghoVXTGI2ki O7t3P24FhvnvbMrznEqCPeyAyIy1BMDUuMqOcX+qZkr7hGwr5nCkLH88zvfRuoXY eg3gAl4Bx6BcBQyw9dorU+RIeP1jK2XX0dVrnYSzCJJGnAfydHaG+t7HIQIzMUt4 llQi9oL7ZzGKxSqdDy+DNjJUaUQLSlQTMTujG89KmhYU/3GYrXwkFTA1sLra7+kb GNiBf5UX2e86hoSS8TkmOUjWT/mGVzD8+8feQOD1wYqzilC/OJhumQsw5SlJuCNh E+Hi1/q2vflc1CavjvJ3aAGkLsueKdI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:15 2026 by rpki-client