$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa File: cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa (raw, json) Hash identifier: GhyzPWwnr6dETKMuoF9SvwErKxgEZFeqylgYex4NW+c= Subject key identifier: BF:EA:CD:FA:28:06:79:39:04:7D:6F:3A:BC:FC:B0:13:E3:2F:C3:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D52437F715C9FC020FD98CF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 76.107.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:7f:71:5c:9f:c0:20:fd:98:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=fd985a69-835a-45cf-9a5a-e000ff30003d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:c8:6e:6a:a1:d6:bd:da:64:ef:66:3a:27: 06:ee:7f:65:97:3e:25:8f:64:ea:cc:a8:95:74:d8: 27:b8:12:2c:3d:f6:c1:50:26:40:8e:1d:ce:71:17: da:42:32:c3:a7:52:ff:a4:a0:53:c6:e7:ad:e6:ce: bf:47:5b:b3:0c:f4:f7:d2:f9:db:04:53:6a:3f:7f: 0a:74:2d:67:6b:2c:8b:4b:90:73:ff:fa:2b:62:6a: 67:2a:32:06:86:35:92:1e:85:06:51:3a:a8:70:f2: da:57:1c:fc:f2:ae:b0:47:86:2c:b1:e4:70:93:5a: 15:9c:a0:34:95:7c:3d:92:ec:9f:10:99:ec:f9:77: 8c:ed:6c:03:52:8b:b8:5f:d1:9a:42:cf:2c:c1:ee: 11:d3:b0:aa:27:5e:13:75:60:f7:a4:82:23:a9:a5: 3c:f9:62:4f:23:13:4b:4d:9e:a9:bc:d8:0c:d8:f8: 5c:4f:79:3e:7b:0c:4f:c6:3e:60:f2:e8:0a:8c:8c: c5:c7:ab:74:00:89:18:92:40:e3:dc:1e:f8:5d:13: c0:25:fc:cd:b5:2e:59:a5:8d:ec:2e:82:c9:30:db: f4:14:47:df:52:ae:cb:14:db:35:da:a1:83:c7:30: 4c:bb:1c:4e:0c:69:02:00:10:fa:2f:c1:42:e4:63: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:CD:FA:28:06:79:39:04:7D:6F:3A:BC:FC:B0:13:E3:2F:C3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5ef4e8-f344-30e1-a2c4-29f7df70207b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.107.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:12:d6:02:fd:2a:93:22:61:c2:7b:3b:a8:e8:d9:0e:ce:6b: 56:e5:b1:cd:f8:c1:5d:9f:c7:aa:1f:14:b8:7e:64:f6:77:6d: cd:dc:49:ea:f8:a7:56:82:18:81:90:bd:2a:7b:70:70:55:3a: c5:90:94:ef:0e:80:cc:d7:ce:43:57:27:61:47:98:59:36:3b: 84:23:8f:65:17:e7:8b:59:cd:5b:78:43:d6:93:da:00:13:d2: ff:50:74:b3:fe:9e:41:3e:00:1e:4c:05:ad:cc:90:af:c3:41: 4f:5f:7d:ce:5a:e4:7e:2f:f2:d8:3a:2d:79:c1:b7:bf:6f:d8: 89:6c:c3:e7:86:0b:05:67:e4:ee:d1:7f:26:05:69:07:62:48: 32:db:fa:77:96:68:6e:1b:a5:c8:fd:5e:bf:35:11:eb:f7:90: ad:18:c8:5e:62:25:ef:12:6a:f5:3d:e8:2f:38:90:2f:74:1c: 36:e7:6d:71:a1:86:3c:b5:f8:da:02:5b:54:39:fa:59:ee:13: 53:c5:5c:11:be:a5:e3:ad:fc:b0:29:76:6f:80:71:fd:ca:1b: c8:26:1b:48:ee:fe:a8:7c:58:12:c5:b6:e4:eb:ba:a0:bc:a0: 9c:46:cb:db:6a:b5:ea:e6:90:df:f2:c4:34:d0:08:ee:c8:3f: ae:39:81:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ39xXJ/AIP2Yz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZmQ5ODVhNjktODM1YS00NWNmLTlhNWEtZTAwMGZmMzAwMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprzIbmqh1r3aZO9mOicG7n9llz4lj2TqzKiV dNgnuBIsPfbBUCZAjh3OcRfaQjLDp1L/pKBTxuet5s6/R1uzDPT30vnbBFNqP38K dC1nayyLS5Bz//orYmpnKjIGhjWSHoUGUTqocPLaVxz88q6wR4YsseRwk1oVnKA0 lXw9kuyfEJns+XeM7WwDUou4X9GaQs8swe4R07CqJ14TdWD3pIIjqaU8+WJPIxNL TZ6pvNgM2PhcT3k+ewxPxj5g8ugKjIzFx6t0AIkYkkDj3B74XRPAJfzNtS5ZpY3s LoLJMNv0FEffUq7LFNs12qGDxzBMuxxODGkCABD6L8FC5GMnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/qzfooBnk5BH1vOrz8sBPjL8OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1ZWY0ZTgtZjM0NC0z MGUxLWEyYzQtMjlmN2RmNzAyMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATGuPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgS1gL9KpMiYcJ7O6jo2Q7Oa1blsc34wV2fx6ofFLh+ZPZ3bc3cSer4 p1aCGIGQvSp7cHBVOsWQlO8OgMzXzkNXJ2FHmFk2O4Qjj2UX54tZzVt4Q9aT2gAT 0v9QdLP+nkE+AB5MBa3MkK/DQU9ffc5a5H4v8tg6LXnBt79v2Ilsw+eGCwVn5O7R fyYFaQdiSDLb+neWaG4bpcj9Xr81Eev3kK0YyF5iJe8SavU96C84kC90HDbnbXGh hjy1+NoCW1Q5+lnuE1PFXBG+peOt/LApdm+Acf3KG8gmG0ju/qh8WBLFtuTruqC8 oJxGy9tqtermkN/yxDTQCO7IP645gRs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:57:21 2026 by rpki-client