$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa File: dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa (raw, json) Hash identifier: mCG9FM+EusHRzMEHycC5t+8OBwV6aEj1iwMu/+d9RkI= Subject key identifier: 5E:FE:7D:60:49:0E:E4:8B:35:0E:3F:05:27:70:36:B5:2B:0C:5D:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BBB20EC9771C71D6BD6000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 76.144.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:b2:0e:c9:77:1c:71:d6:bd:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a08f2ce2-f058-4507-9f15-122b3ef2b3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:15:f8:d9:81:08:e3:53:98:95:18:5e:33: 1d:b4:35:7c:24:ff:fd:71:ee:bc:bd:86:f9:34:1a: b7:dc:f3:9f:fb:0e:67:24:2e:78:95:d2:2d:61:e0: 60:e7:6c:5e:ac:e9:08:b0:d6:5b:28:0a:77:48:d7: ce:70:1d:45:e0:08:03:ec:40:8e:79:42:63:7a:87: 9b:82:62:a4:0d:65:2d:f2:5e:40:36:f5:bf:06:17: 12:7a:4b:5d:22:4c:b0:4b:5c:cf:1a:20:fa:11:d4: 50:32:17:de:56:dd:a0:07:82:de:18:c5:20:a3:78: 2e:26:b4:1e:09:72:2f:22:23:68:6c:eb:34:b0:19: dc:11:b2:2f:ce:fd:c5:51:76:62:a0:a5:ad:c8:6b: 46:6c:ad:99:ed:f3:71:4f:5a:0a:3c:d9:b4:4f:1f: 3e:85:32:0b:fd:73:9a:59:76:8a:5f:87:c9:9a:f1: 99:5a:69:d4:31:41:4d:3f:ce:74:94:ae:82:1f:76: dc:85:28:f2:de:bf:1d:8c:0f:61:1c:cc:0c:c2:47: 24:09:3c:d8:9d:0c:6f:c1:cf:de:71:76:cc:22:9f: 98:bd:18:85:c8:ef:34:75:2e:8a:3b:85:d4:83:b8: c0:ad:2c:fd:b5:c1:76:b0:2a:b2:36:a5:be:73:fd: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:7D:60:49:0E:E4:8B:35:0E:3F:05:27:70:36:B5:2B:0C:5D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a9:cd:60:48:a7:0f:8b:6a:27:d7:69:3a:db:28:1c:b7:ad: 7c:ff:32:21:02:88:89:f0:31:1c:0d:55:58:6e:6c:f6:d2:e6: cf:bc:69:35:c7:76:89:a6:b6:00:77:8b:7c:ea:3a:62:21:58: 4e:79:18:3b:76:8a:2f:c0:ab:94:4b:7c:39:a4:1b:f6:8a:f4: c9:ef:33:2f:90:e4:33:90:2c:c8:f6:1b:23:a0:43:36:46:17: 65:03:7b:44:89:bd:a0:03:49:f9:32:2e:0d:ce:99:e5:6c:c9: 95:fd:ee:5a:73:43:ee:c8:fb:80:f5:71:59:2c:b7:97:c9:8d: a0:d9:78:bc:6a:29:a1:ee:04:af:61:56:51:7c:90:e9:c1:ab: a6:83:e4:f3:f7:7c:97:4d:64:ae:0e:c9:64:89:b0:00:6b:44: 40:e0:7d:fa:4d:5b:a7:ae:85:9c:45:35:d3:4f:6f:64:d3:a1: b0:09:1d:2f:8e:3f:8c:97:b9:d9:fc:d9:05:78:d3:4a:2f:8d: 12:26:a6:9e:03:31:d9:2d:3a:fe:76:f0:4e:69:d6:d6:8b:8a: 35:5a:d6:02:8f:c7:f8:2e:0c:af:17:2a:49:62:66:f7:e9:de: 29:79:41:99:47:58:39:f7:a6:07:eb:37:75:e7:f6:14:28:dc: 84:c7:1c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu7IOyXcccda9YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTA4ZjJjZTItZjA1OC00NTA3LTlmMTUtMTIyYjNlZjJiM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAQV+NmBCONTmJUYXjMdtDV8JP/9ce68vYb5 NBq33POf+w5nJC54ldItYeBg52xerOkIsNZbKAp3SNfOcB1F4AgD7ECOeUJjeoeb gmKkDWUt8l5ANvW/BhcSektdIkywS1zPGiD6EdRQMhfeVt2gB4LeGMUgo3guJrQe CXIvIiNobOs0sBncEbIvzv3FUXZioKWtyGtGbK2Z7fNxT1oKPNm0Tx8+hTIL/XOa WXaKX4fJmvGZWmnUMUFNP850lK6CH3bchSjy3r8djA9hHMwMwkckCTzYnQxvwc/e cXbMIp+YvRiFyO80dS6KO4XUg7jArSz9tcF2sCqyNqW+c/1roQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7+fWBJDuSLNQ4/BSdwNrUrDF2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ1ZmQ4ZmYtMmM0Zi0z YWY5LWE4NTgtYjRkZjZiNDljYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKipzWBIpw+LaifXaTrbKBy3rXz/MiECiInwMRwNVVhubPbS5s+8aTXH dommtgB3i3zqOmIhWE55GDt2ii/Aq5RLfDmkG/aK9MnvMy+Q5DOQLMj2GyOgQzZG F2UDe0SJvaADSfkyLg3OmeVsyZX97lpzQ+7I+4D1cVkst5fJjaDZeLxqKaHuBK9h VlF8kOnBq6aD5PP3fJdNZK4OyWSJsABrREDgffpNW6euhZxFNdNPb2TTobAJHS+O P4yXudn82QV400ovjRImpp4DMdktOv528E5p1taLijVa1gKPx/guDK8XKkliZvfp 3il5QZlHWDn3pgfrN3Xn9hQo3ITHHKA= -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:44 2026 by rpki-client