$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3ffee6-1ae3-3d74-a1e7-7ce8650e3ddb.roa File: df3ffee6-1ae3-3d74-a1e7-7ce8650e3ddb.roa (raw, json) Hash identifier: ML/n5TKnCYppDr3OkUCVDFsDaJ0XBMN2J+jgwufVJlk= Subject key identifier: 0E:B9:D1:04:E1:94:6E:9B:E7:99:0A:8E:7A:EA:8F:F7:9E:D0:09:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAF1E05F1B5E38BB0D2E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3ffee6-1ae3-3d74-a1e7-7ce8650e3ddb.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 76.24.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:f1:e0:5f:1b:5e:38:bb:0d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b70de9b7-da26-480f-b6dd-87c0b070e07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:23:e3:09:60:a6:ff:14:1e:e5:29:fb:3f: 3d:9e:61:ba:bc:fd:33:72:8a:4a:b1:7f:e7:f8:ea: 6a:13:8e:7a:f1:56:ab:32:bb:bc:b5:ba:5c:33:68: f9:0b:3a:cd:ce:d3:ff:fe:d4:80:dc:71:90:d8:50: 2e:60:91:74:0f:82:56:d8:1a:f0:d6:fc:17:63:bd: 1e:03:14:7a:04:9d:6b:19:c1:97:73:da:21:25:26: e4:82:28:c2:de:0f:f5:e2:20:23:a5:20:a8:5e:65: a3:4b:87:99:6d:03:81:96:91:f7:05:17:0b:f0:23: 57:74:8b:07:11:e8:94:93:56:d7:f9:59:53:44:cf: 32:45:3f:8b:18:69:78:76:94:d2:a0:36:7a:ea:1f: 54:80:1b:a7:12:7c:47:ae:5c:0b:0e:80:06:73:5b: 63:b5:73:85:37:d1:68:62:a8:0f:92:27:12:7b:d1: 3c:8e:3d:f6:73:9a:d6:bc:ed:ff:c0:90:8e:c4:a2: db:b2:96:dd:2b:b7:41:b8:12:ee:52:4a:44:fc:40: b7:35:1b:c6:d5:78:e0:c2:78:81:1b:ad:73:26:dc: e1:19:d9:e8:ab:be:81:8f:28:5b:80:f8:b0:83:f1: 3f:07:d2:38:1b:0d:32:96:87:22:45:2c:dc:19:a4: fa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:D1:04:E1:94:6E:9B:E7:99:0A:8E:7A:EA:8F:F7:9E:D0:09:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df3ffee6-1ae3-3d74-a1e7-7ce8650e3ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.24.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:64:0b:98:7b:01:c8:1c:97:42:a6:a2:a1:ad:45:bf:04:c9: 7b:4c:31:10:b5:1a:e8:91:82:0d:0f:a5:d6:67:e7:9a:74:35: 78:43:bf:77:66:fe:c0:82:75:a3:85:62:9f:86:89:da:ce:bf: 7c:ed:b7:06:54:7f:ad:2a:d6:e0:c8:24:fb:23:a2:0a:08:12: 15:f4:02:dd:ca:3d:11:c2:8f:d2:0a:fd:23:44:4d:3d:1c:cd: e6:19:f5:12:37:00:c6:21:7e:24:48:a3:76:94:f0:21:23:46: 7c:ea:7c:0c:9a:8a:4d:b1:38:ab:13:61:0e:26:c7:90:77:1c: 86:d9:8a:c6:7b:2d:1f:55:07:ae:36:34:f3:4d:d2:e0:09:3f: 93:74:db:e1:a4:b9:1c:b0:ee:f0:cf:a6:7e:c2:8d:e0:c9:a6: ed:70:87:9e:37:a5:7c:3e:63:e3:5c:af:f1:8a:e1:41:6b:4f: f4:25:8e:61:20:34:9c:42:a5:43:6f:f4:52:a0:03:fe:37:29: 5f:97:97:0d:4d:2a:ae:d7:12:97:c0:92:7a:8b:d7:a0:4b:ec: 93:ea:73:2a:e6:23:41:95:82:92:f3:b9:93:9c:42:28:37:ef: a9:9d:c3:67:e8:2c:2c:28:92:b3:4d:79:8e:b0:f0:14:aa:bd: fb:0c:38:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuvHgXxteOLsNLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjcwZGU5YjctZGEyNi00ODBmLWI2ZGQtODdjMGIwNzBlMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjoj4wlgpv8UHuUp+z89nmG6vP0zcopKsX/n +OpqE4568VarMru8tbpcM2j5CzrNztP//tSA3HGQ2FAuYJF0D4JW2Brw1vwXY70e AxR6BJ1rGcGXc9ohJSbkgijC3g/14iAjpSCoXmWjS4eZbQOBlpH3BRcL8CNXdIsH EeiUk1bX+VlTRM8yRT+LGGl4dpTSoDZ66h9UgBunEnxHrlwLDoAGc1tjtXOFN9Fo YqgPkicSe9E8jj32c5rWvO3/wJCOxKLbspbdK7dBuBLuUkpE/EC3NRvG1XjgwniB G61zJtzhGdnoq76BjyhbgPiwg/E/B9I4Gw0ylociRSzcGaT6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA650QThlG6b55kKjnrqj/ee0AmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYzZmZlZTYtMWFlMy0z ZDc0LWExZTctN2NlODY1MGUzZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtkC5h7Acgcl0KmoqGtRb8EyXtMMRC1GuiRgg0PpdZn55p0NXhDv3dm /sCCdaOFYp+GidrOv3zttwZUf60q1uDIJPsjogoIEhX0At3KPRHCj9IK/SNETT0c zeYZ9RI3AMYhfiRIo3aU8CEjRnzqfAyaik2xOKsTYQ4mx5B3HIbZisZ7LR9VB642 NPNN0uAJP5N02+GkuRyw7vDPpn7CjeDJpu1wh543pXw+Y+Ncr/GK4UFrT/QljmEg NJxCpUNv9FKgA/43KV+Xlw1NKq7XEpfAknqL16BL7JPqcyrmI0GVgpLzuZOcQig3 76mdw2foLCwokrNNeY6w8BSqvfsMOG0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:56:38 2026 by rpki-client