$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa File: fc0efc49-b41e-30ac-84ad-1449f4a12168.roa (raw, json) Hash identifier: DjQ6IAnpd8qGKx0CQD101iJInzPDbjsPCMDnzB0SdKQ= Subject key identifier: 30:80:02:66:4A:42:6F:0F:DE:5A:1A:21:9B:4A:62:A1:F3:66:2C:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB64B11E877E9972EDB600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 76.143.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:64:b1:1e:87:7e:99:72:ed:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=1343f09d-8f59-46cd-abca-aaf7fb4dd132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:9c:b6:bf:be:f4:33:11:8e:9f:e8:5e:11: d3:62:9b:1b:50:db:11:0f:9f:e6:33:3e:a8:55:e6: b3:af:36:ea:48:6b:39:86:84:e4:41:95:b6:1f:04: dc:25:dc:20:80:b6:90:bf:1b:a7:fb:47:49:6f:8e: 22:62:67:5f:2e:3c:ab:9b:1a:80:78:e8:27:f1:c9: 4d:c8:9c:4c:ad:de:af:ff:0b:35:de:c9:75:78:10: 14:da:4b:a4:c4:ec:c0:80:0b:30:fb:ea:79:7f:53: c4:be:7f:20:b0:9d:f9:ce:11:74:78:1c:59:f9:2e: 0c:47:73:14:46:1e:1c:21:1f:00:ea:8f:5f:cf:71: dd:3d:3f:7d:6d:5e:7f:44:93:c7:38:b4:96:b0:77: 57:d1:97:48:95:55:99:a3:26:1e:1e:68:aa:b3:e0: 0d:aa:eb:7a:31:ea:a9:dc:4a:29:0f:41:63:35:52: ee:c1:0f:91:2d:95:d9:e9:a1:db:67:26:ee:ae:23: 84:a9:5b:ec:f8:06:70:c7:29:e1:20:72:81:23:93: b9:c5:16:fe:18:e0:30:1f:1e:e9:ce:de:10:0a:2f: f5:ea:54:6a:35:27:e1:e2:33:c1:37:9d:9a:d6:4a: 2b:b1:be:0f:4a:52:4c:c3:6a:66:7a:42:ae:b4:63: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:80:02:66:4A:42:6F:0F:DE:5A:1A:21:9B:4A:62:A1:F3:66:2C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0efc49-b41e-30ac-84ad-1449f4a12168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e6:64:e3:34:c2:c5:27:07:b4:2a:fb:b8:fa:94:5b:9c:d6: 4c:16:55:74:d8:12:b5:62:ae:8d:71:c0:d4:bc:80:af:f9:b3: fd:18:7b:5d:a4:74:01:53:69:cd:d3:06:b5:99:88:ec:f0:71: 31:a2:0c:47:7f:87:3d:26:e7:1f:67:a3:d6:b6:91:34:5d:6b: a7:86:84:5c:6e:94:dc:1a:40:09:3d:07:39:58:40:45:02:7d: 02:b9:15:68:3e:de:69:49:d8:cf:75:18:26:2e:28:62:5d:20: f7:af:79:25:d7:11:b8:76:65:c7:35:f3:91:f2:32:f9:cc:f2: 44:73:0e:d0:5c:7e:6f:74:73:26:13:a7:a7:c3:5d:81:7d:0a: 57:f9:a4:37:5e:5a:4f:98:8f:25:d5:c9:25:1e:ca:44:05:bd: 20:1b:88:75:c9:c3:58:56:62:2f:31:a7:c4:d7:8e:62:37:c0: 2a:20:d4:2c:3c:da:48:29:49:35:fc:14:b2:49:b3:b7:c4:1b: ce:f0:10:be:6a:fb:48:f0:d5:9e:3a:da:33:d6:f5:ef:fc:9f: 5b:d7:38:d3:2a:41:0c:a9:53:af:bd:be:49:52:6d:21:9d:5c: 90:8d:44:f5:35:92:14:b0:76:e8:0f:bf:58:e9:32:ec:37:92: e2:e4:2d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2SxHod+mXLttgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTM0M2YwOWQtOGY1OS00NmNkLWFiY2EtYWFmN2ZiNGRkMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGectr++9DMRjp/oXhHTYpsbUNsRD5/mMz6o VeazrzbqSGs5hoTkQZW2HwTcJdwggLaQvxun+0dJb44iYmdfLjyrmxqAeOgn8clN yJxMrd6v/ws13sl1eBAU2kukxOzAgAsw++p5f1PEvn8gsJ35zhF0eBxZ+S4MR3MU Rh4cIR8A6o9fz3HdPT99bV5/RJPHOLSWsHdX0ZdIlVWZoyYeHmiqs+ANqut6Meqp 3EopD0FjNVLuwQ+RLZXZ6aHbZyburiOEqVvs+AZwxynhIHKBI5O5xRb+GOAwHx7p zt4QCi/16lRqNSfh4jPBN52a1korsb4PSlJMw2pmekKutGPddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCAAmZKQm8P3loaIZtKYqHzZiwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmMwZWZjNDktYjQxZS0z MGFjLTg0YWQtMTQ0OWY0YTEyMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfmZOM0wsUnB7Qq+7j6lFuc1kwWVXTYErViro1xwNS8gK/5s/0Ye12k dAFTac3TBrWZiOzwcTGiDEd/hz0m5x9no9a2kTRda6eGhFxulNwaQAk9BzlYQEUC fQK5FWg+3mlJ2M91GCYuKGJdIPeveSXXEbh2Zcc185HyMvnM8kRzDtBcfm90cyYT p6fDXYF9Clf5pDdeWk+YjyXVySUeykQFvSAbiHXJw1hWYi8xp8TXjmI3wCog1Cw8 2kgpSTX8FLJJs7fEG87wEL5q+0jw1Z462jPW9e/8n1vXONMqQQypU6+9vklSbSGd XJCNRPU1khSwdugPv1jpMuw3kuLkLZE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:54:17 2026 by rpki-client