$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2d2abab7-a4ee-33db-9c68-66c4450a7659.roa File: 2d2abab7-a4ee-33db-9c68-66c4450a7659.roa (raw, json) Hash identifier: vXYrh8QEoplPLPx9vwzhrf/nD4xR75nLC89i3vL+DT8= Subject key identifier: 46:0D:F4:E6:D3:A1:19:58:68:9B:CC:FF:ED:DD:4B:D4:88:7E:C9:4A Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584D59EAB384A4B5BC3098AFB990 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2d2abab7-a4ee-33db-9c68-66c4450a7659.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 27989 IP address blocks: 64.76.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b3:84:a4:b5:bc:30:98:af:b9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=95c57960-4eae-4fb4-8860-2f39ebe47d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:9e:17:37:b9:51:85:8f:c7:8f:90:5a:6b: 5f:74:86:d9:13:72:06:a6:86:ed:8b:bf:cc:d1:e4: bb:65:1c:e4:ac:93:08:1a:7f:1a:e8:97:4e:25:1e: 6f:e8:8a:4e:a6:91:dd:ad:2f:71:0e:dd:92:b1:65: 8c:e5:ff:3a:45:53:ff:f7:6c:7f:bf:21:4e:f3:14: a7:e1:1d:16:d9:e4:7f:c9:d1:59:bc:47:00:ad:70: 82:55:d5:79:8f:1e:73:c1:a0:40:fa:c5:c9:a5:59: b6:4a:4d:27:14:c1:49:b4:f6:09:46:99:04:fa:d0: 1c:3a:4c:25:28:bc:57:07:c3:3a:4e:27:1d:ce:cd: 80:44:c9:7d:26:df:29:be:72:4c:37:0b:99:93:b0: f2:51:22:91:96:63:c3:55:31:16:0c:1e:73:96:7c: 30:e3:54:04:4c:f4:fb:61:cd:04:77:62:3c:24:a8: 9e:7d:60:0b:bd:da:39:80:92:f1:aa:e6:41:f4:36: dc:ed:1e:9f:f4:78:b9:34:52:5e:d1:24:4f:3e:5c: 4b:d6:3c:c5:99:e5:ad:0d:68:99:3f:76:1d:fc:b9: 33:57:de:58:aa:02:f6:95:b9:a8:a9:f3:0c:53:5d: 2c:32:51:57:3d:c5:5c:bc:3b:04:e2:26:f0:1b:3d: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:F4:E6:D3:A1:19:58:68:9B:CC:FF:ED:DD:4B:D4:88:7E:C9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/2d2abab7-a4ee-33db-9c68-66c4450a7659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 64.76.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e7:79:98:f8:82:c7:cc:8e:2e:00:ee:69:35:43:f6:a8:88: eb:6a:8f:0b:2c:60:0e:1c:35:c3:ff:00:5b:31:91:2e:fc:c2: 4a:bd:5e:8b:db:5e:b6:4c:d2:f6:8f:63:c9:08:9b:6b:fc:9d: 53:ee:8d:f3:9b:11:33:37:2d:58:46:d1:a8:57:f9:0d:5d:b4: 46:d7:7f:b5:4c:c0:1d:27:2a:cd:b4:03:3c:ca:97:8c:47:33: de:00:56:17:a1:76:98:66:75:db:89:77:cd:df:38:3e:58:40: f5:2d:a2:f5:58:5f:91:4e:ac:a8:50:4c:90:fd:bb:3c:5d:66: 0c:cf:7e:83:54:8f:08:02:c1:fd:95:e6:9c:04:e2:4c:e0:d1: 7e:64:4a:6d:e0:99:bb:bd:87:f0:54:d4:66:71:b0:5b:4d:be: 35:9c:bb:e4:f0:20:7c:c7:8f:d4:f7:4c:15:05:c5:46:03:77: 03:bf:f6:2c:46:e1:be:23:02:97:77:27:99:f4:58:de:5f:4f: 27:ec:a0:d8:87:97:d4:49:1a:ec:5f:7a:eb:a3:da:bd:d6:7b: 0b:2f:e7:c9:5e:d7:e5:3f:31:27:5f:2b:cc:e5:6f:9e:5f:b2: dc:ba:34:8c:d4:dc:fe:34:b2:0b:3a:78:ab:c8:a4:22:11:ee: 80:a9:61:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rOEpLW8MJivuZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTVjNTc5NjAtNGVhZS00ZmI0LTg4NjAtMmYzOWViZTQ3ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7laeFze5UYWPx4+QWmtfdIbZE3IGpobti7/M 0eS7ZRzkrJMIGn8a6JdOJR5v6IpOppHdrS9xDt2SsWWM5f86RVP/92x/vyFO8xSn 4R0W2eR/ydFZvEcArXCCVdV5jx5zwaBA+sXJpVm2Sk0nFMFJtPYJRpkE+tAcOkwl KLxXB8M6Ticdzs2ARMl9Jt8pvnJMNwuZk7DyUSKRlmPDVTEWDB5zlnww41QETPT7 Yc0Ed2I8JKiefWALvdo5gJLxquZB9Dbc7R6f9Hi5NFJe0SRPPlxL1jzFmeWtDWiZ P3Yd/LkzV95YqgL2lbmoqfMMU10sMlFXPcVcvDsE4ibwGz0qqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYN9ObToRlYaJvM/+3dS9SIfslKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvMmQyYWJhYjctYTRlZS0z M2RiLTljNjgtNjZjNDQ1MGE3NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzneZj4gsfMji4A7mk1Q/aoiOtqjwssYA4cNcP/AFsxkS78wkq9Xovb XrZM0vaPY8kIm2v8nVPujfObETM3LVhG0ahX+Q1dtEbXf7VMwB0nKs20AzzKl4xH M94AVhehdphmdduJd83fOD5YQPUtovVYX5FOrKhQTJD9uzxdZgzPfoNUjwgCwf2V 5pwE4kzg0X5kSm3gmbu9h/BU1GZxsFtNvjWcu+TwIHzHj9T3TBUFxUYDdwO/9ixG 4b4jApd3J5n0WN5fTyfsoNiHl9RJGuxfeuuj2r3Wewsv58le1+U/MSdfK8zlb55f sty6NIzU3P40sgs6eKvIpCIR7oCpYb0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:33:26 2026 by rpki-client