$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa File: 4d2e1153-33f9-3d70-a2d1-dc9545320444.roa (raw, json) Hash identifier: JQ2PMJ/e3O/H8G7e53jUQRU8MXTLPkqTHDR/c+tvUpg= Subject key identifier: 67:2E:EE:BE:CC:FD:76:FC:B2:0C:D1:EB:DF:44:95:F6:08:F9:4E:F5 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584D651508799E1889B435433D80 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14297 IP address blocks: 139.131.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:08:79:9e:18:89:b4:35:43:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1dae6893-938d-4124-82cb-38b3c6e4a28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:87:d8:32:73:f3:95:21:7e:58:57:1a:1d: dc:57:f3:84:c1:b9:67:02:5a:68:d7:49:0b:2d:5d: 0d:7b:a8:dc:6d:79:1d:05:bb:33:04:4b:35:a3:aa: e9:3d:2c:48:fa:f4:2d:a5:4a:16:e5:4c:67:34:44: 17:84:83:c8:de:4e:b1:d5:50:aa:6d:a8:ee:83:d5: 5b:8e:07:f8:81:9c:0e:95:34:07:63:e4:92:76:60: 4d:72:40:16:27:1e:6d:58:8f:0c:80:f5:e9:ad:24: 7c:d1:bd:fa:4f:8a:02:10:28:a2:aa:d1:6e:37:44: 87:25:6e:bd:7a:ef:31:d7:bb:12:19:95:f9:54:08: 5f:66:40:e7:43:c8:96:d6:47:b2:35:9f:46:33:65: cf:5a:76:84:93:de:f7:71:41:86:6b:a1:fc:14:75: 2f:8c:b2:9c:65:1e:8c:6b:44:d8:9e:4c:19:21:ee: 82:b3:ea:c6:3e:a0:82:17:61:a5:ea:36:a7:f3:48: ac:d1:66:9d:fd:ab:02:a1:e5:c1:c6:d0:ca:20:71: d1:62:42:04:11:a1:5c:09:59:3c:e1:86:58:d3:a7: 96:56:85:56:de:9b:b1:4c:0d:1d:33:ca:ce:7a:f3: a1:50:d4:5a:4f:87:13:92:4f:3c:f4:23:20:47:0d: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:EE:BE:CC:FD:76:FC:B2:0C:D1:EB:DF:44:95:F6:08:F9:4E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/4d2e1153-33f9-3d70-a2d1-dc9545320444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4b:94:55:f0:1a:4c:e1:a8:e2:65:ea:c5:6c:76:00:00:08: 34:30:12:f0:a6:ab:a8:b0:4e:d0:55:6e:7f:44:f8:77:ad:92: 6f:43:0d:bd:d0:b8:09:11:e0:20:ff:0f:18:82:df:28:a1:79: 31:cd:0c:27:2b:66:31:00:5c:41:20:9e:9b:e1:04:5a:e0:ce: a5:b3:3f:ac:e6:27:b9:4b:66:36:22:fa:12:04:06:89:ec:4a: cb:36:7f:e8:cd:99:44:14:da:fa:62:41:19:37:0c:69:ee:70: b4:c9:c1:fa:c7:c8:5f:61:95:86:2a:f1:3c:f9:d8:b8:e0:c6: 0f:72:db:6c:96:3e:cf:e1:6b:91:21:5c:e5:fb:78:91:3d:7f: 0a:39:74:ad:54:8f:50:fe:94:ef:ba:28:83:be:2a:2b:65:00: cc:22:5a:34:5e:c1:23:5e:66:0e:30:45:d7:54:ec:c6:87:2a: b7:63:73:75:7f:95:39:e9:d7:bd:bb:34:d7:8c:63:70:42:a2: 12:9d:94:f3:5c:03:16:ae:3e:b6:04:cb:2c:c4:c8:d6:d8:85: f7:4d:bf:78:10:7a:49:77:89:87:c7:c3:89:21:52:20:ad:34: b5:63:bb:87:a5:31:12:c9:47:d3:6b:5f:cf:22:b8:d5:58:c6: b8:62:a5:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQh5nhiJtDVDPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWRhZTY4OTMtOTM4ZC00MTI0LTgyY2ItMzhiM2M2ZTRhMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDGH2DJz85UhflhXGh3cV/OEwblnAlpo10kL LV0Ne6jcbXkdBbszBEs1o6rpPSxI+vQtpUoW5UxnNEQXhIPI3k6x1VCqbajug9Vb jgf4gZwOlTQHY+SSdmBNckAWJx5tWI8MgPXprSR80b36T4oCECiiqtFuN0SHJW69 eu8x17sSGZX5VAhfZkDnQ8iW1keyNZ9GM2XPWnaEk973cUGGa6H8FHUvjLKcZR6M a0TYnkwZIe6Cs+rGPqCCF2Gl6jan80is0Wad/asCoeXBxtDKIHHRYkIEEaFcCVk8 4YZY06eWVoVW3puxTA0dM8rOevOhUNRaT4cTkk889CMgRw0DNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcu7r7M/Xb8sgzR699ElfYI+U71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNGQyZTExNTMtMzNmOS0z ZDcwLWEyZDEtZGM5NTQ1MzIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi4NMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhLlFXwGkzhqOJl6sVsdgAACDQwEvCmq6iwTtBVbn9E+Hetkm9DDb3Q uAkR4CD/DxiC3yiheTHNDCcrZjEAXEEgnpvhBFrgzqWzP6zmJ7lLZjYi+hIEBons Sss2f+jNmUQU2vpiQRk3DGnucLTJwfrHyF9hlYYq8Tz52Ljgxg9y22yWPs/ha5Eh XOX7eJE9fwo5dK1Uj1D+lO+6KIO+KitlAMwiWjRewSNeZg4wRddU7MaHKrdjc3V/ lTnp1727NNeMY3BCohKdlPNcAxauPrYEyyzEyNbYhfdNv3gQekl3iYfHw4khUiCt NLVju4elMRLJR9NrX88iuNVYxrhipX0= -----END CERTIFICATE-----Generated at Sat Apr 18 10:08:36 2026 by rpki-client