$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa File: 2c4a958e-0a9e-3039-9d9f-f419a159b329.roa (raw, json) Hash identifier: XYf3RJ1K2nFeL9ts3k/yZt+NqMRBUWwbD2EenkQAGAo= Subject key identifier: F8:92:10:3B:E5:3F:67:11:97:59:74:E6:FC:95:7D:A0:D9:6E:4B:51 Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769 Certificate serial: 010D0C9F4328584D703FF888C90733E502BE4100 Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 21981 IP address blocks: 147.124.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:f8:88:c9:07:33:e5:02:be:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=b6a7e64b-507c-4088-bccf-a712727c0232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:f2:ae:90:f4:ab:3b:b0:87:ed:19:6b:bd: 12:3f:83:26:70:bf:c7:e7:79:82:c5:ab:84:03:b0: 38:ed:91:1d:dd:d1:ad:99:eb:7a:c0:8f:67:e0:55: bb:c1:b1:74:3f:e1:41:cb:96:c2:35:3a:a2:51:0e: 3b:7a:fe:a9:93:d4:fd:13:4e:0e:1d:b2:be:f0:88: 2b:f2:11:19:90:84:b2:ca:71:4c:9d:15:39:0d:db: 48:ff:ac:86:ab:51:77:45:ce:e3:5a:f8:6f:72:c7: f1:46:6f:74:83:fb:39:db:15:64:3d:6a:14:4f:05: 3a:80:f2:a3:fb:a2:42:96:c9:52:8e:02:d9:7c:2a: 2d:ce:ef:7a:30:21:b8:d3:fe:29:18:b0:dd:c3:24: 53:38:39:9d:82:f6:ff:f1:13:d2:ea:b5:09:b7:da: 3b:66:cb:a0:ec:e2:68:00:74:e3:c6:78:1c:ad:73: 76:b4:4c:d7:c8:43:eb:28:82:64:31:b5:8e:75:ed: 0d:a7:f9:ac:b3:6a:ce:65:be:74:d5:ee:10:84:40: 85:6c:7a:ef:20:f9:d6:01:9b:6c:e2:6c:31:64:3b: 9b:0c:9d:36:e3:8a:b9:fd:78:6c:3f:a5:82:88:49: 51:51:56:af:30:43:ac:f4:d7:75:bf:bb:6f:d0:53: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:10:3B:E5:3F:67:11:97:59:74:E6:FC:95:7D:A0:D9:6E:4B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl X509v3 Authority Key Identifier: keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer sbgp-ipAddrBlock: critical IPv4: 147.124.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2a:05:5f:ba:50:e5:bf:f4:b9:7e:4c:b3:f0:09:51:66:0e: 40:88:63:dc:ec:0a:ac:08:f3:2e:e9:a3:03:d1:68:02:81:d4: d5:e6:ea:03:27:c0:a0:dc:18:5e:2e:9e:30:48:b0:a9:81:76: d9:a0:13:3e:73:42:73:2f:67:77:bf:2a:76:fd:a5:7e:7f:23: 2b:bb:46:d7:09:70:bb:37:15:5a:e1:83:20:50:2f:72:04:0a: a6:f6:ec:dd:ea:e5:0f:23:f2:94:5d:ee:e4:1e:bf:bc:7d:d0: a4:af:d4:35:3f:d1:71:4f:05:f1:a3:5a:70:b7:5d:a2:d7:48: ee:e9:e1:15:59:28:94:20:f7:ed:39:97:59:c5:8c:32:a2:19: 7c:45:c0:09:01:f3:c2:a4:47:15:11:fb:73:37:90:2a:40:76: 32:34:d5:60:eb:b4:5b:ee:06:5d:d0:c0:57:a5:f6:19:8e:27: a5:61:d5:7b:a9:11:0b:e7:be:7b:05:7e:3f:ff:9a:7a:ae:f0: 10:09:2b:0e:37:67:89:d4:48:de:e0:d9:cb:c8:ec:67:c7:96: 95:5a:11:90:54:99:a1:bb:a6:f0:5f:8a:0e:8e:3b:ed:f8:45: 34:3b:63:ad:e3:05:fd:8a:a1:77:eb:39:5c:42:c4:94:8c:76: 97:6c:35:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/iIyQcz5QK+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw NzY5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk YjZhN2U2NGItNTA3Yy00MDg4LWJjY2YtYTcxMjcyN2MwMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UryrpD0qzuwh+0Za70SP4MmcL/H53mCxauE A7A47ZEd3dGtmet6wI9n4FW7wbF0P+FBy5bCNTqiUQ47ev6pk9T9E04OHbK+8Igr 8hEZkISyynFMnRU5DdtI/6yGq1F3Rc7jWvhvcsfxRm90g/s52xVkPWoUTwU6gPKj +6JClslSjgLZfCotzu96MCG40/4pGLDdwyRTODmdgvb/8RPS6rUJt9o7Zsug7OJo AHTjxngcrXN2tEzXyEPrKIJkMbWOde0Np/mss2rOZb501e4QhECFbHrvIPnWAZts 4mwxZDubDJ0244q5/XhsP6WCiElRUVavMEOs9Nd1v7tv0FNbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiSEDvlP2cRl1l05vyVfaDZbktRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4 YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvMmM0YTk1OGUtMGE5ZS0z MDM5LTlkOWYtZjQxOWExNTliMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3 YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3 MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1 YjVmNzA3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAqBV+6UOW/9Ll+TLPwCVFmDkCIY9zsCqwI8y7powPRaAKB1NXm6gMn wKDcGF4unjBIsKmBdtmgEz5zQnMvZ3e/Knb9pX5/Iyu7RtcJcLs3FVrhgyBQL3IE Cqb27N3q5Q8j8pRd7uQev7x90KSv1DU/0XFPBfGjWnC3XaLXSO7p4RVZKJQg9+05 l1nFjDKiGXxFwAkB88KkRxUR+3M3kCpAdjI01WDrtFvuBl3QwFel9hmOJ6Vh1Xup EQvnvnsFfj//mnqu8BAJKw43Z4nUSN7g2cvI7GfHlpVaEZBUmaG7pvBfig6OO+34 RTQ7Y63jBf2KoXfrOVxCxJSMdpdsNYc= -----END CERTIFICATE-----Generated at Sat Apr 18 01:12:09 2026 by rpki-client