$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/76a7cf6c-0be3-3912-acc5-ec940cd3f512.roa File: 76a7cf6c-0be3-3912-acc5-ec940cd3f512.roa (raw, json) Hash identifier: jDj3j5sxbAqbz70x+SWhIH3VtgvbdA2jf3ScSl/CBI4= Subject key identifier: 1A:54:B2:0F:79:C3:12:22:60:9B:28:EF:2E:DE:3E:EB:40:AF:65:02 Certificate issuer: /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Certificate serial: 010D0C9F4328584D905AA5A76A8382DD701B3800 Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/76a7cf6c-0be3-3912-acc5-ec940cd3f512.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 15296 IP address blocks: 199.216.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a5:a7:6a:83:82:dd:70:1b:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=47f8a8bd-84d5-4310-b547-c37037376632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:b1:6c:9f:48:4f:fe:b4:96:43:e7:f4:22: 57:ef:cd:7a:a3:61:ad:51:49:b8:d4:21:eb:59:91: 00:6e:68:fe:b1:97:ae:d6:33:c9:a8:d5:0b:30:2c: 1c:bf:e4:2c:83:ad:6e:d5:3e:f7:bc:01:3d:83:c1: 32:d2:fd:99:de:e4:c5:f3:18:23:be:5d:0d:d3:f6: a2:7a:d3:88:da:c7:12:39:e7:45:85:e3:27:70:41: f3:a2:94:66:ff:bc:99:db:fe:27:a6:0b:ff:bf:e9: b2:de:db:15:c8:10:d6:72:a9:a2:04:ed:fd:4a:16: 57:01:75:80:46:44:ea:69:8a:cb:5c:64:a3:18:77: a2:11:23:41:b3:2e:ca:30:a5:ec:57:76:f6:28:18: 87:d6:38:3e:05:53:66:5c:93:81:b9:6f:52:fc:7e: e1:91:d0:d0:b2:65:7a:81:cb:79:2c:ac:a8:83:61: 25:41:fd:40:e9:20:6b:e9:67:f8:f4:cc:94:f5:4f: 1a:55:c9:6d:ae:82:df:1b:3a:5f:50:49:8a:9a:01: 41:22:23:e5:22:25:35:3f:4a:1a:d7:78:dd:55:44: f6:cb:99:df:19:d3:8d:12:c4:87:aa:4c:2c:be:7b: cd:79:2d:4d:19:e4:56:c2:03:a9:70:c2:bb:8b:d5: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:54:B2:0F:79:C3:12:22:60:9B:28:EF:2E:DE:3E:EB:40:AF:65:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/76a7cf6c-0be3-3912-acc5-ec940cd3f512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl X509v3 Authority Key Identifier: keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer sbgp-ipAddrBlock: critical IPv4: 199.216.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e3:68:de:f6:57:d6:78:b3:22:28:d5:bf:e0:5f:01:3d:fe: 1a:86:cc:be:a5:f2:e9:c7:7f:ab:81:c3:e0:fb:db:49:c6:ca: 21:fe:ff:dc:b8:9e:aa:7f:d4:b8:bd:8e:46:c6:cf:07:cc:15: 88:35:aa:12:6d:46:86:c0:14:87:3d:ed:fa:e2:1d:9d:be:8c: 4f:d1:37:92:bd:a2:2d:fa:2d:9b:7a:3b:75:de:65:60:67:de: 3e:69:42:6a:cb:eb:99:17:eb:cf:27:a1:80:ff:89:23:14:51: 0f:aa:8c:5e:07:66:d4:7d:3f:4f:ee:e6:65:41:e7:b6:17:f4: 8d:fc:22:aa:19:a4:f6:18:10:f6:ed:2e:c4:60:b0:80:e7:78: ad:fc:fe:2c:21:1f:1d:d4:63:f3:81:45:3b:7e:73:ce:f1:97: 71:a6:54:67:04:5a:5b:59:1d:e9:d4:67:e8:e5:02:47:90:8f: 2b:66:26:12:c7:d1:62:a7:19:bd:62:28:54:34:08:88:84:28: 3a:91:ad:27:6b:9d:23:38:cb:b7:d2:e7:a1:70:1b:ea:02:88: d1:e9:4e:03:dc:2c:70:39:c5:e6:de:54:b9:ca:4c:5f:a1:33: fc:c8:50:fe:6c:59:7e:29:05:70:73:dc:bf:0f:be:77:7a:d8: 76:2b:75:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqWnaoOC3XAbOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NDdmOGE4YmQtODRkNS00MzEwLWI1NDctYzM3MDM3Mzc2NjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle+xbJ9IT/60lkPn9CJX7816o2GtUUm41CHr WZEAbmj+sZeu1jPJqNULMCwcv+Qsg61u1T73vAE9g8Ey0v2Z3uTF8xgjvl0N0/ai etOI2scSOedFheMncEHzopRm/7yZ2/4npgv/v+my3tsVyBDWcqmiBO39ShZXAXWA RkTqaYrLXGSjGHeiESNBsy7KMKXsV3b2KBiH1jg+BVNmXJOBuW9S/H7hkdDQsmV6 gct5LKyog2ElQf1A6SBr6Wf49MyU9U8aVcltroLfGzpfUEmKmgFBIiPlIiU1P0oa 13jdVUT2y5nfGdONEsSHqkwsvnvNeS1NGeRWwgOpcMK7i9Wz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpUsg95wxIiYJso7y7ePutAr2UCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvNzZhN2NmNmMtMGJlMy0z OTEyLWFjYzUtZWM5NDBjZDNmNTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0 ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3 YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvjaN72V9Z4syIo1b/gXwE9/hqGzL6l8unHf6uBw+D720nGyiH+/9y4 nqp/1Li9jkbGzwfMFYg1qhJtRobAFIc97friHZ2+jE/RN5K9oi36LZt6O3XeZWBn 3j5pQmrL65kX688noYD/iSMUUQ+qjF4HZtR9P0/u5mVB57YX9I38IqoZpPYYEPbt LsRgsIDneK38/iwhHx3UY/OBRTt+c87xl3GmVGcEWltZHenUZ+jlAkeQjytmJhLH 0WKnGb1iKFQ0CIiEKDqRrSdrnSM4y7fS56FwG+oCiNHpTgPcLHA5xebeVLnKTF+h M/zIUP5sWX4pBXBz3L8Pvnd62HYrdWU= -----END CERTIFICATE-----Generated at Wed May 13 09:07:55 2026 by rpki-client