$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa File: 86388de2-583a-33f3-8f8c-142350f6349b.roa (raw, json) Hash identifier: kuZ8aG2NXsDsMh6HuGiRLFhwH39Q2GNbm2TPoC2FXuU= Subject key identifier: 08:F7:4E:06:DB:5A:D1:D3:A7:C1:BE:2D:72:44:31:84:D6:00:1D:C3 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC4590FB4BA67C1EBA558580 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 76.191.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:90:fb:4b:a6:7c:1e:ba:55:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=afce0135-0bd7-4439-9ca4-c5c88653267f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:5b:cf:cb:ff:db:a3:73:2a:87:8e:9c:e2: 1b:66:b9:99:77:43:69:54:6e:1d:67:1b:8a:db:af: 1f:c1:20:3b:6a:4f:63:2f:6b:f4:b3:bf:d1:89:c2: 84:aa:07:01:5f:36:93:95:16:3c:0b:dd:7c:3b:94: 40:2f:af:ca:33:c9:79:8f:c9:12:a3:a7:04:3c:52: d0:d5:fe:8d:b9:a3:ea:16:ce:2d:27:d9:93:2d:62: 9c:5c:c6:57:cb:b9:c6:eb:0f:c3:5d:e5:58:45:9d: c5:0b:35:b1:b0:ce:21:71:9c:bf:07:2d:ca:37:17: 4e:6d:52:82:83:e5:30:92:4a:33:42:60:ef:60:6f: 85:26:48:7f:d1:41:d0:95:2f:31:c7:db:d2:c9:1b: c3:fc:40:93:9f:d0:af:da:3b:39:f5:b1:19:05:da: 38:2b:07:d9:d5:31:7c:51:b0:72:08:c1:9c:a6:86: 20:b2:ec:e8:01:0b:4d:35:d7:de:1f:d9:5e:12:7e: cb:ce:4c:f7:fe:01:1f:0f:70:d4:81:a7:e8:1c:56: b3:42:fa:b8:cf:67:96:98:fc:f0:a7:84:99:57:ee: da:0a:a3:d9:8a:c7:4b:ae:52:a5:62:b6:5f:ca:f2: 69:1f:f8:64:24:d4:be:ef:bd:7c:1c:5b:24:a4:34: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:4E:06:DB:5A:D1:D3:A7:C1:BE:2D:72:44:31:84:D6:00:1D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9f:1f:2a:06:64:3b:56:fc:74:ec:2a:1b:5c:f1:40:5e:dd: 51:c3:40:1a:a0:0d:1d:04:c1:b5:3e:99:17:0a:c2:42:cc:c6: ed:8e:7a:26:81:8a:8f:8b:61:32:51:c2:b9:da:6e:79:8f:fa: 35:25:68:ed:70:79:64:d0:ed:d5:67:bd:d5:6e:73:fd:d6:e2: 55:a8:b5:c7:a1:b4:78:1a:5d:f1:ea:ee:e5:5c:25:e5:f1:66: a9:db:c3:42:85:bd:05:3a:c1:0b:57:c9:81:d4:40:10:a5:04: ae:bc:6a:c6:39:54:43:3c:b9:5a:49:64:45:83:4b:01:10:22: 9a:b2:44:fb:fb:5e:90:02:93:81:e5:13:c1:fc:b3:93:94:c1: 4f:40:6a:67:63:25:80:c6:ef:ad:2f:5d:54:71:08:75:0f:ef: f5:6a:7b:c8:e2:fc:3c:ed:54:88:d4:87:07:80:96:58:00:0e: 3c:c6:5d:ff:76:d3:ff:70:a7:49:1e:f9:e8:14:6b:04:2e:e5: 64:72:3b:da:21:11:e2:b8:96:af:d4:74:90:07:7d:6f:90:7f: 3a:73:98:25:e7:a2:db:51:d2:d8:6a:b7:76:1c:12:ef:bd:ff: 7c:c3:0c:34:fa:fa:8a:08:a9:34:52:fb:f0:f4:11:1a:14:6b: 11:68:58:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZD7S6Z8HrpVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YWZjZTAxMzUtMGJkNy00NDM5LTljYTQtYzVjODg2NTMyNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnBbz8v/26NzKoeOnOIbZrmZd0NpVG4dZxuK 268fwSA7ak9jL2v0s7/RicKEqgcBXzaTlRY8C918O5RAL6/KM8l5j8kSo6cEPFLQ 1f6NuaPqFs4tJ9mTLWKcXMZXy7nG6w/DXeVYRZ3FCzWxsM4hcZy/By3KNxdObVKC g+UwkkozQmDvYG+FJkh/0UHQlS8xx9vSyRvD/ECTn9Cv2js59bEZBdo4KwfZ1TF8 UbByCMGcpoYgsuzoAQtNNdfeH9leEn7Lzkz3/gEfD3DUgafoHFazQvq4z2eWmPzw p4SZV+7aCqPZisdLrlKlYrZfyvJpH/hkJNS+7718HFskpDR5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAj3TgbbWtHTp8G+LXJEMYTWAB3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODYzODhkZTItNTgzYS0z M2YzLThmOGMtMTQyMzUwZjYzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqfHyoGZDtW/HTsKhtc8UBe3VHDQBqgDR0EwbU+mRcKwkLMxu2OeiaB io+LYTJRwrnabnmP+jUlaO1weWTQ7dVnvdVuc/3W4lWotcehtHgaXfHq7uVcJeXx Zqnbw0KFvQU6wQtXyYHUQBClBK68asY5VEM8uVpJZEWDSwEQIpqyRPv7XpACk4Hl E8H8s5OUwU9AamdjJYDG760vXVRxCHUP7/Vqe8ji/DztVIjUhweAllgADjzGXf92 0/9wp0ke+egUawQu5WRyO9ohEeK4lq/UdJAHfW+QfzpzmCXnottR0thqt3YcEu+9 /3zDDDT6+ooIqTRS+/D0ERoUaxFoWDw= -----END CERTIFICATE-----Generated at Wed May 13 08:00:47 2026 by rpki-client