$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa File: 2c4a958e-0a9e-3039-9d9f-f419a159b329.roa (raw, json) Hash identifier: X2OTewLH9I/rmah+7tf2KpWhgdp5FiK+DHFLoE8x5NM= Subject key identifier: A8:5C:1E:1F:4F:11:11:C9:94:A9:8D:AA:90:6F:6D:F5:74:5F:2C:63 Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769 Certificate serial: 010D0C9F4328584E5084B34BA0EF0D6AB1F7EB00 Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 21981 IP address blocks: 147.124.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:b3:4b:a0:ef:0d:6a:b1:f7:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=57d6181f-68a7-497c-b205-0489b0e1a827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:1b:f2:3b:b1:91:f8:ca:80:9a:42:29:89: bb:81:fc:f9:26:a3:a3:b6:3e:f5:fb:ee:0c:bb:40: f2:8b:71:e0:c4:20:55:56:5e:eb:ec:ef:e9:c0:c1: dd:9a:c6:bb:cf:fe:e7:ee:f6:3e:47:78:b7:e0:f8: 4c:d6:ab:75:d3:7f:04:5f:ca:79:97:42:ac:51:ab: 33:1d:8e:e8:a3:d2:93:67:f4:55:56:73:55:c8:f7: 27:84:21:85:4c:e1:1d:9e:a2:8d:7f:80:c1:29:ef: a1:4d:16:5d:00:f6:18:23:0c:78:05:e7:cd:57:5b: 02:92:cb:1e:1e:fe:75:cd:56:18:57:ba:7c:7e:2b: a1:7e:84:f4:29:7f:2b:aa:d0:29:76:97:7e:97:01: c5:bc:b4:ec:25:c5:b9:8c:52:53:fc:b7:22:72:f3: 51:a8:b2:d4:8d:b8:fa:68:1d:eb:64:f1:c6:bc:55: bc:00:86:9d:90:06:56:54:dc:4c:36:a7:09:b7:c8: 31:c5:b0:1b:dd:c9:4a:02:4a:e0:94:7e:e7:e3:25: f1:64:fc:34:ce:ab:6f:1c:fa:0f:12:dc:36:7f:92: 7f:1c:3d:08:42:be:d5:30:26:17:89:9f:ed:31:f4: b8:e6:d3:c2:e3:da:78:0b:89:ba:16:f9:f5:99:a7: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5C:1E:1F:4F:11:11:C9:94:A9:8D:AA:90:6F:6D:F5:74:5F:2C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2c4a958e-0a9e-3039-9d9f-f419a159b329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl X509v3 Authority Key Identifier: keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer sbgp-ipAddrBlock: critical IPv4: 147.124.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:ca:a9:41:33:35:65:40:d2:b6:10:1e:16:9f:b3:9a:09: b6:fe:d9:8d:e5:0f:1a:35:6d:36:e2:ec:03:e9:e8:c0:66:15: e2:9d:51:90:15:dd:71:2d:e3:0e:e1:49:6e:f0:fa:ab:1f:9b: 7b:f7:a2:f2:e0:3f:61:44:9c:70:46:90:71:b9:f0:51:ee:df: 5c:53:47:b0:78:85:02:3f:a3:4c:e6:81:ff:07:c6:8f:26:a5: ca:6f:f9:ab:48:15:1b:6d:cb:27:fb:d6:95:18:4d:1b:ff:0c: da:92:14:88:f2:9f:c7:a7:45:0d:71:5b:8d:35:a0:31:47:fd: ef:a0:0d:c7:b1:17:69:a2:57:dc:3c:1e:ae:10:d0:c8:9b:cf: e5:77:1b:09:54:f7:fc:aa:a8:8a:9a:3c:32:0e:ee:61:49:af: 9e:76:a0:78:04:f5:98:b0:1e:65:47:df:76:a2:1a:fb:97:0b: a4:bf:c5:69:b4:03:7d:a0:8e:cf:bd:99:e6:51:e0:93:ca:f1: d9:c0:40:06:78:76:f6:ca:ce:70:4b:a0:30:89:02:c0:de:36: 91:23:4d:1c:0c:f3:cf:42:37:c5:dd:53:60:4c:1b:2c:6d:96: cb:e1:a5:cb:e7:20:92:a4:83:17:a7:f4:0e:f4:59:12:71:9a: f9:6c:5c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLNLoO8NarH36wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZiOGIxMzgtOTg2YS00MTkwLWE3YTMtMzYyNWI1Zjcw NzY5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NTdkNjE4MWYtNjhhNy00OTdjLWIyMDUtMDQ4OWIwZTFhODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQb8juxkfjKgJpCKYm7gfz5JqOjtj71++4M u0Dyi3HgxCBVVl7r7O/pwMHdmsa7z/7n7vY+R3i34PhM1qt1038EX8p5l0KsUasz HY7oo9KTZ/RVVnNVyPcnhCGFTOEdnqKNf4DBKe+hTRZdAPYYIwx4BefNV1sCksse Hv51zVYYV7p8fiuhfoT0KX8rqtApdpd+lwHFvLTsJcW5jFJT/LcicvNRqLLUjbj6 aB3rZPHGvFW8AIadkAZWVNxMNqcJt8gxxbAb3clKAkrglH7n4yXxZPw0zqtvHPoP Etw2f5J/HD0IQr7VMCYXiZ/tMfS45tPC49p4C4m6Fvn1mad87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhcHh9PERHJlKmNqpBvbfV0XyxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NmI4 YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1YjVmNzA3NjkvMmM0YTk1OGUtMGE5ZS0z MDM5LTlkOWYtZjQxOWExNTliMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzZiOGIxMzgtOTg2YS00MTkwLWE3 YTMtMzYyNWI1ZjcwNzY5Lzc2YjhiMTM4LTk4NmEtNDE5MC1hN2EzLTM2MjViNWY3 MDc2OS5jcmwwHwYDVR0jBBgwFoAUORd22GV+bJPh+rQky43rdnYzhHIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NmI4YjEzOC05ODZhLTQxOTAtYTdhMy0zNjI1 YjVmNzA3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8oyqlBMzVlQNK2EB4Wn7OaCbb+2Y3lDxo1bTbi7APp6MBmFeKdUZAV 3XEt4w7hSW7w+qsfm3v3ovLgP2FEnHBGkHG58FHu31xTR7B4hQI/o0zmgf8Hxo8m pcpv+atIFRttyyf71pUYTRv/DNqSFIjyn8enRQ1xW401oDFH/e+gDcexF2miV9w8 Hq4Q0Mibz+V3GwlU9/yqqIqaPDIO7mFJr552oHgE9ZiwHmVH33aiGvuXC6S/xWm0 A32gjs+9meZR4JPK8dnAQAZ4dvbKznBLoDCJAsDeNpEjTRwM889CN8XdU2BMGyxt lsvhpcvnIJKkgxen9A70WRJxmvlsXN0= -----END CERTIFICATE-----Generated at Fri Jul 24 22:32:16 2026 by rpki-client