$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa File: fab751c3-5070-3404-a031-06397c719220.roa (raw, json) Hash identifier: Bae4A6az3UYoGvAY7Ys0vC1cVZl6ffPbNgJhBy0RZzI= Subject key identifier: 65:32:58:95:24:F4:81:7D:68:C8:B8:57:DA:FD:1A:DE:FC:C8:EA:A0 Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584D3F64E20AEDAD28D0FB9E9D80 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1403 IP address blocks: 216.25.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e2:0a:ed:ad:28:d0:fb:9e:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=55193db0-f86b-4b4e-94f9-77047258811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:e1:a8:c2:3a:de:e5:70:84:0f:5c:6a:4d: 19:39:7d:09:9f:77:25:1b:4a:2a:bc:35:a6:5f:61: a8:9e:76:5a:40:63:da:b9:39:a9:41:6c:04:d1:bd: 2b:e9:3e:ae:26:a7:b0:87:e7:af:6f:e4:1b:8b:8a: af:bf:de:15:ab:66:e6:6c:28:6c:b0:5f:02:c8:48: c2:7a:b1:cf:6f:c6:88:bd:c9:9e:8c:1c:c3:eb:77: 40:5b:fd:a9:01:be:36:ab:62:eb:db:0a:cc:50:8e: 89:4e:4a:f3:21:3c:4c:8d:fb:08:53:6a:53:92:e0: 8b:cc:4b:2c:78:8a:cd:00:82:f3:1e:e4:6b:f5:40: bb:90:35:95:3e:93:dd:5b:77:65:d6:38:77:14:9a: 0a:e8:c7:c1:1e:d0:2f:a4:9b:21:fa:80:2e:74:65: d8:34:75:38:b4:8c:f8:8b:fe:d3:85:7b:36:6c:25: 9d:38:9d:ba:89:d5:87:6c:95:66:25:ec:ff:56:ea: 36:a8:62:b0:b0:cc:be:22:a4:46:f4:e5:60:5a:ab: 21:9e:00:82:77:7f:30:36:f2:43:12:21:50:71:f9: 61:d3:3c:0f:99:65:3a:5b:20:24:79:ba:b4:a0:4b: f9:c0:e7:6b:69:64:9a:f6:be:7c:11:23:14:2f:dd: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:32:58:95:24:F4:81:7D:68:C8:B8:57:DA:FD:1A:DE:FC:C8:EA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv4: 216.25.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:74:6e:a3:6f:ea:fa:a5:51:d5:b5:08:d6:4b:e3:37:73:01: e3:de:f6:b1:f8:2a:20:31:1d:9b:13:65:7b:d7:78:e8:cb:62: 99:88:19:63:63:67:62:6b:91:de:ae:41:ec:7d:55:f9:db:fb: 71:c7:36:e9:fe:aa:e3:82:5a:2b:b1:3a:b2:0f:b5:4d:9c:a2: 45:35:76:07:bf:a0:54:e4:6f:02:63:b0:42:2d:20:58:41:dd: 70:5e:99:13:69:b5:29:74:51:a8:03:1e:f2:2b:95:12:bc:12: 0e:67:6f:2c:2f:cd:0a:e2:71:fb:cd:d7:78:9a:11:a4:98:f5: 68:86:9a:fb:90:35:26:54:ff:1a:5e:0d:50:17:95:b0:09:e4: 56:80:45:f4:82:3e:3b:0c:f6:e9:57:50:fa:a9:b3:4f:12:0c: 0d:54:b2:f1:5f:59:fb:b7:8c:a9:71:d3:a0:05:d2:02:11:ed: 3d:47:af:e6:5a:83:91:41:02:23:55:36:50:b3:e0:60:c5:bc: d7:52:90:ea:0d:7d:7b:b7:a8:3a:a9:0d:7a:35:dd:c5:5c:ff: cc:a6:46:c3:a6:5c:f9:e9:a5:e2:15:32:30:6a:46:b7:b1:d6: f1:cf:59:7d:9a:78:04:03:d3:3b:cc:43:8c:cb:a5:42:f2:87: 27:0a:6f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOIK7a0o0PuenYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTUxOTNkYjAtZjg2Yi00YjRlLTk0ZjktNzcwNDcyNTg4MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTLhqMI63uVwhA9cak0ZOX0Jn3clG0oqvDWm X2GonnZaQGPauTmpQWwE0b0r6T6uJqewh+evb+Qbi4qvv94Vq2bmbChssF8CyEjC erHPb8aIvcmejBzD63dAW/2pAb42q2Lr2wrMUI6JTkrzITxMjfsIU2pTkuCLzEss eIrNAILzHuRr9UC7kDWVPpPdW3dl1jh3FJoK6MfBHtAvpJsh+oAudGXYNHU4tIz4 i/7ThXs2bCWdOJ26idWHbJVmJez/Vuo2qGKwsMy+IqRG9OVgWqshngCCd38wNvJD EiFQcflh0zwPmWU6WyAkebq0oEv5wOdraWSa9r58ESMUL92TYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUyWJUk9IF9aMi4V9r9Gt78yOqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvZmFiNzUxYzMtNTA3MC0z NDA0LWEwMzEtMDYzOTdjNzE5MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA10bqNv6vqlUdW1CNZL4zdzAePe9rH4KiAxHZsTZXvXeOjLYpmIGWNj Z2Jrkd6uQex9Vfnb+3HHNun+quOCWiuxOrIPtU2cokU1dge/oFTkbwJjsEItIFhB 3XBemRNptSl0UagDHvIrlRK8Eg5nbywvzQricfvN13iaEaSY9WiGmvuQNSZU/xpe DVAXlbAJ5FaARfSCPjsM9ulXUPqps08SDA1UsvFfWfu3jKlx06AF0gIR7T1Hr+Za g5FBAiNVNlCz4GDFvNdSkOoNfXu3qDqpDXo13cVc/8ymRsOmXPnppeIVMjBqRrex 1vHPWX2aeAQD0zvMQ4zLpULyhycKb5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:31 2026 by rpki-client