$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa File: 21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa (raw, json) Hash identifier: kigN1Nz2iEjtX9fO3E5hwxZH52QRX5Ohqc7t5vqGww4= Subject key identifier: FC:A7:FD:CE:42:0A:23:B2:49:2B:C9:DA:DF:51:ED:1F:55:23:D2:98 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584D3DFFAAB4958A3F272F0AD640 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14977 IP address blocks: 137.87.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:aa:b4:95:8a:3f:27:2f:0a:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=eb54401b-3d81-4d46-8d73-f8e9ee98f9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:21:2b:d2:55:5a:0f:5b:e7:14:5f:4f:3b: e7:0e:9c:76:48:36:08:82:c7:ec:cc:45:3b:7b:27: 7b:9c:b0:f4:08:58:2b:5c:8a:a8:3f:1f:ff:1f:4b: 20:3d:83:ae:73:98:ea:53:07:80:40:40:dc:c1:1a: e3:00:32:31:68:de:79:8f:59:fc:73:28:04:0f:31: 09:ec:97:c2:33:11:dd:47:51:ad:7d:e5:9b:b7:1a: 72:1c:81:d2:a5:e1:f0:be:ed:d4:8f:cc:89:4c:62: da:7e:ee:22:3f:7d:5b:8c:f5:25:42:e1:fb:f6:0e: 3d:cb:03:ea:5e:84:be:80:a0:4b:fe:9f:15:4d:7f: b9:14:20:a3:f6:60:30:11:47:aa:d0:a0:07:b7:83: d7:14:b0:14:57:c9:98:c0:a5:25:fb:da:4b:53:bc: 3f:5a:1e:22:d2:56:df:34:1c:45:61:2f:4e:76:ef: ba:00:c0:5a:3e:8f:40:6e:67:6e:91:ff:0a:7b:d5: f3:a8:8b:fa:c8:a9:90:0f:f1:23:e0:08:a9:06:09: 8a:75:5e:3f:34:da:2d:9a:97:3b:da:75:a3:63:34: e0:a2:fb:5f:ba:89:83:c6:3e:48:9c:66:91:d7:36: f3:51:6b:ad:7a:e4:4c:7f:6f:92:af:61:c1:3a:2f: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:FD:CE:42:0A:23:B2:49:2B:C9:DA:DF:51:ED:1F:55:23:D2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.87.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e4:dd:bb:1a:3f:a6:cf:9a:75:4b:b8:d0:cf:22:a9:22:d8: aa:c9:56:4e:d0:d3:8e:93:a2:c7:ba:94:d3:a3:bc:9e:96:23: c9:31:8c:fa:60:3d:91:f9:5c:54:27:c0:50:50:0c:45:2a:67: 68:ac:50:ec:61:9b:9d:76:3b:12:dc:86:6f:85:78:91:0e:8f: 82:af:e2:d6:68:ac:67:18:a4:f8:a8:f8:e7:28:c5:0c:b3:34: 69:a5:94:d4:e9:5b:e3:28:a8:ae:14:19:94:3f:54:0d:86:4a: f7:52:60:af:0c:66:c9:a1:e5:3e:af:f1:fd:37:14:13:8b:8b: 40:8d:4b:09:2c:b0:28:0b:b0:78:f9:21:b0:ba:05:17:f1:be: cb:2b:93:ef:39:5e:d2:0f:47:31:cf:fa:48:fe:49:eb:0a:21: 8c:b1:d4:bc:04:b2:4c:6a:30:42:e1:e8:27:28:b9:73:8a:4c: 58:bc:40:8f:3e:fe:59:ae:53:7e:32:f5:fc:e0:8d:d3:a7:5f: ad:5f:f8:60:00:79:03:3a:ab:2c:e5:a9:a1:37:8c:64:45:2e: 3d:18:30:c1:50:7d:4a:77:82:c4:0b:3d:be:7a:b3:8c:7a:ae: 68:cc:dd:07:c8:86:20:fd:08:1a:80:59:01:13:c0:ff:c2:b4: 8d:d9:31:67 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE09/6q0lYo/Jy8K1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZWI1NDQwMWItM2Q4MS00ZDQ2LThkNzMtZjhlOWVlOThmOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvYhK9JVWg9b5xRfTzvnDpx2SDYIgsfszEU7 eyd7nLD0CFgrXIqoPx//H0sgPYOuc5jqUweAQEDcwRrjADIxaN55j1n8cygEDzEJ 7JfCMxHdR1GtfeWbtxpyHIHSpeHwvu3Uj8yJTGLafu4iP31bjPUlQuH79g49ywPq XoS+gKBL/p8VTX+5FCCj9mAwEUeq0KAHt4PXFLAUV8mYwKUl+9pLU7w/Wh4i0lbf NBxFYS9Odu+6AMBaPo9Abmdukf8Ke9XzqIv6yKmQD/Ej4AipBgmKdV4/NNotmpc7 2nWjYzTgovtfuomDxj5InGaR1zbzUWuteuRMf2+Sr2HBOi+u5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPyn/c5CCiOySSvJ2t9R7R9VI9KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvMjFjYWUwZGEtYjdkMi0z NzZhLWIzMGUtMWNlNWRmNjNmZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAReTduxo/ps+adUu40M8iqSLYqslWTtDTjpOix7qU06O8npYjyTGM+mA9 kflcVCfAUFAMRSpnaKxQ7GGbnXY7EtyGb4V4kQ6Pgq/i1misZxik+Kj45yjFDLM0 aaWU1Olb4yiorhQZlD9UDYZK91JgrwxmyaHlPq/x/TcUE4uLQI1LCSywKAuwePkh sLoFF/G+yyuT7zle0g9HMc/6SP5J6wohjLHUvASyTGowQuHoJyi5c4pMWLxAjz7+ Wa5TfjL1/OCN06dfrV/4YAB5AzqrLOWpoTeMZEUuPRgwwVB9SneCxAs9vnqzjHqu aMzdB8iGIP0IGoBZARPA/8K0jdkxZw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:13 2026 by rpki-client