$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa File: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (raw, json) Hash identifier: zY+nbPBlJ6+wRk2fJA6vwwO8yx629NYAsoww6vz9qkw= Subject key identifier: E0:09:84:B8:17:7A:28:A5:7B:D8:33:75:FD:1A:28:20:2B:61:FD:70 Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F4328584D15A26903C78BCC50E3459300 Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 25222 IP address blocks: 216.129.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:69:03:c7:8b:cc:50:e3:45:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=5ab1e5b7-6bd6-4248-a2e0-3ebc05c1f977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:37:a0:7a:66:69:b9:c3:63:5a:76:31:13: f5:80:8a:a8:b0:57:e9:47:7b:d6:f7:17:a5:90:b0: d8:c0:84:04:71:e4:6c:ea:89:a0:4e:f6:40:20:0b: cf:d2:ba:6e:de:7b:64:9f:be:bc:c2:4c:ab:6a:4f: 01:5b:23:20:58:f4:e4:80:25:24:a7:ab:c5:52:80: 40:fc:c0:78:ad:66:60:b2:6f:07:1d:3d:91:dc:40: 41:ac:e1:62:14:f3:29:0c:8d:25:5a:22:ec:5a:5f: b7:f3:e6:8f:ca:52:aa:1a:31:34:c9:c4:c8:96:57: df:fa:a5:d9:63:e8:6c:9e:08:33:08:c0:d9:f8:ee: e4:89:b0:a2:f6:59:7f:f0:93:9c:2a:ad:e7:27:1a: a8:1d:2e:78:d1:40:09:6f:92:8c:e2:0b:61:59:3c: de:60:e8:08:d8:60:0e:70:61:43:7a:06:7b:74:2d: 4d:63:ff:98:71:82:2e:4e:10:2d:00:bd:8a:cc:3e: 02:59:78:3d:ea:82:f3:30:42:3d:5a:16:f1:39:df: 84:ba:80:ca:7f:16:a8:9e:22:36:a0:c0:6b:f5:b5: 88:6a:6f:20:93:99:d5:13:fe:87:f3:3b:fa:df:04: 1a:e3:c7:bb:3c:38:bd:22:ab:ff:8a:d3:75:bc:b9: c4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:84:B8:17:7A:28:A5:7B:D8:33:75:FD:1A:28:20:2B:61:FD:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: 216.129.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:be:58:b0:e6:4f:f3:b1:66:e5:55:a3:fd:5c:7f:b8:82:76: ca:9f:91:0e:9b:73:20:0f:79:4f:c3:b6:94:87:a7:79:72:a2: 25:c1:05:bf:0a:32:99:4f:f8:10:1b:b4:a6:a6:3c:98:7f:6c: d4:48:79:dd:2f:08:8b:3b:47:c1:8e:9d:af:c5:21:58:db:3c: 94:24:f6:98:4c:b6:6e:e7:ea:ff:69:dd:2c:02:95:2b:ad:84: 79:15:a5:a9:45:75:57:ad:cd:fa:65:8d:4f:36:a0:98:fe:9a: 5f:6e:6d:54:cf:f0:16:91:44:05:5f:8b:a1:e8:c3:36:82:19: 12:07:86:a8:fd:be:0f:03:04:a5:ae:61:26:88:4e:ab:a8:b0: c6:23:43:52:56:0d:53:78:8d:f5:1c:36:d9:91:e4:6e:42:21: 33:e7:41:4e:be:0e:19:d2:39:23:80:4c:3d:60:b1:cf:f4:13: df:b1:7f:3a:73:d1:90:fc:fb:15:dc:de:04:0e:ec:f6:c3:cc: bd:7e:6b:ed:d1:59:72:77:d3:7b:44:e9:b5:43:b0:7f:d7:56: 12:5c:b9:56:24:d2:94:72:b3:71:e7:a3:8a:3c:af:da:68:2b: 88:95:93:0b:10:32:76:9b:7c:c4:f6:a0:3a:cf:c8:77:a0:d9: af:b5:c1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomkDx4vMUONFkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NWFiMWU1YjctNmJkNi00MjQ4LWEyZTAtM2ViYzA1YzFmOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQ3oHpmabnDY1p2MRP1gIqosFfpR3vW9xel kLDYwIQEceRs6omgTvZAIAvP0rpu3ntkn768wkyrak8BWyMgWPTkgCUkp6vFUoBA /MB4rWZgsm8HHT2R3EBBrOFiFPMpDI0lWiLsWl+38+aPylKqGjE0ycTIllff+qXZ Y+hsnggzCMDZ+O7kibCi9ll/8JOcKq3nJxqoHS540UAJb5KM4gthWTzeYOgI2GAO cGFDegZ7dC1NY/+YcYIuThAtAL2KzD4CWXg96oLzMEI9WhbxOd+EuoDKfxaoniI2 oMBr9bWIam8gk5nVE/6H8zv63wQa48e7PDi9Iqv/itN1vLnENQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAJhLgXeiile9gzdf0aKCArYf1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvZTdlMmQ2YjItZTVlMy0z N2I1LWFkNDktY2QwNDIzZTZlNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG+WLDmT/OxZuVVo/1cf7iCdsqfkQ6bcyAPeU/DtpSHp3lyoiXBBb8K MplP+BAbtKamPJh/bNRIed0vCIs7R8GOna/FIVjbPJQk9phMtm7n6v9p3SwClSut hHkVpalFdVetzfpljU82oJj+ml9ubVTP8BaRRAVfi6HowzaCGRIHhqj9vg8DBKWu YSaITquosMYjQ1JWDVN4jfUcNtmR5G5CITPnQU6+DhnSOSOATD1gsc/0E9+xfzpz 0ZD8+xXc3gQO7PbDzL1+a+3RWXJ303tE6bVDsH/XVhJcuVYk0pRys3Hno4o8r9po K4iVkwsQMnabfMT2oDrPyHeg2a+1we0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:34 2026 by rpki-client