$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa File: 1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json) Hash identifier: irdxt0ZJZRShPqd91YhjAxRm8KIJV1MJnbaL8v9P8qU= Subject key identifier: D0:6A:11:35:D3:F1:70:4C:40:CA:10:CE:04:C6:44:7B:1A:05:B1:1B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D24DF858A40EF07B76D639FA0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 174 IP address blocks: 216.131.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:85:8a:40:ef:07:b7:6d:63:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=57c32a02-7272-4d18-8a3c-0618271a008a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:08:96:8f:9f:27:c5:83:fd:bc:d4:8b:ae: 3b:a2:07:c6:50:89:43:82:f3:9a:4e:7d:5e:a9:de: b6:34:80:06:c3:6d:9a:96:8b:41:7a:44:6e:cf:1a: a2:51:9c:be:2d:48:a3:f8:72:94:e5:2d:14:2f:a7: 85:19:b2:0f:8d:af:65:dc:5c:cd:10:fa:a6:e2:68: c7:32:d4:32:d0:a0:82:fa:3b:7f:a8:01:5b:e4:0d: 41:09:30:17:9f:50:e5:d2:88:0a:a2:27:e1:f5:be: ee:72:ea:4c:a0:ec:2c:70:62:14:59:2c:96:60:9f: 69:59:f8:cc:b1:bb:b1:52:e4:67:ad:a9:97:4c:38: 0c:a7:e3:e0:31:66:96:77:88:6b:ac:57:39:fd:9b: 0f:7a:03:4f:6a:82:e5:98:68:60:bb:e5:28:2c:79: e5:1f:5f:84:68:74:00:52:00:37:1d:c7:b2:2d:d5: b6:7d:e9:75:04:a2:b7:f1:63:ef:3d:c0:fb:0c:0d: f6:68:d2:23:c5:bf:0c:6d:2f:0d:31:58:32:2c:e2: 16:18:95:cf:60:70:49:b5:0e:bd:47:b4:6e:3a:b0: 06:4b:dc:d7:6f:7a:d6:1b:7b:0d:f1:af:a4:56:37: 5d:5b:b5:7f:16:48:59:31:74:52:e3:34:3d:12:4a: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6A:11:35:D3:F1:70:4C:40:CA:10:CE:04:C6:44:7B:1A:05:B1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:25:62:a2:da:ef:6e:59:24:b2:3a:4d:50:21:12:ef:df:24: 3f:23:12:cd:4a:b0:e4:0e:74:bc:a1:22:c7:69:6b:0e:d8:43: 8e:74:ac:a4:35:02:23:40:80:1c:c8:c5:5f:57:ad:0b:10:7b: 2d:b2:17:df:84:4c:6d:1c:cd:38:1a:51:16:f9:20:83:f0:db: 67:48:61:92:49:a5:a7:2e:be:23:5e:2f:cb:d5:f4:bc:dd:13: dd:90:9e:9c:a2:9e:2f:ab:40:4f:1a:38:8d:7f:9b:4d:ab:86: 3c:93:ab:10:b7:dd:e8:71:d2:10:c6:3e:87:7d:ed:91:3a:1f: b7:88:02:7a:14:f9:30:7c:57:32:7c:0b:d8:4c:37:ed:87:b7: 99:81:74:7b:40:7d:c8:4f:80:e3:a6:e5:ed:ca:23:31:f2:d6: 12:13:0e:65:c2:7b:8e:24:c6:d2:61:55:56:82:3f:d4:c3:45: 3e:af:d5:db:26:c1:ca:35:60:55:73:42:e3:10:02:99:06:72: 31:6d:fb:14:dc:bd:11:63:72:57:86:3a:e1:67:25:2d:10:02: da:0d:da:f1:5b:0d:99:1b:79:d9:89:9c:e1:fb:b4:92:ad:c5: 28:cc:f3:48:59:9f:be:71:35:e8:a1:41:d1:7b:ac:25:db:ed: e7:c9:b8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34WKQO8Ht21jn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTdjMzJhMDItNzI3Mi00ZDE4LThhM2MtMDYxODI3MWEwMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrsIlo+fJ8WD/bzUi647ogfGUIlDgvOaTn1e qd62NIAGw22alotBekRuzxqiUZy+LUij+HKU5S0UL6eFGbIPja9l3FzNEPqm4mjH MtQy0KCC+jt/qAFb5A1BCTAXn1Dl0ogKoifh9b7ucupMoOwscGIUWSyWYJ9pWfjM sbuxUuRnramXTDgMp+PgMWaWd4hrrFc5/ZsPegNPaoLlmGhgu+UoLHnlH1+EaHQA UgA3HceyLdW2fel1BKK38WPvPcD7DA32aNIjxb8MbS8NMVgyLOIWGJXPYHBJtQ69 R7RuOrAGS9zXb3rWG3sN8a+kVjddW7V/FkhZMXRS4zQ9Eko9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBqETXT8XBMQMoQzgTGRHsaBbEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWJhZDA2OGMtM2E3ZS0z NDg4LThkNTAtYTVlMTc1NWY3NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUlYqLa725ZJLI6TVAhEu/fJD8jEs1KsOQOdLyhIsdpaw7YQ450rKQ1 AiNAgBzIxV9XrQsQey2yF9+ETG0czTgaURb5IIPw22dIYZJJpacuviNeL8vV9Lzd E92Qnpyini+rQE8aOI1/m02rhjyTqxC33ehx0hDGPod97ZE6H7eIAnoU+TB8VzJ8 C9hMN+2Ht5mBdHtAfchPgOOm5e3KIzHy1hITDmXCe44kxtJhVVaCP9TDRT6v1dsm wco1YFVzQuMQApkGcjFt+xTcvRFjcleGOuFnJS0QAtoN2vFbDZkbedmJnOH7tJKt xSjM80hZn75xNeihQdF7rCXb7efJuHc= -----END CERTIFICATE-----Generated at Wed Mar 25 21:32:25 2026 by rpki-client