$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: 0uIbmTMe5Qo+tU92CzTLs2VFdAdAsq818JwPJ5YPoR4= Subject key identifier: F1:2C:0D:BA:22:2F:B1:60:0D:CC:B3:1B:4D:41:D8:3B:D4:74:88:95 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DB4A57AC780F78164322CBC80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7a:c7:80:f7:81:64:32:2c:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=6beafb4a-831e-4c64-af64-b31f49f75416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:d7:5d:b7:e4:fe:49:67:73:7a:a2:67:b9: 95:f3:73:07:b2:57:2d:c3:cc:b7:c2:0c:fd:07:5f: 31:bc:4a:e9:68:c0:66:12:d2:b1:d1:cd:1d:d4:ec: 7d:91:8b:81:ac:39:7e:8e:92:c7:05:e5:19:24:49: be:f3:c5:e4:0e:78:87:b1:82:9a:00:43:f8:f9:08: 8f:3e:11:91:ca:25:38:2a:3d:e2:7e:5c:fc:a4:a1: e1:c3:c7:a3:1d:03:0a:2d:1d:12:f5:4b:69:6e:2a: c5:42:a8:aa:1f:4a:97:50:5f:51:58:43:d9:84:c1: 3d:81:cd:66:52:89:0e:85:e6:8e:ee:d1:35:7f:2b: 0a:f3:8d:5b:a2:d3:18:30:16:c6:06:b3:2d:26:fb: 35:5a:a2:8f:74:47:de:8e:17:41:f1:bf:24:34:eb: 7a:8c:dd:38:40:46:63:93:e8:bd:10:b8:1c:2f:be: 5e:11:ef:72:00:40:07:eb:61:2a:5d:44:d7:8a:11: dd:be:ee:b8:fa:c4:6e:54:82:27:5d:ee:cf:a0:28: d7:56:c5:04:a3:56:3d:31:fb:d8:f9:3b:07:73:17: 57:78:09:80:a6:68:20:af:30:33:6a:2d:ef:20:38: cf:5b:25:9a:49:e6:1d:99:e5:31:ea:2e:0b:a4:b2: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2C:0D:BA:22:2F:B1:60:0D:CC:B3:1B:4D:41:D8:3B:D4:74:88:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a4:58:c4:94:05:cf:ee:24:13:6d:37:4c:b5:ae:b5:ba:f8: f6:9d:52:92:e8:b2:b5:83:81:99:51:0d:04:23:c2:ad:3b:2a: 19:cd:30:fa:2c:34:36:df:e8:b4:88:d8:63:6f:2a:5e:89:8f: 62:f0:f1:98:da:46:38:ec:06:6a:c7:c6:13:d0:59:98:3a:bc: ba:8e:f6:5f:47:7b:01:6e:ad:78:f4:f6:a6:5a:f0:d4:1a:a6: da:17:26:33:1e:f9:3f:0d:b1:0b:c1:cb:1a:c8:fe:dd:fa:e4: 89:dd:80:a2:f9:1c:a7:15:87:5b:0f:6e:bf:cd:d6:c2:62:97: 55:83:de:1f:d0:6c:5b:b9:38:3f:bd:8f:36:ef:77:15:58:ed: 85:72:91:dd:2d:d4:d8:e1:c9:46:d0:5e:7f:8b:d4:e2:f0:d9: 12:97:7a:a1:94:a8:2f:74:09:1b:09:a6:55:4f:a3:12:09:6e: bb:a4:f4:2a:ef:49:26:1e:6f:dd:35:5d:d2:ca:99:c8:93:f6: 04:ce:a1:30:38:55:05:88:07:af:f8:0c:d7:ff:e1:88:75:fe: d5:71:5f:f7:5c:97:d7:8a:9c:9e:91:65:e9:1d:7d:0d:e4:43: cb:68:db:01:0e:2c:0c:46:e7:d0:82:52:41:b1:80:5d:23:9b: 92:bd:32:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pXrHgPeBZDIsvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmJlYWZiNGEtODMxZS00YzY0LWFmNjQtYjMxZjQ5Zjc1NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F7XXbfk/klnc3qiZ7mV83MHslctw8y3wgz9 B18xvErpaMBmEtKx0c0d1Ox9kYuBrDl+jpLHBeUZJEm+88XkDniHsYKaAEP4+QiP PhGRyiU4Kj3iflz8pKHhw8ejHQMKLR0S9UtpbirFQqiqH0qXUF9RWEPZhME9gc1m UokOheaO7tE1fysK841botMYMBbGBrMtJvs1WqKPdEfejhdB8b8kNOt6jN04QEZj k+i9ELgcL75eEe9yAEAH62EqXUTXihHdvu64+sRuVIInXe7PoCjXVsUEo1Y9MfvY +TsHcxdXeAmApmggrzAzai3vIDjPWyWaSeYdmeUx6i4LpLLsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEsDboiL7FgDcyzG01B2DvUdIiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGkWMSUBc/uJBNtN0y1rrW6+PadUpLosrWDgZlRDQQjwq07KhnNMPos NDbf6LSI2GNvKl6Jj2Lw8ZjaRjjsBmrHxhPQWZg6vLqO9l9HewFurXj09qZa8NQa ptoXJjMe+T8NsQvByxrI/t365IndgKL5HKcVh1sPbr/N1sJil1WD3h/QbFu5OD+9 jzbvdxVY7YVykd0t1NjhyUbQXn+L1OLw2RKXeqGUqC90CRsJplVPoxIJbruk9Crv SSYeb901XdLKmciT9gTOoTA4VQWIB6/4DNf/4Yh1/tVxX/dcl9eKnJ6RZekdfQ3k Q8to2wEOLAxG59CCUkGxgF0jm5K9Mjg= -----END CERTIFICATE-----Generated at Wed May 13 17:03:21 2026 by rpki-client