$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa File: 32961140-fc1b-3f18-9ecc-e50da122d081.roa (raw, json) Hash identifier: VyaP0o6+MnyFu2Oo0+hj7ZGJz6E2lazog4/JhekmGs4= Subject key identifier: C4:84:A9:CF:97:D8:F3:F1:5E:06:9A:56:4F:1E:1C:84:B3:84:CD:32 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D86955D8EC65FF0825EFF9B00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 62651 IP address blocks: 216.131.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5d:8e:c6:5f:f0:82:5e:ff:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5d2eacdd-64c2-4668-81db-610699cd1920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:21:9e:29:12:22:8e:bc:6a:55:21:26:b4: a5:7b:71:a7:56:99:18:91:9f:21:28:dd:dd:78:5b: 4f:4e:b2:14:f6:09:82:16:9e:60:95:ae:f6:28:3d: 11:dd:4f:65:c5:c7:85:40:b9:5b:41:48:39:39:0b: ca:7c:00:10:db:06:57:8b:82:0f:c7:16:9d:77:d1: 14:d1:4e:07:19:60:b2:fc:f4:ff:0c:73:7c:c5:80: 4b:6b:3f:bb:db:6a:c9:34:01:83:7a:eb:46:62:cb: 34:d6:dd:5e:45:32:72:a9:04:ad:01:0e:e8:07:f2: 39:e8:8a:c9:ef:46:18:74:b5:53:86:f5:2f:fe:ac: 51:22:de:17:a1:ce:c5:05:51:07:6f:a7:70:c4:ea: 75:f5:b3:f9:30:e7:a8:3e:d9:37:62:c6:91:d8:65: 7f:68:04:87:1b:0b:e4:f4:30:04:32:68:9e:26:7a: f8:67:29:4d:ca:fb:1b:64:ee:a2:f5:2d:ba:7a:4a: de:4c:cf:bb:d4:1e:3a:58:f7:1c:61:bf:ef:9f:23: 83:3e:1c:f3:d0:6c:47:71:d7:cc:c7:3b:9d:1e:18: ac:9f:33:c8:ac:79:e7:f2:d0:2c:64:81:88:58:70: d4:7d:ec:e7:2d:89:9b:ad:17:65:e9:37:e5:ae:57: 13:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:84:A9:CF:97:D8:F3:F1:5E:06:9A:56:4F:1E:1C:84:B3:84:CD:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:49:89:bf:4f:1a:0f:20:da:12:fc:ab:dd:93:ff:36:59:2c: 21:b8:28:69:d2:76:0d:1c:43:82:8e:e5:a8:b5:ca:14:7e:c5: f5:d7:41:8a:ee:fb:79:59:ef:3f:ab:b6:f8:1f:fc:fb:3b:39: c1:7a:ef:53:72:a8:c5:75:78:ee:82:07:78:67:07:37:ee:f3: 2f:e9:89:c0:d6:08:f1:45:a6:dd:9f:ab:46:40:b2:76:0f:63: a7:72:d7:b1:71:56:07:6e:d2:21:83:94:1b:a4:50:86:02:e2: be:aa:6c:ff:f4:5d:13:40:9c:f0:5b:30:3e:c0:74:4a:3f:15: eb:cb:91:a7:65:98:15:38:04:70:37:14:d7:d8:bd:66:7f:bb: d7:ed:47:02:0f:0e:4d:93:44:19:9c:02:3f:9e:e4:ce:e2:6e: ff:b6:ca:33:45:c3:e3:40:b6:34:d2:da:9c:32:db:8e:15:0a: e2:d3:f9:03:ad:a5:f1:79:c5:cd:6c:37:f4:99:4d:2e:f2:5b: f5:51:93:38:55:03:fc:f6:25:b7:80:15:4f:e9:fa:28:e9:5d: 95:0f:5b:0d:69:3e:3b:98:f1:90:ed:e7:a2:a0:78:df:3a:22: 8a:40:34:f8:62:b7:4e:e8:64:3c:7d:b7:1a:42:8d:bd:8f:10: f4:32:dc:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlV2Oxl/wgl7/mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NWQyZWFjZGQtNjRjMi00NjY4LTgxZGItNjEwNjk5Y2QxOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ghnikSIo68alUhJrSle3GnVpkYkZ8hKN3d eFtPTrIU9gmCFp5gla72KD0R3U9lxceFQLlbQUg5OQvKfAAQ2wZXi4IPxxadd9EU 0U4HGWCy/PT/DHN8xYBLaz+722rJNAGDeutGYss01t1eRTJyqQStAQ7oB/I56IrJ 70YYdLVThvUv/qxRIt4Xoc7FBVEHb6dwxOp19bP5MOeoPtk3YsaR2GV/aASHGwvk 9DAEMmieJnr4ZylNyvsbZO6i9S26ekreTM+71B46WPccYb/vnyODPhzz0GxHcdfM xzudHhisnzPIrHnn8tAsZIGIWHDUfeznLYmbrRdl6TflrlcTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSEqc+X2PPxXgaaVk8eHISzhM0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzI5NjExNDAtZmMxYi0z ZjE4LTllY2MtZTUwZGExMjJkMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Jib9PGg8g2hL8q92T/zZZLCG4KGnSdg0cQ4KO5ai1yhR+xfXXQYru +3lZ7z+rtvgf/Ps7OcF671NyqMV1eO6CB3hnBzfu8y/picDWCPFFpt2fq0ZAsnYP Y6dy17FxVgdu0iGDlBukUIYC4r6qbP/0XRNAnPBbMD7AdEo/FevLkadlmBU4BHA3 FNfYvWZ/u9ftRwIPDk2TRBmcAj+e5M7ibv+2yjNFw+NAtjTS2pwy244VCuLT+QOt pfF5xc1sN/SZTS7yW/VRkzhVA/z2JbeAFU/p+ijpXZUPWw1pPjuY8ZDt56KgeN86 IopANPhit07oZDx9txpCjb2PEPQy3BM= -----END CERTIFICATE-----Generated at Fri Apr 17 23:06:09 2026 by rpki-client