$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa File: 875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa (raw, json) Hash identifier: tm5bNyt9Lmr90Yit9HlOcKxaaDjcqVk/Dahhqx82n2o= Subject key identifier: 86:B1:99:FA:7A:51:1D:CD:D9:8F:CE:13:90:EE:FC:47:D8:2D:88:52 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D4D5A6EAEE61AB5E90ADE7F80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 212238 IP address blocks: 216.131.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6e:ae:e6:1a:b5:e9:0a:de:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=88c678e8-c753-454c-9b44-fb100612b3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:ca:92:f5:ae:64:c9:23:cd:00:ab:51:03: da:23:ab:cd:e6:79:eb:6f:4c:64:10:ba:97:3c:ce: 2d:e9:6c:5a:cf:4b:9e:ac:8a:9e:37:5c:73:e0:ca: 03:8d:2c:78:3b:74:36:1d:9f:ce:04:66:b6:b3:0d: ab:7d:0f:34:a2:dd:54:90:d1:db:5b:8b:e8:e6:6f: ad:9a:9c:a2:b1:89:58:d1:13:b1:cb:6b:7a:c3:90: a9:c1:3b:57:28:f4:55:9d:d4:77:37:39:40:30:83: 9f:f2:b1:70:07:74:96:41:be:32:a3:10:3d:3e:81: ff:6b:3d:c3:8a:01:d2:ff:aa:26:21:46:4f:26:52: 51:37:a7:e0:a4:7b:42:d8:05:21:c9:d6:2a:ba:f4: 53:a7:5f:92:da:74:80:51:3e:23:b7:36:d9:81:e9: 61:0b:84:6a:df:13:01:a1:78:a3:f6:0f:df:2c:3a: 01:f9:2b:7e:58:ce:bf:60:e4:51:8d:54:3e:ca:e9: 21:4b:d0:01:e7:fb:49:5c:44:b4:8f:6e:e0:2d:b9: 50:b3:6e:e0:6a:36:c6:6c:28:68:4d:59:f5:02:95: 8f:0b:52:70:48:dd:d7:ff:c2:37:2f:e4:70:e6:ca: 4b:2b:6d:02:53:8d:2b:be:4e:98:eb:a4:b0:65:73: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B1:99:FA:7A:51:1D:CD:D9:8F:CE:13:90:EE:FC:47:D8:2D:88:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/875fb8ba-cc9d-3e80-a1d3-c10854db150d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ab:c4:11:c4:82:60:6f:8f:bf:ad:f7:fd:54:77:9d:68:1e: 8e:68:a3:9e:8a:6c:ab:29:22:22:c5:15:fe:41:68:7d:fe:a3: e5:be:bc:4f:e9:cb:5a:bd:0f:1f:f9:42:0e:d3:f4:05:3f:03: 37:b2:be:53:54:63:29:2d:43:7e:fa:d5:b3:f5:49:e7:65:ff: 87:76:33:17:c7:4f:95:41:4e:52:43:25:9b:42:72:e5:9a:25: 33:05:e6:6d:71:b9:0e:39:93:71:b0:ce:03:cc:c1:57:cc:4c: e6:46:3b:46:9e:18:7b:d2:c9:0a:1b:97:02:d8:01:9d:bb:a0: 13:c8:ce:6f:a1:ab:6f:d2:7e:aa:20:52:5d:a1:2f:d1:5f:46: de:74:b1:e0:a1:d8:ab:b7:25:8b:5b:17:6a:07:cb:1d:3b:54: b4:88:4f:61:5b:9c:c2:be:09:32:7c:b3:2e:b0:be:bf:8e:0e: 0a:90:5c:fb:91:aa:e4:d3:98:68:9c:bd:e9:12:1c:c0:ea:82: 5e:ab:7c:01:c1:48:f9:02:04:4d:a5:4e:3f:e5:4c:8d:7a:26: 36:35:88:5d:06:13:4b:9a:0f:94:3f:39:d9:61:b2:07:b9:a4: 82:d8:c3:e5:87:11:fb:37:7f:3c:ad:05:ae:99:89:2f:2c:9f: a2:33:8a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWm6u5hq16Qref4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODhjNjc4ZTgtYzc1My00NTRjLTliNDQtZmIxMDA2MTJiM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4TKkvWuZMkjzQCrUQPaI6vN5nnrb0xkELqX PM4t6Wxaz0uerIqeN1xz4MoDjSx4O3Q2HZ/OBGa2sw2rfQ80ot1UkNHbW4vo5m+t mpyisYlY0ROxy2t6w5CpwTtXKPRVndR3NzlAMIOf8rFwB3SWQb4yoxA9PoH/az3D igHS/6omIUZPJlJRN6fgpHtC2AUhydYquvRTp1+S2nSAUT4jtzbZgelhC4Rq3xMB oXij9g/fLDoB+St+WM6/YORRjVQ+yukhS9AB5/tJXES0j27gLblQs27gajbGbCho TVn1ApWPC1JwSN3X/8I3L+Rw5spLK20CU40rvk6Y66SwZXPLHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaxmfp6UR3N2Y/OE5Du/EfYLYhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvODc1ZmI4YmEtY2M5ZC0z ZTgwLWExZDMtYzEwODU0ZGIxNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKrxBHEgmBvj7+t9/1Ud51oHo5oo56KbKspIiLFFf5BaH3+o+W+vE/p y1q9Dx/5Qg7T9AU/AzeyvlNUYyktQ3761bP1Sedl/4d2MxfHT5VBTlJDJZtCcuWa JTMF5m1xuQ45k3GwzgPMwVfMTOZGO0aeGHvSyQoblwLYAZ27oBPIzm+hq2/Sfqog Ul2hL9FfRt50seCh2Ku3JYtbF2oHyx07VLSIT2FbnMK+CTJ8sy6wvr+ODgqQXPuR quTTmGicvekSHMDqgl6rfAHBSPkCBE2lTj/lTI16JjY1iF0GE0uaD5Q/Odlhsge5 pILYw+WHEfs3fzytBa6ZiS8sn6IzinA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:15:30 2026 by rpki-client