$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: R9ZeUTDIfOK19SO2USlaLozcDwKH7DflbZC1QewGmGc= Subject key identifier: 53:C9:BE:B2:DD:9A:E1:2F:17:A4:90:19:33:51:D5:CA:3E:9E:7C:7A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CB551F6BD32E5A2B28763EF80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f6:bd:32:e5:a2:b2:87:63:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=66944045-ab14-44dd-8935-8037fb2ca9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:da:b9:45:a4:53:f5:35:03:a3:57:6c:fa: d4:01:fe:3b:29:d2:87:70:9f:e7:28:9e:a2:13:95: 8b:7d:eb:3f:b3:bd:84:15:c7:0b:b2:74:d9:65:ad: 36:59:96:fe:5f:55:24:af:d3:0c:9f:e4:2d:f0:a6: 33:f5:14:90:69:5a:f6:38:10:be:05:c6:0e:ac:a3: 6e:0d:0f:ec:20:10:ec:3f:35:9f:8e:65:06:12:d1: 9c:86:80:bf:cd:b2:64:f8:44:e2:c2:4d:db:3f:e3: a7:ec:06:e6:9b:a9:8e:21:61:11:17:3a:88:ff:40: 73:eb:19:9c:90:de:85:bf:6f:8f:5d:a5:43:01:be: 28:f1:f8:45:55:79:6b:40:0b:2b:72:c3:d3:33:a0: e8:70:93:7d:63:5a:70:a6:7a:45:68:be:36:4f:17: 05:fc:22:74:f3:da:08:be:25:b6:46:4f:6d:1c:bc: ac:cb:89:31:69:b0:6e:1a:de:6f:45:b9:a9:33:30: 3e:e6:ba:ff:a5:81:43:91:a3:c3:77:58:46:9f:45: 1b:bc:fc:5f:2d:97:9d:80:ee:f5:5d:be:3c:22:6a: 47:b6:b9:c6:b7:43:6b:79:8f:64:4c:29:02:37:29: d6:bf:59:63:97:3e:b6:79:e0:a9:76:87:5b:03:71: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:BE:B2:DD:9A:E1:2F:17:A4:90:19:33:51:D5:CA:3E:9E:7C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a8:c8:ce:1a:aa:42:b7:66:90:56:c8:70:7b:a1:2b:7c:73: c8:6b:29:4c:13:4c:0a:73:81:9d:0a:04:18:bd:be:95:a2:05: e1:b8:2b:df:e5:17:4b:d0:ad:bd:e2:de:0b:8c:2c:78:d8:eb: 31:ef:87:92:e4:43:fb:79:59:f4:ec:2f:df:52:2d:9f:8a:98: d0:c3:07:a7:e7:d2:ef:4c:6f:25:f5:8e:48:91:48:90:1a:29: 7a:9c:dc:a2:04:ae:a7:c9:31:ed:a6:87:bf:7b:ae:97:73:4b: 2b:26:a5:69:fd:ed:48:53:5e:af:60:18:f4:fd:26:97:38:8c: 85:0c:eb:9f:c1:89:f0:4b:9e:cd:0d:2a:16:81:4b:23:73:7a: c3:a9:49:88:15:8d:e6:1e:ca:ba:a0:79:4d:ac:15:91:70:62: 9a:ba:e7:27:d2:07:2e:06:68:85:0f:f7:8a:86:5e:64:5d:e5: 99:12:ad:2f:ec:7d:25:8d:2c:7e:01:a7:56:f8:5c:32:2c:2a: 3f:60:3c:21:6f:22:d1:f4:b0:4b:12:51:d2:a8:01:b8:4f:83: 87:b3:c3:e8:76:bb:f9:12:bb:95:45:b6:f6:c4:41:67:ab:54: 1c:6a:c6:a2:5a:c0:af:fd:91:91:cf:d5:2a:60:60:c9:8d:49: 53:1f:94:c8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEy1Ufa9MuWisodj74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NjY5NDQwNDUtYWIxNC00NGRkLTg5MzUtODAzN2ZiMmNhOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2DauUWkU/U1A6NXbPrUAf47KdKHcJ/nKJ6i E5WLfes/s72EFccLsnTZZa02WZb+X1Ukr9MMn+Qt8KYz9RSQaVr2OBC+BcYOrKNu DQ/sIBDsPzWfjmUGEtGchoC/zbJk+ETiwk3bP+On7Abmm6mOIWERFzqI/0Bz6xmc kN6Fv2+PXaVDAb4o8fhFVXlrQAsrcsPTM6DocJN9Y1pwpnpFaL42TxcF/CJ089oI viW2Rk9tHLysy4kxabBuGt5vRbmpMzA+5rr/pYFDkaPDd1hGn0UbvPxfLZedgO71 Xb48ImpHtrnGt0NreY9kTCkCNynWv1ljlz62eeCpdodbA3Eq6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFPJvrLdmuEvF6SQGTNR1co+nnx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsqMjOGqpCt2aQVshwe6ErfHPIaylME0wK c4GdCgQYvb6VogXhuCvf5RdL0K294t4LjCx42Osx74eS5EP7eVn07C/fUi2fipjQ wwen59LvTG8l9Y5IkUiQGil6nNyiBK6nyTHtpoe/e66Xc0srJqVp/e1IU16vYBj0 /SaXOIyFDOufwYnwS57NDSoWgUsjc3rDqUmIFY3mHsq6oHlNrBWRcGKauucn0gcu BmiFD/eKhl5kXeWZEq0v7H0ljSx+AadW+FwyLCo/YDwhbyLR9LBLElHSqAG4T4OH s8Podrv5EruVRbb2xEFnq1QcasaiWsCv/ZGRz9UqYGDJjUlTH5TI -----END CERTIFICATE-----Generated at Mon Mar 2 17:32:28 2026 by rpki-client