$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa File: ca8d454c-8457-3d57-82f4-1e234ade3489.roa (raw, json) Hash identifier: jZQEYRGluq7MM7wgHxaxENmlcB0VgFOJjwm54QUYm+8= Subject key identifier: 20:8B:9F:51:35:92:B7:5F:61:3D:B8:55:27:AC:20:84:4D:34:DC:07 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CA5F718956F5FB688E7BF3600 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 62651 IP address blocks: 216.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:18:95:6f:5f:b6:88:e7:bf:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=b59f962e-4222-48da-901c-84faf0a21129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:3a:c6:bd:81:97:6b:ff:04:06:31:76:23: aa:19:12:27:c9:7f:8e:ba:d5:7a:cc:02:e6:ec:be: 0b:34:f6:32:e3:15:e4:4a:8d:41:fe:d2:d2:d8:f0: 79:7b:1a:8d:f2:a2:f2:d0:89:0e:b9:ab:96:10:61: 75:34:1c:3c:b2:52:48:41:74:2f:5a:4e:c3:92:12: 28:9a:93:a2:ce:5d:e3:e1:b5:c6:a8:78:8f:b8:97: fc:c9:c3:cc:f4:f2:2c:86:b7:05:a5:ef:ff:4a:b0: 72:87:5b:0c:c6:ef:f0:aa:12:9e:00:77:9d:fc:4e: 4c:9e:ee:12:9b:46:65:e3:ae:46:8e:a9:7a:12:6b: 0a:ab:93:89:ad:a3:92:fc:39:b7:40:bc:aa:c8:0f: 86:42:83:03:dc:bb:ab:34:96:bb:61:18:d0:3b:10: 10:15:59:25:aa:a7:c6:44:7b:13:44:4a:04:8a:7b: 89:e2:8e:98:28:54:c7:9b:9c:52:a5:de:1c:a4:90: 00:ba:f9:c5:4c:29:a5:34:42:a2:e2:3d:8d:68:02: 3e:e9:0e:e5:9e:37:b7:45:c7:5b:57:c1:15:e9:e3: 67:47:37:43:bd:31:cc:ce:ed:6a:e1:f3:72:66:6f: b8:c8:25:d8:21:3b:c3:a8:9c:e9:08:0c:7f:58:35: f5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8B:9F:51:35:92:B7:5F:61:3D:B8:55:27:AC:20:84:4D:34:DC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9a:7a:09:6f:0c:d9:70:18:93:27:67:78:3b:8d:0e:0a:8a: 24:e9:56:db:9e:b5:0d:84:71:cc:fd:87:7a:16:00:6d:ac:f2: 4f:18:6a:39:6d:e5:13:9f:8f:eb:92:7a:e3:a3:8e:40:bd:54: 94:2f:67:9a:55:ce:3a:75:46:fb:35:27:cc:94:8a:ec:26:cd: be:9d:03:ee:db:35:ea:d3:9c:88:a3:c4:1c:be:cb:8d:3a:1e: 15:f8:9e:84:39:0e:5b:fe:50:11:4a:92:97:5d:76:26:6f:bd: 00:34:b1:a4:4c:c1:ae:eb:6c:aa:58:77:89:22:c7:9e:70:75: ed:ae:b3:a5:b2:5f:14:3a:52:f0:9b:d4:40:0d:5d:ab:de:c9: d8:67:5c:fb:33:ba:0c:54:90:56:71:27:00:98:60:dc:fa:81: 64:3d:89:af:37:38:76:26:ea:cf:12:b7:b3:e5:11:1b:b4:f9: 37:2c:35:61:c5:c0:f3:40:3b:1a:e3:1b:b0:20:98:59:28:f5: 2c:ee:47:01:c2:ea:ac:16:fc:01:35:2f:7f:55:d5:e1:e6:c4: e6:97:49:f6:30:2a:2a:e4:a1:39:7c:85:70:09:c3:d5:57:71: 55:aa:6c:7c:ed:38:5e:01:ce:b8:ca:a5:d8:da:43:ee:bd:e6: 00:20:69:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xiVb1+2iOe/NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YjU5Zjk2MmUtNDIyMi00OGRhLTkwMWMtODRmYWYwYTIxMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjg6xr2Bl2v/BAYxdiOqGRInyX+OutV6zALm 7L4LNPYy4xXkSo1B/tLS2PB5exqN8qLy0IkOuauWEGF1NBw8slJIQXQvWk7DkhIo mpOizl3j4bXGqHiPuJf8ycPM9PIshrcFpe//SrByh1sMxu/wqhKeAHed/E5Mnu4S m0Zl465Gjql6EmsKq5OJraOS/Dm3QLyqyA+GQoMD3LurNJa7YRjQOxAQFVklqqfG RHsTREoEinuJ4o6YKFTHm5xSpd4cpJAAuvnFTCmlNEKi4j2NaAI+6Q7lnje3Rcdb V8EV6eNnRzdDvTHMzu1q4fNyZm+4yCXYITvDqJzpCAx/WDX1swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCLn1E1krdfYT24VSesIIRNNNwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvY2E4ZDQ1NGMtODQ1Ny0z ZDU3LTgyZjQtMWUyMzRhZGUzNDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOaeglvDNlwGJMnZ3g7jQ4KiiTpVtuetQ2Eccz9h3oWAG2s8k8Yajlt 5ROfj+uSeuOjjkC9VJQvZ5pVzjp1Rvs1J8yUiuwmzb6dA+7bNerTnIijxBy+y406 HhX4noQ5Dlv+UBFKkpdddiZvvQA0saRMwa7rbKpYd4kix55wde2us6WyXxQ6UvCb 1EANXaveydhnXPszugxUkFZxJwCYYNz6gWQ9ia83OHYm6s8St7PlERu0+TcsNWHF wPNAOxrjG7AgmFko9SzuRwHC6qwW/AE1L39V1eHmxOaXSfYwKirkoTl8hXAJw9VX cVWqbHztOF4BzrjKpdjaQ+695gAgaWY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:54 2026 by rpki-client