$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa File: d08c84e2-cf05-324f-9e29-a1020bf31620.roa (raw, json) Hash identifier: YpQnNENeS+bBLZeDSI5aZmhJUUQmLizStYLxte4JHho= Subject key identifier: 90:88:7E:DA:31:8D:C3:63:E4:81:3E:76:BE:58:EB:9F:DF:95:77:D8 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CB551F69A7A0C0AFAEDEDEAA0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 22781 IP address blocks: 216.131.118.0/24 maxlen: 24 2606:b300:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f6:9a:7a:0c:0a:fa:ed:ed:ea:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=ac0798cf-bfc3-472f-ac87-77c1d9596c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:d1:61:80:37:69:36:3c:13:18:9c:cc:2a: f3:23:c4:d6:47:bf:08:16:fe:83:58:af:2a:d5:5b: 05:e2:01:77:70:ac:15:00:d5:3c:62:26:0a:8a:ab: f9:91:05:d3:a1:b2:f6:9e:b0:00:f6:0f:1c:cb:4a: 36:79:ca:9f:d8:a8:c5:df:d3:5d:db:f7:75:3e:25: d0:67:79:60:02:1f:84:09:8b:ce:af:b8:9c:22:fc: 95:6e:c1:81:61:cd:3c:4c:cd:67:ce:f7:aa:bd:f4: 0e:2c:73:e0:d2:36:d7:79:49:f2:c5:3a:2b:56:4b: da:92:fa:5a:87:48:51:a5:f7:4f:00:9b:af:b2:7c: a5:27:44:94:e4:79:a6:7e:41:6d:a0:06:78:b4:d9: 89:b8:ed:b0:d7:0f:d4:a0:fc:d3:06:75:e0:66:23: c8:03:a3:2b:92:ab:87:e3:63:c2:3e:41:33:b3:f4: 91:42:61:84:5c:6d:c9:46:03:3b:e9:72:28:9c:f8: db:7c:e1:46:c8:2d:ca:f9:81:35:9b:5b:8b:33:4d: 97:88:94:cb:a7:79:9c:b4:85:de:89:9e:90:b3:57: 6a:28:7e:3e:a1:73:2e:38:ef:41:29:64:94:df:a0: bf:1c:1c:22:42:ce:bf:42:d0:4f:e3:6c:62:35:4f: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:88:7E:DA:31:8D:C3:63:E4:81:3E:76:BE:58:EB:9F:DF:95:77:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.118.0/24 IPv6: 2606:b300:8100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e7:b5:41:19:48:c3:bc:6a:bf:e5:52:b1:72:4c:8b:11:bb: b9:c7:8e:ec:b7:eb:70:35:4b:93:fa:1f:90:4a:cc:97:6b:e0: 2f:9f:87:71:e2:45:44:b7:e1:cb:0f:36:44:e1:3e:f5:3a:63: 5f:12:c4:99:8a:9b:b9:c8:81:07:27:8b:95:9f:f9:bf:94:93: c2:0d:7b:b9:e6:04:80:51:42:4d:ae:d4:cd:7a:3a:69:04:a0: 76:59:ec:c4:92:47:5b:3f:22:da:22:c1:bb:a9:75:b5:f2:1d: 21:3b:6e:ca:88:ed:90:13:34:4a:27:99:b5:0f:df:82:8c:eb: ea:6f:fb:1e:ad:59:d2:a4:2f:e3:7e:93:b2:14:03:82:96:ab: 58:7d:2d:2d:e7:15:d9:9f:52:da:15:9f:90:cd:19:05:8d:55: 0d:eb:06:02:2a:dc:e7:92:39:c5:b1:0f:a7:23:5d:f2:34:a7: 40:b5:95:d3:6e:1e:70:70:43:24:64:ec:18:60:7c:c2:b4:83: 0b:5e:ec:f9:11:83:5d:ba:28:00:d6:35:ac:fe:8d:39:f3:30: e4:e3:f6:6d:f6:8a:88:3a:70:5d:47:ce:7c:6a:51:50:0b:66: 37:c5:19:76:b9:6e:23:f5:3c:ca:cc:d0:76:1d:43:78:27:c7: 48:65:7c:73 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEy1UfaaegwK+u3t6qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk YWMwNzk4Y2YtYmZjMy00NzJmLWFjODctNzdjMWQ5NTk2YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI3RYYA3aTY8ExiczCrzI8TWR78IFv6DWK8q 1VsF4gF3cKwVANU8YiYKiqv5kQXTobL2nrAA9g8cy0o2ecqf2KjF39Nd2/d1PiXQ Z3lgAh+ECYvOr7icIvyVbsGBYc08TM1nzveqvfQOLHPg0jbXeUnyxTorVkvakvpa h0hRpfdPAJuvsnylJ0SU5HmmfkFtoAZ4tNmJuO2w1w/UoPzTBnXgZiPIA6MrkquH 42PCPkEzs/SRQmGEXG3JRgM76XIonPjbfOFGyC3K+YE1m1uLM02XiJTLp3mctIXe iZ6Qs1dqKH4+oXMuOO9BKWSU36C/HBwiQs6/QtBP42xiNU8sIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJCIftoxjcNj5IE+dr5Y65/flXfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDA4Yzg0ZTItY2YwNS0z MjRmLTllMjktYTEwMjBiZjMxNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN2MA4E AgACMAgDBgAmBrMAgTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv57VBGUjDvGq/5VKxckyLEbu5x47st+tw NUuT+h+QSsyXa+Avn4dx4kVEt+HLDzZE4T71OmNfEsSZipu5yIEHJ4uVn/m/lJPC DXu55gSAUUJNrtTNejppBKB2WezEkkdbPyLaIsG7qXW18h0hO27KiO2QEzRKJ5m1 D9+CjOvqb/serVnSpC/jfpOyFAOClqtYfS0t5xXZn1LaFZ+QzRkFjVUN6wYCKtzn kjnFsQ+nI13yNKdAtZXTbh5wcEMkZOwYYHzCtIMLXuz5EYNduigA1jWs/o058zDk 4/Zt9oqIOnBdR858alFQC2Y3xRl2uW4j9TzKzNB2HUN4J8dIZXxz -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:46 2026 by rpki-client