$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: K6uGI/ZnfbJGK9oRKkqEnRg9mrror+pDweKTjeVDFJc= Subject key identifier: C3:15:57:FD:EF:65:A5:B2:3B:85:28:57:4A:3D:9D:E3:5F:B4:E0:5E Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CD4075C60880E622350BC5680 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:5c:60:88:0e:62:23:50:bc:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=d980e1de-8171-42e3-a930-80ba85d20344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:f8:b9:77:d9:08:03:61:27:42:97:93:db: a6:5e:c1:62:81:54:02:ce:aa:e7:d1:92:d1:b7:fc: d2:27:c1:ee:df:34:1c:58:68:40:45:d1:f7:4a:4e: 12:7c:c1:6d:5c:6f:ee:58:0b:79:9f:43:60:1c:0d: 0f:e8:d9:1a:53:bb:ac:71:a3:b3:cc:47:f5:e2:c4: 75:e3:31:ba:bc:b5:b5:d8:d5:a6:93:9a:99:e8:55: ab:7d:31:a5:72:f4:9f:99:3f:05:9c:82:d2:8c:84: f3:90:0e:64:29:e7:60:19:75:6c:6d:7d:a6:47:51: 91:18:6d:4b:4c:7f:62:91:2a:51:28:94:36:16:3d: df:af:10:ad:e0:d6:35:14:44:8d:23:fa:20:48:53: 2e:bf:5f:bb:2e:8b:f5:ea:83:a9:6f:6f:73:32:bb: 24:a4:f4:a6:e6:b0:2e:e0:9b:19:7f:88:ae:43:ca: 7a:46:c4:86:53:68:c6:0a:b6:6f:37:50:f4:da:a5: 50:62:f2:c4:a0:05:a2:39:9b:1b:7f:b9:c3:5f:24: 23:8d:0c:07:21:7b:6d:fa:07:85:80:3d:7a:6d:d1: 7f:a0:a0:82:3f:3d:26:93:f1:78:66:bd:43:40:2c: d6:33:10:1d:66:e8:62:69:07:01:fc:63:a7:d6:68: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:15:57:FD:EF:65:A5:B2:3B:85:28:57:4A:3D:9D:E3:5F:B4:E0:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:43:66:14:f6:48:85:ea:49:5e:46:18:28:5d:e8:3f:e8:49: 26:d7:73:0c:bf:c8:7c:0b:64:98:a9:18:87:5a:1a:7f:a4:96: cb:17:93:22:ae:fe:77:50:bc:45:5d:db:70:b5:7c:45:14:b1: 03:9d:0f:a9:9c:81:0b:71:55:99:76:42:fe:4c:76:b5:21:d2: c3:07:3f:5c:29:de:f8:5d:02:a1:c6:57:66:d7:29:ef:00:bd: 15:16:24:72:00:c7:52:4a:85:ee:de:1a:93:b6:a8:0c:8d:0a: ad:56:3d:4d:b6:6c:d6:0e:99:67:c6:c0:b3:49:a6:7b:7d:30: 5d:b0:14:64:3f:59:36:7f:9d:d9:1b:22:a3:33:90:61:5f:d1: 54:1d:a2:13:2d:18:29:ec:d3:22:1e:b3:d4:cf:41:d5:b8:c8: c0:0b:b9:a0:68:53:24:b2:f9:6d:32:ad:be:3e:ee:8c:a6:bf: c2:2f:4d:e1:49:0b:e6:62:f5:87:14:4a:55:e4:59:ee:7e:2c: 3c:70:1f:72:a0:ad:5c:ff:37:cf:09:0e:80:9f:cf:84:26:6b: c8:0f:eb:0c:31:7d:1a:36:89:02:7c:24:e5:1c:a3:59:89:8c: 0d:23:2f:8a:07:ba:3d:f5:19:7f:3a:6b:b0:7e:ce:65:76:d4: dc:d2:53:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB1xgiA5iI1C8VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDk4MGUxZGUtODE3MS00MmUzLWE5MzAtODBiYTg1ZDIwMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKf4uXfZCANhJ0KXk9umXsFigVQCzqrn0ZLR t/zSJ8Hu3zQcWGhARdH3Sk4SfMFtXG/uWAt5n0NgHA0P6NkaU7uscaOzzEf14sR1 4zG6vLW12NWmk5qZ6FWrfTGlcvSfmT8FnILSjITzkA5kKedgGXVsbX2mR1GRGG1L TH9ikSpRKJQ2Fj3frxCt4NY1FESNI/ogSFMuv1+7Lov16oOpb29zMrskpPSm5rAu 4JsZf4iuQ8p6RsSGU2jGCrZvN1D02qVQYvLEoAWiOZsbf7nDXyQjjQwHIXtt+geF gD16bdF/oKCCPz0mk/F4Zr1DQCzWMxAdZuhiaQcB/GOn1mil/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMVV/3vZaWyO4UoV0o9neNftOBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVDZhT2SIXqSV5GGChd6D/oSSbXcwy/yHwLZJipGIdaGn+klssXkyKu /ndQvEVd23C1fEUUsQOdD6mcgQtxVZl2Qv5MdrUh0sMHP1wp3vhdAqHGV2bXKe8A vRUWJHIAx1JKhe7eGpO2qAyNCq1WPU22bNYOmWfGwLNJpnt9MF2wFGQ/WTZ/ndkb IqMzkGFf0VQdohMtGCns0yIes9TPQdW4yMALuaBoUySy+W0yrb4+7oymv8IvTeFJ C+Zi9YcUSlXkWe5+LDxwH3KgrVz/N88JDoCfz4Qma8gP6wwxfRo2iQJ8JOUco1mJ jA0jL4oHuj31GX86a7B+zmV21NzSU9c= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:39 2026 by rpki-client