$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/458fe094-cff8-3763-ae90-2d30b20099c9.roa File: 458fe094-cff8-3763-ae90-2d30b20099c9.roa (raw, json) Hash identifier: z3Mdpo+kaS3PAFQQsUQiaxFfnEwd5r5Wmv061xmSJUw= Subject key identifier: 20:8A:A9:26:6C:12:D1:A6:AB:02:DE:2F:24:57:31:6C:73:62:ED:7B Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584D4ECE0C7DEE559AAE2131ECD8 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/458fe094-cff8-3763-ae90-2d30b20099c9.roa Signing time: Fri 27 Mar 2026 13:29:47 +0000 ROA not before: Fri 27 Mar 2026 13:29:47 +0000 ROA not after: Thu 25 Jun 2026 13:29:47 +0000 asID: 6363 IP address blocks: 134.141.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:ce:0c:7d:ee:55:9a:ae:21:31:ec:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Mar 27 13:29:47 2026 GMT Not After : Jun 25 13:29:47 2026 GMT Subject: CN=9ac0914b-7552-4299-9c8e-057ad29fd384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:bf:8e:53:ee:e8:8e:ca:28:7f:5c:a7:f1: dd:70:49:b7:58:37:27:c4:bd:c6:f0:27:75:98:98: da:5a:51:e5:54:68:00:4c:35:89:81:70:b7:42:85: e5:86:6c:c5:f2:2c:52:26:c9:4e:08:5f:a8:45:37: a3:54:a7:92:41:22:b6:25:80:cb:c4:cc:6a:22:de: cd:ea:da:05:00:0f:1a:47:e2:8d:42:7b:69:5c:98: ae:2c:cc:c6:6b:ed:36:e4:fb:9e:8d:33:2d:9b:c9: 74:cd:f5:82:ca:76:8f:82:e4:9d:d3:09:d4:cb:45: 03:1c:01:f5:80:64:00:95:aa:da:ad:78:2a:e2:47: 00:c8:8f:8e:f1:83:2d:d0:29:e5:3f:cf:1d:e3:5c: 88:bc:23:89:01:1a:b3:d9:c7:3e:ef:65:2f:82:a4: 55:b4:5c:9a:cc:d2:87:dd:54:3d:31:2f:da:13:1e: 55:2d:4e:49:12:b2:01:53:f7:d8:d9:de:a2:bd:76: 93:40:27:64:63:4b:5d:40:f9:ca:78:f0:17:82:71: 5d:3d:6e:9b:22:e4:30:6d:39:c0:0b:b0:73:40:8b: 81:b6:c5:53:53:63:d4:da:89:9c:e1:26:6b:c9:81: 62:c4:09:88:d9:d2:e4:b2:f3:7b:b7:6c:77:16:d8: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:A9:26:6C:12:D1:A6:AB:02:DE:2F:24:57:31:6C:73:62:ED:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/458fe094-cff8-3763-ae90-2d30b20099c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a1:43:9c:06:f0:6d:46:d6:52:46:d4:99:61:09:28:5b:85: c4:e5:40:2c:38:e8:2d:2e:05:2f:e4:40:7d:e5:63:86:65:d6: 7b:d8:e3:36:f4:5f:d3:a4:04:e5:69:59:2e:24:87:e0:93:1d: ec:89:3d:eb:94:a7:70:ff:1c:bf:f0:ce:0f:19:76:d3:fc:73: 6b:26:fc:f3:78:04:d5:a8:e7:0e:83:bd:da:c6:f5:83:ef:09: ea:69:a1:43:37:ae:57:53:05:32:1c:41:0e:2a:a1:fa:f1:72: 95:03:d9:80:46:b0:10:36:d5:45:ca:71:fd:49:6d:7a:83:dc: 1c:97:14:e3:f9:a3:01:40:49:85:14:6e:24:09:db:dc:f4:82: fc:96:62:ed:37:19:98:86:46:ae:70:01:48:0c:7e:9e:5a:f7: c3:e5:e4:f1:91:b4:b5:95:bb:d7:a1:b7:5e:53:e8:0c:e8:2c: 97:1b:35:42:e1:5a:28:1c:cf:2b:83:09:bd:e8:1a:e9:ea:22: 72:d1:8e:88:9e:f7:42:18:a5:c8:bb:4b:4f:53:59:f7:22:f2: c6:a8:63:32:a1:f8:69:10:50:5f:12:37:c3:ff:a0:75:8b:53: a1:5c:bd:8a:c9:07:af:dd:6b:fd:a9:2c:e5:a4:7b:ee:35:12: cb:64:f7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ozgx97lWariEx7NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDMyNzEzMjk0N1oXDTI2MDYyNTEzMjk0N1owLzEtMCsGA1UEAxMk OWFjMDkxNGItNzU1Mi00Mjk5LTljOGUtMDU3YWQyOWZkMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0S/jlPu6I7KKH9cp/HdcEm3WDcnxL3G8Cd1 mJjaWlHlVGgATDWJgXC3QoXlhmzF8ixSJslOCF+oRTejVKeSQSK2JYDLxMxqIt7N 6toFAA8aR+KNQntpXJiuLMzGa+025PuejTMtm8l0zfWCynaPguSd0wnUy0UDHAH1 gGQAlararXgq4kcAyI+O8YMt0CnlP88d41yIvCOJARqz2cc+72UvgqRVtFyazNKH 3VQ9MS/aEx5VLU5JErIBU/fY2d6ivXaTQCdkY0tdQPnKePAXgnFdPW6bIuQwbTnA C7BzQIuBtsVTU2PU2omc4SZryYFixAmI2dLksvN7t2x3FtjMIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCKqSZsEtGmqwLeLyRXMWxzYu17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvNDU4ZmUwOTQtY2ZmOC0z NzYzLWFlOTAtMmQzMGIyMDA5OWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBho3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOhQ5wG8G1G1lJG1JlhCShbhcTlQCw46C0uBS/kQH3lY4Zl1nvY4zb0 X9OkBOVpWS4kh+CTHeyJPeuUp3D/HL/wzg8ZdtP8c2sm/PN4BNWo5w6DvdrG9YPv CeppoUM3rldTBTIcQQ4qofrxcpUD2YBGsBA21UXKcf1JbXqD3ByXFOP5owFASYUU biQJ29z0gvyWYu03GZiGRq5wAUgMfp5a98Pl5PGRtLWVu9eht15T6AzoLJcbNULh WigczyuDCb3oGunqInLRjoie90IYpci7S09TWfci8saoYzKh+GkQUF8SN8P/oHWL U6FcvYrJB6/da/2pLOWke+41Estk9zc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:01:44 2026 by rpki-client