$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa File: bf80667c-5655-3355-a79e-cb6b3750f3f8.roa (raw, json) Hash identifier: 6DnO8NQ4sA/F3yGVJe0TNJC2Zq6SLeAlfRFO1EMi8Z8= Subject key identifier: 2D:F7:F1:CE:6E:3E:B5:18:64:D5:AB:2B:76:DF:40:22:A8:33:F5:A1 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584D6EDA8F832C73BDEF294ED900 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 6363 IP address blocks: 134.141.0.0/22 maxlen: 24 134.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8f:83:2c:73:bd:ef:29:4e:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=00992417-4dda-40ea-84ce-42538f3b73a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:84:e5:fa:87:77:73:f8:dd:e6:4f:76:76: 7d:ab:9e:2b:ac:75:7e:16:c2:55:6a:c6:b1:ea:43: b2:55:2f:e0:c3:4f:82:2c:c1:a2:0c:01:99:a9:bd: 0f:53:c6:98:6b:d0:34:e3:5d:87:6e:f9:e8:2d:bb: ed:34:44:d7:eb:9f:37:74:82:7c:7d:62:62:69:7f: 0d:b8:20:ad:25:8a:df:41:ba:7d:79:11:96:69:14: bf:66:9a:51:38:1a:e7:81:a6:bc:72:8b:e1:72:46: b6:bb:7a:27:22:bc:bc:3c:d2:f1:95:57:0b:a5:8c: 61:a7:3e:d9:8d:2a:29:e1:a8:56:39:3b:18:1c:0d: d1:35:51:4d:76:33:77:58:77:5e:bd:83:50:a4:d0: c6:d8:21:31:da:20:f7:bd:2c:5b:28:bb:0a:1a:61: 05:63:d1:53:40:bd:a9:86:48:f9:c6:c7:a4:88:c7: 87:91:8f:11:a3:ba:cb:d3:0e:bb:01:b7:95:35:04: 8f:24:19:c8:d2:4b:b4:8d:aa:96:2c:31:e5:74:e7: 39:11:92:e4:23:50:d8:78:94:7b:69:af:11:c1:d2: f1:2c:ba:6c:1c:70:04:5c:4a:f7:77:8a:59:9f:6d: 0f:fe:ba:57:40:98:f1:dd:28:4c:fd:15:ed:ab:f1: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F7:F1:CE:6E:3E:B5:18:64:D5:AB:2B:76:DF:40:22:A8:33:F5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.0.0-134.141.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4c:ec:c8:dc:e2:b2:4c:a8:9f:3d:bd:64:45:31:d8:61:11: 13:f2:b0:46:af:57:c1:7e:82:e5:5f:a1:cb:72:05:ab:68:fb: 01:c0:31:2d:04:72:d4:1c:ca:94:3a:2c:d1:f3:ce:87:a6:38: 37:b0:04:ed:21:67:2f:02:6b:e4:13:f2:64:39:00:20:ef:cf: 76:df:0c:d5:44:30:be:50:0a:47:b7:e2:4c:f8:17:4d:98:26: 55:3e:49:c9:6d:5e:c8:c6:86:0f:7e:c8:8e:59:7c:f6:8d:0c: d9:4f:92:a3:d6:a1:6e:bf:a4:29:9b:92:66:e6:d5:7d:a0:be: a0:af:5b:e4:bb:8e:ce:08:ad:50:81:50:3f:e8:4b:b7:3d:1c: b6:1c:0b:75:ea:26:2c:af:bd:91:5a:d2:8c:05:28:fd:46:46: da:ae:b9:fb:e3:33:1a:32:52:31:85:c6:69:1d:ae:88:cc:b6: 5b:e9:4b:f4:5d:77:48:1c:b7:6e:46:1f:3e:b6:96:c1:22:e8: c3:60:f9:4e:fe:e3:87:47:05:26:5e:f6:f6:77:1e:15:55:03: 82:28:91:6b:2c:9b:fa:5c:a0:45:8b:f9:57:fd:5e:ef:2e:45: a4:18:68:c0:69:de:9d:d7:95:ba:43:57:a7:83:0f:78:d6:c9: d1:b0:96:91 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE1u2o+DLHO97ylO2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MDA5OTI0MTctNGRkYS00MGVhLTg0Y2UtNDI1MzhmM2I3M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXOE5fqHd3P43eZPdnZ9q54rrHV+FsJVasax 6kOyVS/gw0+CLMGiDAGZqb0PU8aYa9A0412HbvnoLbvtNETX6583dIJ8fWJiaX8N uCCtJYrfQbp9eRGWaRS/ZppROBrngaa8covhcka2u3onIry8PNLxlVcLpYxhpz7Z jSop4ahWOTsYHA3RNVFNdjN3WHdevYNQpNDG2CEx2iD3vSxbKLsKGmEFY9FTQL2p hkj5xsekiMeHkY8Ro7rL0w67AbeVNQSPJBnI0ku0jaqWLDHldOc5EZLkI1DYeJR7 aa8RwdLxLLpsHHAEXEr3d4pZn20P/rpXQJjx3ShM/RXtq/GjXQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFC338c5uPrUYZNWrK3bfQCKoM/WhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYmY4MDY2N2MtNTY1NS0z MzU1LWE3OWUtY2I2YjM3NTBmM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCGjQME AIaNBDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB5TOzI3OKyTKifPb1kRTHYYRET8rBGr1fBfoLlX6HLcgWr aPsBwDEtBHLUHMqUOizR886Hpjg3sATtIWcvAmvkE/JkOQAg78923wzVRDC+UApH t+JM+BdNmCZVPknJbV7IxoYPfsiOWXz2jQzZT5Kj1qFuv6Qpm5Jm5tV9oL6gr1vk u47OCK1QgVA/6Eu3PRy2HAt16iYsr72RWtKMBSj9Rkbarrn74zMaMlIxhcZpHa6I zLZb6Uv0XXdIHLduRh8+tpbBIujDYPlO/uOHRwUmXvb2dx4VVQOCKJFrLJv6XKBF i/lX/V7vLkWkGGjAad6d15W6Q1engw941snRsJaR -----END CERTIFICATE-----Generated at Fri Apr 17 15:32:57 2026 by rpki-client