$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa File: bf80667c-5655-3355-a79e-cb6b3750f3f8.roa (raw, json) Hash identifier: 1R7x6N/oNqCnw1wcAtNsngc30lQlz7EAppV2ZD1s0Tw= Subject key identifier: B8:53:FA:9A:A2:EF:33:B1:BF:7A:4C:F1:87:5B:3F:EF:D1:01:87:56 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584C8E3C7413A4229E65E2B88370 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 6363 IP address blocks: 134.141.0.0/22 maxlen: 24 134.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:74:13:a4:22:9e:65:e2:b8:83:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=d31ed273-0cb2-4ff9-864f-14f8b7275c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:8c:0c:6e:8b:cb:69:bd:f0:22:de:4f:c0: 1a:26:21:94:cf:be:e1:d1:6d:63:ce:0c:38:e1:dd: ca:49:95:6d:ef:49:9c:30:a3:2a:16:0a:ad:91:ed: 2b:a9:bb:1d:c1:d8:22:bd:0b:b8:d9:41:8f:97:00: 5d:8e:7c:ff:f9:a0:b8:da:da:7c:82:c3:84:5e:ed: d3:92:d8:ab:87:39:3f:dc:6b:14:a1:34:f4:86:5d: 2d:f6:b8:df:2a:2e:71:0c:4e:b4:7b:47:47:9c:af: 7e:53:e8:a3:52:7b:cd:33:be:af:84:f0:d9:a8:ff: be:48:10:af:01:e7:4b:bb:2b:67:e8:ed:6a:94:ee: eb:cd:d0:b8:66:d2:f5:d9:70:93:3c:c9:34:ce:39: b4:96:11:68:34:d0:43:20:69:73:41:a9:01:5f:c2: 60:cc:ae:0c:10:15:24:51:dd:aa:dc:60:ac:0b:5c: 27:38:ad:40:bd:94:d8:fc:78:0f:f0:6b:c0:55:51: b4:70:33:c7:45:b2:07:d0:41:8c:f2:6a:2a:b5:c0: b5:da:22:d3:64:e5:18:35:65:7a:6a:77:54:b2:c8: 23:3a:1c:ae:e3:50:5c:05:a4:22:84:2e:cf:5f:32: 83:ac:a0:a0:63:85:ea:6f:e3:b7:ce:7e:ce:a3:a9: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:53:FA:9A:A2:EF:33:B1:BF:7A:4C:F1:87:5B:3F:EF:D1:01:87:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/bf80667c-5655-3355-a79e-cb6b3750f3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.0.0-134.141.4.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:14:93:8d:1e:2f:17:63:37:84:e1:dc:26:06:be:01:d5:b5: d2:4f:58:d6:f4:a5:f0:3a:af:b0:63:de:df:5e:ce:93:9c:8c: 4c:c3:39:15:b2:a8:96:dd:3d:24:1a:f6:c9:46:dc:8d:85:02: f2:a3:6f:6b:2e:04:67:5d:c2:3c:b7:71:30:0e:00:35:84:69: 90:87:c8:11:24:5e:43:40:a6:9b:88:47:6f:40:ef:4b:91:7c: 44:50:52:7b:cc:ee:47:a3:15:80:09:bb:7b:fb:12:9a:5c:52: e7:0d:63:e9:c6:84:2a:25:d5:26:23:25:22:17:e0:58:23:13: 1b:72:ad:28:6f:d5:b8:a6:88:ce:f6:2d:07:2a:4e:4b:f9:c5: ea:0a:31:39:01:8b:07:02:9c:55:5a:37:50:18:db:f1:10:1d: 4e:4e:f4:46:73:a1:89:fe:47:33:d2:1a:94:49:e2:ac:c9:29: b7:5d:8f:71:14:2d:ae:6a:06:15:cf:34:09:be:d1:2c:33:88: df:68:08:85:ec:83:7f:fe:49:d2:12:c8:c8:fb:00:5e:a8:82: d2:d5:22:fe:d5:b8:cd:1f:05:a9:44:2e:94:5b:27:01:5a:85: 09:10:64:50:ab:e2:91:b1:52:c3:69:bd:cb:a2:d1:68:b1:2e: 41:9c:a8:e7 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEyOPHQTpCKeZeK4g3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk ZDMxZWQyNzMtMGNiMi00ZmY5LTg2NGYtMTRmOGI3Mjc1YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7KMDG6Ly2m98CLeT8AaJiGUz77h0W1jzgw4 4d3KSZVt70mcMKMqFgqtke0rqbsdwdgivQu42UGPlwBdjnz/+aC42tp8gsOEXu3T ktirhzk/3GsUoTT0hl0t9rjfKi5xDE60e0dHnK9+U+ijUnvNM76vhPDZqP++SBCv AedLuytn6O1qlO7rzdC4ZtL12XCTPMk0zjm0lhFoNNBDIGlzQakBX8JgzK4MEBUk Ud2q3GCsC1wnOK1AvZTY/HgP8GvAVVG0cDPHRbIH0EGM8moqtcC12iLTZOUYNWV6 andUssgjOhyu41BcBaQihC7PXzKDrKCgY4Xqb+O3zn7Oo6nCEwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFLhT+pqi7zOxv3pM8YdbP+/RAYdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYmY4MDY2N2MtNTY1NS0z MzU1LWE3OWUtY2I2YjM3NTBmM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCGjQME AIaNBDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCqFJONHi8XYzeE4dwmBr4B1bXST1jW9KXwOq+wY97fXs6T nIxMwzkVsqiW3T0kGvbJRtyNhQLyo29rLgRnXcI8t3EwDgA1hGmQh8gRJF5DQKab iEdvQO9LkXxEUFJ7zO5HoxWACbt7+xKaXFLnDWPpxoQqJdUmIyUiF+BYIxMbcq0o b9W4pojO9i0HKk5L+cXqCjE5AYsHApxVWjdQGNvxEB1OTvRGc6GJ/kcz0hqUSeKs ySm3XY9xFC2uagYVzzQJvtEsM4jfaAiF7IN//knSEsjI+wBeqILS1SL+1bjNHwWp RC6UWycBWoUJEGRQq+KRsVLDab3LotFosS5BnKjn -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:23 2026 by rpki-client