$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa File: a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa (raw, json) Hash identifier: htdEesXf6DPmPHS4UknxiYacDu4doR2VNCfPlck+FK4= Subject key identifier: A6:D8:5D:A1:0A:FD:86:0D:BA:7F:72:7C:34:38:67:10:B4:0C:FE:C0 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F4328584D59EA545D5BAB0A3366DB54C0 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 216.120.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:54:5d:5b:ab:0a:33:66:db:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=ba157ca0-0914-459c-862c-49d6b39c4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:75:6a:d3:42:c5:9a:3c:ec:16:da:65:e8: 3d:e1:85:e8:37:79:71:54:18:1e:86:32:a5:4a:20: 4d:b5:23:7a:6b:ee:32:2b:3e:a6:5a:35:90:ac:58: 87:9f:73:7c:1f:22:c3:db:fe:eb:fa:6d:43:7f:5d: 6b:9f:07:e6:00:50:e2:07:8e:c8:02:8c:3d:4e:94: c9:e9:94:1b:58:28:bb:a1:b3:3f:9e:1a:4c:e6:b3: 36:38:4e:0a:df:da:2d:d7:db:50:12:61:84:82:4b: db:15:f2:18:39:83:af:f4:ee:00:6d:18:dc:b2:3c: 1a:ab:84:2b:13:ab:b4:dc:5f:d4:76:1d:d1:a8:1f: 01:5b:58:14:53:a7:7c:49:c4:3a:8d:9e:43:41:c8: 92:7c:6d:3e:6b:47:01:b6:ee:f8:2d:01:d2:6b:75: 02:04:33:50:3a:11:f0:eb:01:0e:51:45:37:5a:3c: e7:14:2f:ce:9f:f5:52:fa:68:a8:01:26:ca:df:d6: e5:49:c7:f1:7c:1a:12:73:af:df:0a:8d:19:49:35: b8:a2:68:28:7b:77:80:4e:10:5d:42:72:f1:57:5c: 4d:8f:70:d9:b2:fd:b8:f9:c4:3f:46:18:56:b7:ae: 5a:2d:12:c4:97:41:ba:95:bf:33:16:42:21:4b:bc: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:5D:A1:0A:FD:86:0D:BA:7F:72:7C:34:38:67:10:B4:0C:FE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/a5d80b6a-1a97-3b26-9037-608e0f380c1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 216.120.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ff:cc:4c:10:97:a1:aa:97:6f:cb:72:a4:b7:b4:31:1b:15: 5d:6b:ad:f2:8b:b6:cd:94:6e:63:02:cd:19:f0:98:a2:e9:37: ff:49:15:26:02:31:23:3f:07:be:15:22:1e:73:67:09:8d:f7: ee:94:69:a9:9b:8c:6d:d3:08:9e:83:f9:af:0e:cb:e8:5a:5d: 9b:a3:ec:d4:d8:19:98:b8:21:dd:f9:e3:48:30:c2:06:b1:75: 15:26:06:bb:57:5c:b1:5b:6a:48:d2:a8:ca:4b:21:e0:ca:c6: ed:16:24:c7:91:99:63:68:04:89:f7:52:39:b1:65:08:0c:74: 53:13:03:b4:70:2b:8b:43:80:d7:85:a6:53:6d:be:31:af:e4: db:8d:a6:ce:43:6b:92:22:6b:e5:77:9f:b9:b4:48:b7:b6:6b: 10:6d:64:e8:05:df:b8:d2:70:a2:e8:5a:76:92:8b:24:32:46: f4:a9:af:58:e5:d9:94:a7:d6:13:c1:90:2f:54:9b:fa:6f:0b: f4:93:69:2a:14:d3:8d:00:7c:ef:62:c1:ce:4d:14:f5:57:15: 77:3f:65:eb:0a:ca:05:7a:14:f2:1b:48:4b:ae:fb:41:28:0e: da:75:af:7f:4c:fc:21:51:47:50:55:4c:4c:d4:b7:ff:68:0a: f1:79:4d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lRdW6sKM2bbVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YmExNTdjYTAtMDkxNC00NTljLTg2MmMtNDlkNmIzOWM0MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLh1atNCxZo87BbaZeg94YXoN3lxVBgehjKl SiBNtSN6a+4yKz6mWjWQrFiHn3N8HyLD2/7r+m1Df11rnwfmAFDiB47IAow9TpTJ 6ZQbWCi7obM/nhpM5rM2OE4K39ot19tQEmGEgkvbFfIYOYOv9O4AbRjcsjwaq4Qr E6u03F/Udh3RqB8BW1gUU6d8ScQ6jZ5DQciSfG0+a0cBtu74LQHSa3UCBDNQOhHw 6wEOUUU3WjznFC/On/VS+mioASbK39blScfxfBoSc6/fCo0ZSTW4omgoe3eAThBd QnLxV1xNj3DZsv24+cQ/RhhWt65aLRLEl0G6lb8zFkIhS7xefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbYXaEK/YYNun9yfDQ4ZxC0DP7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvYTVkODBiNmEtMWE5Ny0z YjI2LTkwMzctNjA4ZTBmMzgwYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HiOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID/zEwQl6Gql2/LcqS3tDEbFV1rrfKLts2UbmMCzRnwmKLpN/9JFSYC MSM/B74VIh5zZwmN9+6UaambjG3TCJ6D+a8Oy+haXZuj7NTYGZi4Id3540gwwgax dRUmBrtXXLFbakjSqMpLIeDKxu0WJMeRmWNoBIn3UjmxZQgMdFMTA7RwK4tDgNeF plNtvjGv5NuNps5Da5Iia+V3n7m0SLe2axBtZOgF37jScKLoWnaSiyQyRvSpr1jl 2ZSn1hPBkC9Um/pvC/STaSoU040AfO9iwc5NFPVXFXc/ZesKygV6FPIbSEuu+0Eo Dtp1r39M/CFRR1BVTEzUt/9oCvF5TcE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:30 2026 by rpki-client