$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa File: 91573368-511f-31f8-84af-bd9afd60da55.roa (raw, json) Hash identifier: wIUhHQFslClupdmQ/XbONqqg+uLq0csHtmRgZR/m4jA= Subject key identifier: 4B:B6:53:1F:F9:CA:24:3B:CB:C8:70:9B:37:FC:16:72:0F:10:16:C9 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584D80FFF0B830B5C31408FE5080 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 400238 IP address blocks: 216.87.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f0:b8:30:b5:c3:14:08:fe:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=155d718e-ca13-43a8-b92f-6c6edcb6e459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:cf:e2:04:f6:fc:b5:c3:ea:9f:d0:c7:ac: cf:8a:0a:18:31:90:59:77:e8:2a:47:7c:f2:ee:b6: 42:a0:f9:a5:02:1a:64:5c:7e:f2:50:e4:1b:e1:90: 24:b6:0b:31:8a:94:fe:10:32:0c:2f:0a:cf:3b:77: 74:25:c0:c5:0d:8e:c3:6e:de:bf:de:6c:a5:2e:26: b2:c2:1a:7b:49:1c:8c:b2:77:22:c3:e6:ec:16:0d: 58:ff:d6:b4:dd:5f:3b:c6:4c:26:e8:45:54:71:7f: ac:72:70:f2:c8:76:a1:b4:fa:89:77:15:78:ef:ce: 1b:0b:7a:ce:77:87:1d:dd:ea:65:e1:da:b0:8a:56: bf:7b:23:99:70:e9:43:b9:db:17:ba:26:f7:71:07: 0f:db:30:0d:cb:62:12:67:fe:e1:53:0f:e2:b1:e8: 36:3a:ce:fc:15:0c:6f:0d:0d:4f:d5:13:f7:e3:d1: 2d:a9:92:71:fd:83:71:1d:0a:fb:16:b4:34:39:f9: e3:82:0a:a7:c4:ff:9d:08:c0:9b:17:3f:a3:8f:59: 40:cb:be:ea:3a:b2:7f:b2:c4:93:93:77:b3:89:48: 3f:eb:08:0f:53:6a:21:1a:dd:4f:8f:ab:f0:32:3d: f3:57:57:76:0a:5b:c2:8e:c9:4f:9b:a1:c9:45:ad: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B6:53:1F:F9:CA:24:3B:CB:C8:70:9B:37:FC:16:72:0F:10:16:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/91573368-511f-31f8-84af-bd9afd60da55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 216.87.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8d:55:74:51:d6:ce:28:b6:59:4f:8a:e4:d2:32:19:87:25: db:62:0e:32:97:52:24:e1:00:de:ee:93:6b:29:ae:68:44:5a: f1:01:9e:cc:35:1b:7c:54:77:3c:d1:10:72:29:9d:d5:7d:c3: 0f:cc:cd:83:3f:c0:06:31:ca:de:6c:44:a5:44:f9:cf:53:99: 43:49:c8:94:46:b8:24:a1:5d:e8:dd:5d:e1:45:10:70:b1:f0: b0:3f:57:79:da:19:7c:85:49:7d:36:ae:86:54:fc:95:15:66: d0:8f:33:f9:3a:5d:52:71:56:81:de:f3:30:d3:9b:c1:ab:90: e4:e7:08:70:3e:da:61:b0:5e:ad:0e:65:42:56:9e:35:14:53: 7f:13:78:92:66:3e:78:8b:74:c6:e6:31:6d:f3:e2:7e:78:4e: ae:7c:28:b9:b4:e0:11:76:11:f1:da:7b:dd:ef:a9:6e:7b:78: 03:97:37:fe:ae:e6:3f:0f:be:21:6d:07:50:4a:d5:1f:21:03: 32:0c:04:03:40:c5:7f:0e:cd:88:be:0d:19:21:ed:d1:2b:d6: 8b:f0:8f:78:fe:fe:a7:c1:c1:84:68:19:fe:e8:52:d8:9e:0b: d7:ee:ee:23:14:9e:a8:82:03:fb:3e:ca:b8:75:11:a8:40:56: 39:03:69:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//C4MLXDFAj+UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MTU1ZDcxOGUtY2ExMy00M2E4LWI5MmYtNmM2ZWRjYjZlNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs3P4gT2/LXD6p/Qx6zPigoYMZBZd+gqR3zy 7rZCoPmlAhpkXH7yUOQb4ZAktgsxipT+EDIMLwrPO3d0JcDFDY7Dbt6/3mylLiay whp7SRyMsnciw+bsFg1Y/9a03V87xkwm6EVUcX+scnDyyHahtPqJdxV4784bC3rO d4cd3epl4dqwila/eyOZcOlDudsXuib3cQcP2zANy2ISZ/7hUw/iseg2Os78FQxv DQ1P1RP349EtqZJx/YNxHQr7FrQ0OfnjggqnxP+dCMCbFz+jj1lAy77qOrJ/ssST k3eziUg/6wgPU2ohGt1Pj6vwMj3zV1d2ClvCjslPm6HJRa17VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu2Ux/5yiQ7y8hwmzf8FnIPEBbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvOTE1NzMzNjgtNTExZi0z MWY4LTg0YWYtYmQ5YWZkNjBkYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+NVXRR1s4otllPiuTSMhmHJdtiDjKXUiThAN7uk2sprmhEWvEBnsw1 G3xUdzzREHIpndV9ww/MzYM/wAYxyt5sRKVE+c9TmUNJyJRGuCShXejdXeFFEHCx 8LA/V3naGXyFSX02roZU/JUVZtCPM/k6XVJxVoHe8zDTm8GrkOTnCHA+2mGwXq0O ZUJWnjUUU38TeJJmPniLdMbmMW3z4n54Tq58KLm04BF2EfHae93vqW57eAOXN/6u 5j8PviFtB1BK1R8hAzIMBANAxX8OzYi+DRkh7dEr1ovwj3j+/qfBwYRoGf7oUtie C9fu7iMUnqiCA/s+yrh1EahAVjkDaZM= -----END CERTIFICATE-----Generated at Sun Apr 19 12:18:10 2026 by rpki-client