$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa File: ac787570-7438-30a0-8827-f1ac45858139.roa (raw, json) Hash identifier: dX2vef0t4KgCaEuHVqvObG3+dWQWy2kqpGg/BwNaGKY= Subject key identifier: 8B:76:C3:DD:7A:1D:7E:6D:A7:E8:5F:BA:44:0B:CB:E7:0D:72:52:7F Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584D52435232CAADFAF9E6D3C228 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 14618 IP address blocks: 144.81.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:52:32:ca:ad:fa:f9:e6:d3:c2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=791c52cb-a044-45d0-9773-3c218c471cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:96:6b:32:ad:89:75:a8:e9:c3:84:98:30: 3a:9e:cd:f6:bb:2f:7c:cc:40:5b:18:39:04:c8:fe: 5b:05:70:9d:ce:e6:a0:1a:06:65:25:f4:d2:36:28: 91:77:42:da:41:ad:d5:8f:d4:bd:46:b0:6a:ee:f3: 2b:7b:75:11:cd:84:6a:a6:48:32:c4:e5:06:cd:b9: d2:ae:05:35:f8:eb:dd:c6:45:8a:d7:e7:83:57:6a: d9:b6:c9:e3:1c:2c:6e:d1:d1:ff:ce:c4:90:91:c4: bd:bc:08:e7:90:76:c4:14:23:d8:57:b5:64:70:d1: 40:c5:2b:7a:c2:28:6f:ac:23:63:b4:a4:e2:97:a5: fc:63:dc:bb:78:91:b5:f1:62:4c:47:ae:84:27:34: 38:09:06:4f:e7:b4:ce:19:0e:7f:95:1f:0d:92:9e: 57:35:20:8c:71:1b:a2:d2:dc:99:4f:a5:87:d8:41: f4:fc:c6:58:fd:70:93:f5:14:68:7c:94:fe:bb:f4: 0e:72:2f:92:17:ed:2e:e1:61:8b:cd:28:fb:6b:55: 9d:2b:d9:30:e6:ad:6a:c8:15:bd:d8:27:ef:ed:84: d9:3d:d3:6b:fa:65:32:6d:db:7c:f9:ac:de:5e:da: d9:19:1c:98:dd:1d:2a:d9:4e:94:f0:c0:2d:94:ff: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:C3:DD:7A:1D:7E:6D:A7:E8:5F:BA:44:0B:CB:E7:0D:72:52:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:4a:c0:1c:70:1f:cb:3b:3e:e7:8c:1c:38:bb:ae:b5:86: 7b:bb:42:76:c6:6b:f9:6c:32:c4:12:9e:6c:39:25:cf:91:5b: 22:d6:6a:36:17:2b:ac:67:84:53:86:cf:f7:ba:1d:05:8d:ed: fb:8f:85:16:c8:11:b7:5b:48:fb:b8:9b:13:42:9e:47:01:21: 79:52:8f:fc:51:37:c0:3c:0b:e1:44:53:7b:36:58:01:94:d5: 08:e3:da:05:5f:70:3c:37:7b:23:5b:34:df:49:61:00:7a:e9: c7:27:60:41:d9:b6:20:97:9c:d3:36:28:20:c6:29:71:6b:2c: 4f:6c:23:3b:1d:07:13:a1:b9:d3:de:fd:99:72:e5:42:29:3f: 7b:6b:06:97:aa:4c:d4:9c:a1:f7:af:65:70:d8:68:dd:05:38: 6b:6e:f5:40:19:c6:99:85:9d:3a:db:23:65:0f:25:8c:12:1a: 7b:50:6c:26:ce:0f:c5:aa:68:c4:49:79:72:2c:8c:7d:cd:ee: 7e:d2:6f:48:65:d5:29:e3:57:ea:5d:fa:fd:15:bd:7b:4a:c9: f1:8e:b4:b1:1b:08:20:0d:79:22:ff:35:95:a0:74:39:92:73: 7a:fe:42:33:56:88:4f:ab:71:fc:bb:64:49:45:e4:23:c8:da: 39:23:17:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1Iyyq36+ebTwigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NzkxYzUyY2ItYTA0NC00NWQwLTk3NzMtM2MyMThjNDcxY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXKWazKtiXWo6cOEmDA6ns32uy98zEBbGDkE yP5bBXCdzuagGgZlJfTSNiiRd0LaQa3Vj9S9RrBq7vMre3URzYRqpkgyxOUGzbnS rgU1+OvdxkWK1+eDV2rZtsnjHCxu0dH/zsSQkcS9vAjnkHbEFCPYV7VkcNFAxSt6 wihvrCNjtKTil6X8Y9y7eJG18WJMR66EJzQ4CQZP57TOGQ5/lR8Nkp5XNSCMcRui 0tyZT6WH2EH0/MZY/XCT9RRofJT+u/QOci+SF+0u4WGLzSj7a1WdK9kw5q1qyBW9 2Cfv7YTZPdNr+mUybdt8+azeXtrZGRyY3R0q2U6U8MAtlP8OhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIt2w916HX5tp+hfukQLy+cNclJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvYWM3ODc1NzAtNzQzOC0z MGEwLTg4MjctZjFhYzQ1ODU4MTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkFGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNPSsAccB/LOz7njBw4u661hnu7QnbGa/lsMsQSnmw5Jc+RWyLWajYX K6xnhFOGz/e6HQWN7fuPhRbIEbdbSPu4mxNCnkcBIXlSj/xRN8A8C+FEU3s2WAGU 1Qjj2gVfcDw3eyNbNN9JYQB66ccnYEHZtiCXnNM2KCDGKXFrLE9sIzsdBxOhudPe /Zly5UIpP3trBpeqTNScofevZXDYaN0FOGtu9UAZxpmFnTrbI2UPJYwSGntQbCbO D8WqaMRJeXIsjH3N7n7Sb0hl1SnjV+pd+v0VvXtKyfGOtLEbCCANeSL/NZWgdDmS c3r+QjNWiE+rcfy7ZElF5CPI2jkjF+s= -----END CERTIFICATE-----Generated at Tue Apr 7 12:08:43 2026 by rpki-client