$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa File: d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa (raw, json) Hash identifier: Aec8iPvDoXdP5akvxycKiO6egN5FXZiLhuIRGXJHZDM= Subject key identifier: 83:27:61:DD:63:75:17:77:FE:12:69:05:EF:A1:CA:26:17:21:44:4A Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584D55BA446179432832CC9BC781 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 144.81.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:44:61:79:43:28:32:cc:9b:c7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=7e4e213e-acb1-4e9b-88f7-8e2ae5f8d81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:08:4c:fa:42:01:36:e5:f4:68:a0:29:27:94: 2c:4e:e6:5e:ac:a4:1d:f1:6b:2a:de:41:e4:17:23: 3c:09:7f:c9:7e:74:59:eb:c7:6c:c3:cf:6d:a1:2e: 38:9f:ab:a6:60:92:a5:9f:01:4d:0f:f0:fd:bd:08: ff:bc:0c:aa:52:e0:61:39:d9:2f:6f:9c:81:bb:ee: 63:d3:cf:98:3e:eb:81:aa:80:02:be:2d:54:1b:26: a0:c5:09:2e:4f:05:3e:71:94:cb:68:28:c3:c9:e9: 88:ca:1e:a5:6f:b8:e4:02:a5:eb:5b:da:7e:b3:20: ed:54:f0:c7:72:c6:4f:bf:3d:89:7a:e3:51:c9:6e: 81:71:02:d2:68:3f:59:cd:87:c9:2e:8b:5d:0f:e7: b7:ac:23:5b:06:34:80:29:d4:f6:45:93:de:df:a6: 84:97:c3:ac:6d:e9:14:28:18:31:88:a1:34:43:3d: 77:9b:d2:2c:0b:24:e2:8a:df:a9:1e:1a:83:1c:f5: 41:e9:0c:a6:15:11:45:ce:d3:a4:d4:41:98:96:15: 91:a9:58:21:64:db:97:fa:f0:7d:2d:63:ae:c9:78: 2b:f3:d9:11:0f:51:c2:8c:8a:c9:dd:77:cb:f3:fa: 00:e4:f5:da:4a:07:a0:42:c8:a3:1b:9c:2d:de:c3: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:61:DD:63:75:17:77:FE:12:69:05:EF:A1:CA:26:17:21:44:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:47:66:8e:3b:d6:16:b4:08:e7:af:a6:49:39:de:5c:ac:6e: 5b:ea:d9:2f:24:91:1d:cd:88:3b:c7:2a:1e:4a:88:ac:1a:c3: ec:f5:42:8b:a7:11:7e:46:72:00:f5:e8:03:12:f4:92:00:fd: 22:0d:a9:f3:e3:37:7c:61:92:42:9f:3d:b6:14:09:7c:7e:d9: 0d:00:98:f9:aa:38:89:8c:e2:ee:78:92:a0:eb:0d:b8:3f:0a: 93:a1:3e:8c:37:d5:3a:2b:c5:6b:79:c1:60:9f:f5:ab:1f:c6: 05:91:78:a7:4a:46:df:cc:e7:f3:de:30:7f:25:7b:33:95:68: e4:e4:98:b0:f7:0c:72:8e:85:1f:ed:d8:06:93:ea:aa:fb:1a: d9:cc:3c:df:15:8d:33:eb:ce:f3:6a:7f:02:79:b0:a2:44:87: 4e:6a:e3:eb:10:69:41:f0:90:22:65:22:ab:0e:2a:89:9d:a5: 19:4d:40:dd:62:dd:e8:d7:93:3b:0d:fd:b6:f6:d2:bc:f1:fb: 69:41:25:06:2f:26:5d:5e:80:0a:97:b9:b3:e0:ad:d7:fb:6a: b7:fa:a6:4e:73:41:7f:38:3b:58:ca:6a:85:e3:1c:51:f6:70: 53:3e:4d:e6:3d:6e:0d:1a:c5:81:fd:73:4f:61:0f:d9:59:4b: b4:d9:00:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukRheUMoMsybx4EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk N2U0ZTIxM2UtYWNiMS00ZTliLTg4ZjctOGUyYWU1ZjhkODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhghM+kIBNuX0aKApJ5QsTuZerKQd8Wsq3kHk FyM8CX/JfnRZ68dsw89toS44n6umYJKlnwFND/D9vQj/vAyqUuBhOdkvb5yBu+5j 08+YPuuBqoACvi1UGyagxQkuTwU+cZTLaCjDyemIyh6lb7jkAqXrW9p+syDtVPDH csZPvz2JeuNRyW6BcQLSaD9ZzYfJLotdD+e3rCNbBjSAKdT2RZPe36aEl8OsbekU KBgxiKE0Qz13m9IsCyTiit+pHhqDHPVB6QymFRFFztOk1EGYlhWRqVghZNuX+vB9 LWOuyXgr89kRD1HCjIrJ3XfL8/oA5PXaSgegQsijG5wt3sPZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMnYd1jdRd3/hJpBe+hyiYXIURKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvZDNmYmU2M2QtNTFiOC0z YTZiLWJmNTQtMWU1ZmE5NjQxZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINHZo471ha0COevpkk53lysblvq2S8kkR3NiDvHKh5KiKwaw+z1Qoun EX5GcgD16AMS9JIA/SINqfPjN3xhkkKfPbYUCXx+2Q0AmPmqOImM4u54kqDrDbg/ CpOhPow31TorxWt5wWCf9asfxgWReKdKRt/M5/PeMH8lezOVaOTkmLD3DHKOhR/t 2AaT6qr7GtnMPN8VjTPrzvNqfwJ5sKJEh05q4+sQaUHwkCJlIqsOKomdpRlNQN1i 3ejXkzsN/bb20rzx+2lBJQYvJl1egAqXubPgrdf7arf6pk5zQX84O1jKaoXjHFH2 cFM+TeY9bg0axYH9c09hD9lZS7TZAOA= -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:45 2026 by rpki-client