$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: HqkmYiZvdKO7E/sBOR6Sl9HlPkshb4kaHwc06tOO49Y= Subject key identifier: 78:FA:78:B3:31:ED:A8:BD:A9:3B:C3:87:34:9E:CC:D8:52:93:D7:18 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E7634E2300AEDB000280FC780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e2:30:0a:ed:b0:00:28:0f:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=a07155d3-6f6d-4afd-950f-3b71e3a336a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:fb:52:47:71:f2:2d:75:33:da:ad:57:ea: bf:89:b3:88:17:11:dc:66:4a:e4:9b:6c:a0:d6:e5: cf:58:ae:c6:eb:d0:17:c4:3a:64:d2:0c:18:e0:43: 96:b8:4a:fc:2d:76:f7:dc:f1:5f:4c:bb:9a:fd:3d: 31:4f:4e:cf:33:85:11:2e:17:94:a8:95:40:85:d2: 68:d0:58:12:f5:3e:a0:5f:b7:4a:28:75:e3:bc:4a: b1:a3:8d:51:26:53:b0:87:c9:ba:c6:8c:2c:8e:8d: 4a:5e:7d:b3:46:0a:92:fb:04:36:4f:b1:c8:e8:d2: 93:f0:c8:5a:3f:8d:80:47:e7:9d:39:f2:8b:97:5f: bf:28:81:de:08:9c:7d:f1:ea:dd:cb:f9:55:e7:3a: 2b:44:3d:f5:35:db:82:0f:43:fc:80:49:a5:8b:31: 80:21:76:55:ef:81:e4:83:b5:57:fa:8a:32:f2:b7: 8b:c6:02:a0:53:77:47:85:ff:cb:1b:37:a3:03:b3: b8:36:b8:72:49:61:9d:0e:7b:18:fe:c8:80:69:84: ca:46:ce:74:fc:02:9f:7f:8f:27:ff:ac:f7:36:b7: 4f:12:4a:71:ec:4c:26:86:15:e2:7e:11:a0:3a:0f: 52:44:f5:e7:58:cf:73:69:f8:5f:26:5d:dd:61:66: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FA:78:B3:31:ED:A8:BD:A9:3B:C3:87:34:9E:CC:D8:52:93:D7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:48:bf:c4:27:1f:89:7f:1b:55:d8:d1:89:81:5e:45:5e:a5: f6:2c:e3:23:91:cb:00:d0:fa:5f:1f:f1:5b:a4:ba:c1:3e:88: 17:9f:61:be:0a:f6:66:f9:e7:21:1a:c4:b8:cd:1c:aa:f0:74: 66:ac:0c:50:4e:b5:42:67:70:c2:ff:93:6f:23:68:61:b4:b6: b9:ad:cb:7d:fc:94:c5:7c:39:e7:f4:62:02:76:4b:99:e9:02: 95:6c:cc:f3:d4:ac:60:60:76:3c:35:63:4a:a5:6f:91:d2:14: b1:ca:5b:fb:23:2c:89:0d:c2:50:f4:82:43:89:75:b6:cd:e3: a1:0d:d3:87:ec:8c:2b:68:4b:5f:d5:bf:0a:e8:03:bd:73:0b: 1a:d6:e5:4c:19:62:f2:d6:2f:1b:9b:ed:b6:6f:1a:de:30:89: 0a:83:bb:0a:58:87:db:fb:9b:dc:d2:4d:53:f4:92:bf:ee:cb: 04:82:4f:d6:74:c5:bc:5f:e0:41:c8:0c:de:a4:18:a5:f5:40: d2:53:dd:9a:ae:74:d5:0b:86:25:a6:e8:ea:1a:27:5d:54:13: 24:06:de:d7:39:6c:53:31:93:54:34:4a:82:ae:d5:d1:b8:00: b3:c5:a8:7c:5b:74:ce:ab:d5:dc:40:85:64:b8:4a:4c:57:a0: a4:41:a6:7c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE52NOIwCu2wACgPx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YTA3MTU1ZDMtNmY2ZC00YWZkLTk1MGYtM2I3MWUzYTMzNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C/7Ukdx8i11M9qtV+q/ibOIFxHcZkrkm2yg 1uXPWK7G69AXxDpk0gwY4EOWuEr8LXb33PFfTLua/T0xT07PM4URLheUqJVAhdJo 0FgS9T6gX7dKKHXjvEqxo41RJlOwh8m6xowsjo1KXn2zRgqS+wQ2T7HI6NKT8Mha P42AR+edOfKLl1+/KIHeCJx98erdy/lV5zorRD31NduCD0P8gEmlizGAIXZV74Hk g7VX+ooy8reLxgKgU3dHhf/LGzejA7O4NrhySWGdDnsY/siAaYTKRs50/AKff48n /6z3NrdPEkpx7EwmhhXifhGgOg9SRPXnWM9zafhfJl3dYWbMVwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHj6eLMx7ai9qTvDhzSezNhSk9cYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkSL/EJx+JfxtV2NGJgV5FXqX2LOMjkcsA 0PpfH/FbpLrBPogXn2G+CvZm+echGsS4zRyq8HRmrAxQTrVCZ3DC/5NvI2hhtLa5 rct9/JTFfDnn9GICdkuZ6QKVbMzz1KxgYHY8NWNKpW+R0hSxylv7IyyJDcJQ9IJD iXW2zeOhDdOH7IwraEtf1b8K6AO9cwsa1uVMGWLy1i8bm+22bxreMIkKg7sKWIfb +5vc0k1T9JK/7ssEgk/WdMW8X+BByAzepBil9UDSU92arnTVC4YlpujqGiddVBMk Bt7XOWxTMZNUNEqCrtXRuACzxah8W3TOq9XcQIVkuEpMV6CkQaZ8 -----END CERTIFICATE-----Generated at Tue Jul 21 22:35:50 2026 by rpki-client