$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json) Hash identifier: 1LX916ggFcLbR4MlCF7RQKnjsXnLPGS1BER2ooVtqIY= Subject key identifier: 52:10:60:BF:E3:C0:8F:A9:07:D0:E8:1B:C7:CE:FE:54:14:E3:D5:8F Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D95F00BD48A6C68322CF17380 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 22781 IP address blocks: 216.131.120.0/24 maxlen: 24 2606:b300:8200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0b:d4:8a:6c:68:32:2c:f1:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=14220efd-430f-4ae3-bede-8026f3240cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:81:84:d3:ed:18:51:5e:9d:b3:b2:cf:f1: 0e:1c:ae:38:07:fc:69:ff:59:c1:1e:15:13:5b:45: 62:3b:e3:80:98:01:11:ec:d6:4e:7f:22:2b:84:14: 75:49:5d:c0:ea:ce:c8:e9:3e:9a:99:5a:7a:bb:ac: 18:98:6c:dd:38:e0:3c:55:68:d4:3e:57:7f:0a:53: d6:a5:1d:c8:c0:33:a4:fb:1b:58:fa:32:f2:f0:e8: 57:ae:72:8e:7d:b0:f9:b3:ce:11:56:7e:4f:bd:b9: 03:c6:4f:91:80:b9:40:85:9c:91:d1:c9:46:41:f3: f4:fd:56:fa:bd:49:05:9f:6b:cc:b9:93:a3:17:50: 58:31:dc:e3:84:c4:bb:bf:59:45:6f:a5:1b:7f:3a: b8:d8:7f:3f:83:f7:c5:49:46:14:2f:35:77:eb:69: 0d:7e:16:bc:37:ba:9c:ec:9a:b0:d0:98:1a:b9:a3: 46:3a:6e:ec:2a:95:54:8b:35:6d:18:43:53:d6:76: 8d:0f:73:8b:42:d9:2b:f1:05:69:30:1e:61:0a:6b: d7:75:8f:f7:bd:36:5d:15:de:ab:77:c1:0f:2d:ef: 04:4b:7d:d1:dc:0b:6e:b1:a5:fd:5e:f9:57:e5:ab: d8:e1:d8:ba:c0:80:14:6d:09:b9:01:9b:5a:7e:33: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:60:BF:E3:C0:8F:A9:07:D0:E8:1B:C7:CE:FE:54:14:E3:D5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.120.0/24 IPv6: 2606:b300:8200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b6:18:00:0f:52:18:74:15:e1:86:ab:88:6b:04:ce:21:80: 5f:e4:73:f7:ee:84:72:ed:19:a9:91:0d:b8:46:50:63:ce:54: 9a:b6:97:76:f5:8b:3a:63:8b:79:1a:31:00:e4:fd:e1:a6:f4: f7:48:ba:c5:96:5f:2e:47:e0:af:eb:1a:af:b0:31:e8:2b:ac: 5e:60:ec:ca:b4:2c:a1:60:f6:70:d8:55:d3:1a:16:86:1d:56: 12:3c:98:f5:19:a3:a6:f1:d5:d3:7d:f2:04:6f:46:8e:7b:28: 52:c4:96:a3:58:ec:df:5d:44:5d:3c:75:e4:6e:3a:c1:3c:43: 3a:6e:79:e6:c5:45:11:e5:bc:c9:b2:91:e9:bc:31:bd:80:b7: 37:af:a8:56:61:e4:10:81:92:bf:95:50:d4:86:b7:24:04:5d: 02:03:04:ac:18:1f:89:a4:83:ee:6c:3a:00:2f:4d:db:9c:6d: 8a:28:d3:99:fb:19:ae:d7:0b:72:af:19:77:91:ec:f6:ed:8d: a0:cd:1b:7f:0c:19:12:96:13:83:80:16:4d:9e:78:e9:af:5d: 40:95:2a:0e:11:98:2e:ac:0d:dc:00:90:f1:63:b0:9f:f9:ff: b6:60:56:8b:82:f3:a0:1a:f9:a9:c2:ed:37:55:2b:dc:8f:f8: bf:36:7c:7a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2V8AvUimxoMizxc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MTQyMjBlZmQtNDMwZi00YWUzLWJlZGUtODAyNmYzMjQwY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjomBhNPtGFFenbOyz/EOHK44B/xp/1nBHhUT W0ViO+OAmAER7NZOfyIrhBR1SV3A6s7I6T6amVp6u6wYmGzdOOA8VWjUPld/ClPW pR3IwDOk+xtY+jLy8OhXrnKOfbD5s84RVn5PvbkDxk+RgLlAhZyR0clGQfP0/Vb6 vUkFn2vMuZOjF1BYMdzjhMS7v1lFb6Ubfzq42H8/g/fFSUYULzV362kNfha8N7qc 7Jqw0JgauaNGOm7sKpVUizVtGENT1naND3OLQtkr8QVpMB5hCmvXdY/3vTZdFd6r d8EPLe8ES33R3AtusaX9XvlX5avY4di6wIAUbQm5AZtafjPegQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFIQYL/jwI+pB9DoG8fO/lQU49WPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjIxNDgyYmYtODU5ZS0z NTFiLWIzNTgtYTFjMDBiNjU3YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA2IN4MA4E AgACMAgDBgAmBrMAgjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRthgAD1IYdBXhhquIawTOIYBf5HP37oRy 7RmpkQ24RlBjzlSatpd29Ys6Y4t5GjEA5P3hpvT3SLrFll8uR+Cv6xqvsDHoK6xe YOzKtCyhYPZw2FXTGhaGHVYSPJj1GaOm8dXTffIEb0aOeyhSxJajWOzfXURdPHXk bjrBPEM6bnnmxUUR5bzJspHpvDG9gLc3r6hWYeQQgZK/lVDUhrckBF0CAwSsGB+J pIPubDoAL03bnG2KKNOZ+xmu1wtyrxl3kez27Y2gzRt/DBkSlhODgBZNnnjpr11A lSoOEZgurA3cAJDxY7Cf+f+2YFaLgvOgGvmpwu03VSvcj/i/Nnx6 -----END CERTIFICATE-----Generated at Wed Apr 22 07:08:04 2026 by rpki-client