$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa File: 05945125-c5c6-33a9-93e7-70431442ef5d.roa (raw, json) Hash identifier: a8gzrrIE0XKXurQyc98KhmE2jmcRFybxyVya8LWtuyY= Subject key identifier: 73:68:E6:3D:17:3F:C6:36:9B:3D:E6:D2:53:C2:3E:12:DB:10:82:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FD64AB13A8D28F655FA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396605 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fd:64:ab:13:a8:d2:8f:65:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8b95fe31-d112-4ffd-9dc1-41bff5826e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:ce:b6:dd:43:6c:26:38:49:f9:14:e0:74: 6e:aa:34:f3:75:2f:97:ba:6e:8b:1e:0f:6e:a6:03: b0:85:2b:f0:5a:86:1c:a4:39:ee:bb:ab:04:a4:04: 65:2b:62:88:ac:e7:35:08:fc:92:03:fb:b0:b2:b4: 37:75:06:7c:a1:35:be:2f:7e:5f:b3:c9:e6:74:b7: 14:ae:44:05:32:cb:f7:c3:40:de:2c:37:ce:be:b7: 0f:4f:1f:56:ea:e5:ad:42:1b:a8:09:b6:ce:f9:32: dc:41:93:aa:f9:73:e4:6c:18:28:f6:3e:62:3a:62: 3b:02:21:02:ab:1c:f2:ca:95:fd:c6:17:7c:02:84: 71:54:18:92:78:64:1c:93:fc:68:57:aa:40:33:55: e5:3d:62:28:9a:02:58:78:3e:4b:d9:c9:5e:fe:27: b2:47:53:e3:76:c6:17:c5:f7:57:e2:76:2a:9b:97: 65:be:a0:5d:ac:56:ac:b7:70:1d:65:d2:87:47:22: 42:9f:3e:e0:57:73:3e:8d:dd:d4:92:cd:54:b4:f1: 5d:e6:45:55:28:db:93:e7:6d:4b:03:39:1c:e7:b0: da:ae:78:d8:78:5c:f8:73:f9:6b:fe:69:0b:ca:e3: 5a:e3:78:42:13:07:0f:ad:d4:e4:a4:86:67:e3:d7: 0a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:E6:3D:17:3F:C6:36:9B:3D:E6:D2:53:C2:3E:12:DB:10:82:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05945125-c5c6-33a9-93e7-70431442ef5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0f:3e:69:9e:74:00:a8:b4:23:65:36:25:82:78:0a:a7:69: 36:c2:19:d3:d1:95:a1:ae:82:54:a7:fe:4e:46:39:f1:22:db: a9:2a:af:e4:3d:be:e3:32:75:ee:39:91:e1:aa:f4:45:7a:84: 06:a4:bc:3c:d9:41:dd:56:e5:07:74:ba:c4:2e:bf:a4:38:1b: 90:97:33:74:87:dc:bf:35:e3:79:e3:be:7a:91:e6:df:be:0a: dc:b4:37:8c:d5:41:74:32:17:1c:0b:02:c3:6b:38:43:ca:74: 2a:5f:79:0a:25:8e:2e:ce:75:bf:d7:8b:8f:88:9d:c5:2d:3a: 7d:f9:ce:8d:76:d5:75:40:5b:c1:41:f2:a0:4e:0a:52:3d:d8: a3:39:5e:c6:bc:9a:e0:a1:2a:87:32:a1:1c:92:96:d7:ea:4b: c2:4f:dd:2e:25:7a:d9:84:e5:9b:c4:19:21:6e:43:6f:f9:30: 90:f1:61:c1:e9:30:42:d1:e3:83:4f:20:2f:0d:6f:99:52:fc: 9d:87:05:f7:18:f1:2f:b2:80:5c:d3:fa:38:1e:3f:8b:07:9e: 3c:1f:46:90:c2:71:33:48:50:a7:82:1e:08:23:08:ec:72:5e: b6:4a:f8:88:2f:df:d6:0e:6d:53:27:82:b4:3f:aa:58:67:d1: 53:ba:f8:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP1kqxOo0o9lX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGI5NWZlMzEtZDExMi00ZmZkLTlkYzEtNDFiZmY1ODI2ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiynOtt1DbCY4SfkU4HRuqjTzdS+Xum6LHg9u pgOwhSvwWoYcpDnuu6sEpARlK2KIrOc1CPySA/uwsrQ3dQZ8oTW+L35fs8nmdLcU rkQFMsv3w0DeLDfOvrcPTx9W6uWtQhuoCbbO+TLcQZOq+XPkbBgo9j5iOmI7AiEC qxzyypX9xhd8AoRxVBiSeGQck/xoV6pAM1XlPWIomgJYeD5L2cle/ieyR1PjdsYX xfdX4nYqm5dlvqBdrFast3AdZdKHRyJCnz7gV3M+jd3Uks1UtPFd5kVVKNuT521L Azkc57DarnjYeFz4c/lr/mkLyuNa43hCEwcPrdTkpIZn49cKBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHNo5j0XP8Y2mz3m0lPCPhLbEIJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDU5NDUxMjUtYzVjNi0z M2E5LTkzZTctNzA0MzE0NDJlZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApDz5pnnQAqLQjZTYlgngKp2k2whnT0ZWhroJUp/5ORjnxItupKq/k Pb7jMnXuOZHhqvRFeoQGpLw82UHdVuUHdLrELr+kOBuQlzN0h9y/NeN54756kebf vgrctDeM1UF0MhccCwLDazhDynQqX3kKJY4uznW/14uPiJ3FLTp9+c6NdtV1QFvB QfKgTgpSPdijOV7GvJrgoSqHMqEckpbX6kvCT90uJXrZhOWbxBkhbkNv+TCQ8WHB 6TBC0eODTyAvDW+ZUvydhwX3GPEvsoBc0/o4Hj+LB548H0aQwnEzSFCngh4IIwjs cl62SviIL9/WDm1TJ4K0P6pYZ9FTuvjm -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:30 2026 by rpki-client