$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa File: 1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa (raw, json) Hash identifier: zcd3ef7DA0lYVWWvdiQ921FzzisbeiXz4zCgZC7o7JY= Subject key identifier: 41:5E:8C:54:66:96:02:29:85:4E:5A:6A:C6:AC:C2:32:2B:B2:F9:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F98291A6B01D2BFF05520 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 22547 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:98:29:1a:6b:01:d2:bf:f0:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=cee89cdb-2791-495a-b855-dfa925bdb1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:1c:ea:5e:0a:91:53:09:25:f2:29:01:92: 92:5b:0d:ae:d5:21:fc:69:5c:28:21:ea:ca:75:14: 51:af:64:aa:09:99:6e:59:e9:ec:4f:e6:2d:6f:08: 09:e5:98:1d:c2:4d:32:37:83:ad:02:e0:b5:30:82: 51:6d:30:bd:ab:16:89:3f:05:80:2c:79:3d:43:35: c4:63:b5:22:9e:8f:b7:d3:ea:7e:9b:0d:2a:f5:15: f0:b0:f4:e7:d4:48:01:c8:b0:4e:b5:69:72:28:c0: 6a:19:ea:2b:18:60:22:63:c9:1e:a7:2f:c0:ef:0b: 3f:05:c4:02:3a:eb:9d:33:bc:e4:9e:a6:bb:d9:16: 8f:38:c5:af:bc:ee:95:c0:07:b5:82:7f:eb:21:a2: c3:4b:af:6e:3a:f1:72:7c:ec:28:69:73:0a:48:38: dc:20:2c:1c:3c:60:e7:95:2e:7e:ea:e2:2b:57:53: 13:9d:74:43:12:11:43:cd:bb:11:f2:d7:a9:d8:dd: 7d:ac:1b:ff:0f:dd:5e:06:84:de:35:ba:ab:fd:62: a7:e1:ef:dd:d3:90:cb:3e:31:47:3e:b5:0f:ca:c3: d2:c7:f6:bb:92:c4:f0:1c:14:02:a3:62:54:c6:8b: 23:e3:ee:b0:c8:61:3d:89:b9:96:87:21:1f:2e:05: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:8C:54:66:96:02:29:85:4E:5A:6A:C6:AC:C2:32:2B:B2:F9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1dc3feb6-bd11-3d2f-ace5-a64acddd51e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e3:41:7b:49:74:3d:b5:3f:da:7e:7c:be:7d:e2:71:d0:cb: eb:12:86:da:e6:4d:72:e0:38:ca:a4:ee:6c:2f:da:27:e1:18: ba:de:90:80:f7:5a:41:7b:cd:c8:2e:9c:6b:a8:9d:b0:ac:d1: 21:78:00:ce:e8:23:87:8e:11:94:84:64:0c:da:00:49:1e:d0: 69:c5:cf:6e:bc:ae:63:27:44:46:c3:94:c2:69:ca:02:e2:09: dc:a4:21:86:fd:a0:a6:80:03:01:ce:3c:13:46:88:e0:3a:93: 97:c9:8f:5b:b3:12:02:34:d6:c7:ed:5e:47:43:ce:9e:0d:13: bf:a3:9c:9a:e3:5c:fa:12:99:93:ff:c9:2c:b6:1b:48:cf:f8: 53:12:d0:25:72:26:82:48:03:6c:19:1e:34:06:d6:6c:68:dd: 67:65:b7:e5:d3:8d:7c:92:1b:6e:89:d1:da:03:b4:7b:ad:26: 94:15:93:e8:1a:c2:d2:a1:8e:85:00:3b:f3:6f:31:a3:53:c6: 6d:59:36:65:da:89:47:23:72:07:62:55:61:3a:83:ad:e2:1f: cc:45:77:d0:62:d7:6c:ab:26:77:99:73:83:2b:0e:21:6d:8a: bf:a1:b3:b6:b2:54:ca:30:2d:fa:a0:04:60:ea:b0:1c:ff:6c: 31:6f:32:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5gpGmsB0r/wVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk Y2VlODljZGItMjc5MS00OTVhLWI4NTUtZGZhOTI1YmRiMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaAc6l4KkVMJJfIpAZKSWw2u1SH8aVwoIerK dRRRr2SqCZluWensT+YtbwgJ5Zgdwk0yN4OtAuC1MIJRbTC9qxaJPwWALHk9QzXE Y7Uino+30+p+mw0q9RXwsPTn1EgByLBOtWlyKMBqGeorGGAiY8kepy/A7ws/BcQC OuudM7zknqa72RaPOMWvvO6VwAe1gn/rIaLDS69uOvFyfOwoaXMKSDjcICwcPGDn lS5+6uIrV1MTnXRDEhFDzbsR8tep2N19rBv/D91eBoTeNbqr/WKn4e/d05DLPjFH PrUPysPSx/a7ksTwHBQCo2JUxosj4+6wyGE9ibmWhyEfLgWXEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEFejFRmlgIphU5aasaswjIrsvmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWRjM2ZlYjYtYmQxMS0z ZDJmLWFjZTUtYTY0YWNkZGQ1MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAj40F7SXQ9tT/afny+feJx0MvrEoba5k1y4DjKpO5sL9on4Ri63pCA 91pBe83ILpxrqJ2wrNEheADO6COHjhGUhGQM2gBJHtBpxc9uvK5jJ0RGw5TCacoC 4gncpCGG/aCmgAMBzjwTRojgOpOXyY9bsxICNNbH7V5HQ86eDRO/o5ya41z6EpmT /8ksthtIz/hTEtAlciaCSANsGR40BtZsaN1nZbfl0418khtuidHaA7R7rSaUFZPo GsLSoY6FADvzbzGjU8ZtWTZl2olHI3IHYlVhOoOt4h/MRXfQYtdsqyZ3mXODKw4h bYq/obO2slTKMC36oARg6rAc/2wxbzIL -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:36 2026 by rpki-client