$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa File: 29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa (raw, json) Hash identifier: 5cO1ToF/hwYXMyzUiq+FP1/6YiI1VpVmePO/+wLfS3c= Subject key identifier: A3:21:3F:1F:5C:E8:C0:0E:4B:1A:E3:7E:CF:6C:A9:AD:8C:40:0A:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9B2352092736E93FF700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 396583 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9b:23:52:09:27:36:e9:3f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8d545e00-e8ba-457b-99ae-2c55d24ad82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:69:df:06:1a:bc:ad:47:f5:b7:d5:84:9e: 13:64:5f:4b:8f:56:44:26:99:15:8b:d7:0a:ee:47: 56:3a:d3:18:f6:68:13:82:75:10:27:33:fd:d7:08: 92:1d:8f:df:ad:34:ae:c3:ac:e5:83:bd:4c:c9:48: d7:11:18:3a:3b:f0:17:d0:e5:94:d4:11:90:ca:7f: 88:74:44:3b:a0:38:44:c8:2b:cd:6f:ea:95:5d:97: eb:c8:25:c3:01:c9:e1:4f:82:12:58:0a:42:00:bf: fd:1e:f2:93:ae:0c:54:f3:c8:ef:a8:77:09:59:1f: c1:6f:96:48:8e:86:e9:32:34:10:33:79:a2:7d:69: 70:7d:0e:f0:86:37:e8:a0:a6:cb:20:f9:57:33:61: 0e:94:df:96:36:f4:89:bf:09:85:ee:0a:20:41:5d: 1b:74:7d:49:62:58:62:1c:5d:08:67:1b:29:70:9e: c6:50:4c:4c:51:c4:2a:2d:f6:81:94:56:bf:84:cc: b2:62:31:32:d9:1f:5a:d9:f0:ac:fd:95:a9:b2:36: 81:95:93:af:d4:23:00:b2:a5:f4:46:e1:ec:3a:c7: 5a:bd:63:c1:78:e8:0b:df:89:9d:47:06:af:fd:da: 81:d2:8c:80:2d:47:4f:ae:f6:34:1b:3f:e5:27:07: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:3F:1F:5C:E8:C0:0E:4B:1A:E3:7E:CF:6C:A9:AD:8C:40:0A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29bf2a4d-3b77-30f3-b27a-d2a14a0fefaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:08:68:62:7d:51:5a:c2:ac:9d:f9:30:08:a7:29:49:18:2b: 30:0a:e5:98:d4:69:5f:a0:c2:7c:25:55:4f:10:6d:fa:42:73: 6f:35:70:c5:53:07:3b:f6:d6:09:b3:e4:02:ad:e9:b3:e7:e0: 42:e6:ef:69:bb:a8:24:49:6c:05:15:b2:e1:50:77:13:fd:3e: ac:9f:8c:fb:bf:24:35:71:57:de:cc:8a:8a:bb:75:94:5b:5d: df:03:e5:e4:be:73:16:db:f8:cf:7b:cf:94:9a:d8:50:dc:dc: 68:0b:9d:7b:d8:46:57:86:b3:85:6d:03:5f:67:95:2c:1e:9b: 38:d0:7f:cb:da:77:61:a8:5a:b9:9d:85:e4:a1:c0:fb:71:4b: 3b:51:99:27:d8:94:73:1b:67:67:ae:22:5b:57:f9:97:fc:42: c7:76:99:ca:f9:a8:53:3d:cc:f0:da:c6:fe:a8:1b:f8:b8:34: 59:46:d5:53:96:a1:da:a3:00:e5:82:d1:b1:f5:a4:3f:00:9a: 56:6b:5a:3a:a1:76:10:e8:e5:c6:c8:a0:84:05:c3:01:54:72: 92:fe:9c:57:1e:2d:69:de:a5:5e:e4:e9:84:c9:dd:75:23:ef: c7:67:1c:11:d8:92:9d:47:2b:c4:23:7f:4f:a7:70:ac:d6:0e: 1b:48:77:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5sjUgknNuk/9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGQ1NDVlMDAtZThiYS00NTdiLTk5YWUtMmM1NWQyNGFkODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNFp3wYavK1H9bfVhJ4TZF9Lj1ZEJpkVi9cK 7kdWOtMY9mgTgnUQJzP91wiSHY/frTSuw6zlg71MyUjXERg6O/AX0OWU1BGQyn+I dEQ7oDhEyCvNb+qVXZfryCXDAcnhT4ISWApCAL/9HvKTrgxU88jvqHcJWR/Bb5ZI jobpMjQQM3mifWlwfQ7whjfooKbLIPlXM2EOlN+WNvSJvwmF7gogQV0bdH1JYlhi HF0IZxspcJ7GUExMUcQqLfaBlFa/hMyyYjEy2R9a2fCs/ZWpsjaBlZOv1CMAsqX0 RuHsOsdavWPBeOgL34mdRwav/dqB0oyALUdPrvY0Gz/lJwcP5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKMhPx9c6MAOSxrjfs9sqa2MQAoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjliZjJhNGQtM2I3Ny0z MGYzLWIyN2EtZDJhMTRhMGZlZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYCGhifVFawqyd+TAIpylJGCswCuWY1GlfoMJ8JVVPEG36QnNvNXDF Uwc79tYJs+QCremz5+BC5u9pu6gkSWwFFbLhUHcT/T6sn4z7vyQ1cVfezIqKu3WU W13fA+XkvnMW2/jPe8+UmthQ3NxoC5172EZXhrOFbQNfZ5UsHps40H/L2ndhqFq5 nYXkocD7cUs7UZkn2JRzG2dnriJbV/mX/ELHdpnK+ahTPczw2sb+qBv4uDRZRtVT lqHaowDlgtGx9aQ/AJpWa1o6oXYQ6OXGyKCEBcMBVHKS/pxXHi1p3qVe5OmEyd11 I+/HZxwR2JKdRyvEI39Pp3Cs1g4bSHcl -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:39 2026 by rpki-client