$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa File: 2be2b071-452a-3316-af15-4dc60aecd7f8.roa (raw, json) Hash identifier: dKFE6U9IoBI4jreYSQA+2VGuUuWWlEV7Ibvtre53/+c= Subject key identifier: A8:06:66:42:B9:BD:BE:BA:34:7D:DF:07:69:B7:CC:34:07:12:BD:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64F905CCC1E581DB45C280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396600 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f9:05:cc:c1:e5:81:db:45:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=997fb69b-c666-4836-843c-99a970aa4f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:83:01:7e:b6:3c:e0:78:9c:07:41:64:0a: b9:fe:cf:40:2a:d5:8f:66:e1:d4:a1:f4:5a:12:f8: 32:5a:62:fa:06:2b:ae:6f:09:78:c5:06:78:87:9f: 01:4c:c3:62:44:aa:10:62:83:ff:2b:34:df:ee:2f: ec:21:68:d3:e3:9d:83:2d:33:9c:4b:ea:1e:f8:85: 78:ac:30:ca:70:dd:05:8c:46:a6:cb:f6:f5:5f:d2: 83:96:28:68:30:6e:08:0d:b5:7d:8b:45:67:96:02: 41:30:f6:30:6f:1f:93:50:82:76:ce:48:1b:9a:2c: db:37:ef:c3:f8:7f:35:79:ac:c7:4c:b5:93:e6:25: e8:96:99:0d:bb:7f:fa:ba:e4:b2:bf:e9:b2:7c:23: d3:81:07:94:a3:81:4b:a8:c9:3b:2e:87:d7:b1:ca: 7c:79:06:51:ca:55:21:13:d6:dd:89:87:67:7e:69: 90:7e:e4:be:29:e4:1c:8c:55:99:91:58:6e:a6:a2: 8e:b2:2d:c2:96:88:0c:f8:1d:da:89:df:03:40:a1: cd:63:34:ba:7c:09:6a:08:9b:99:ef:ab:98:4a:5a: ab:f9:a8:03:e5:34:53:12:3a:e1:b1:db:29:22:f7: 19:de:92:5b:c7:56:6c:6b:5e:dd:10:26:7f:8b:b1: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:66:42:B9:BD:BE:BA:34:7D:DF:07:69:B7:CC:34:07:12:BD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2be2b071-452a-3316-af15-4dc60aecd7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:40:2f:f5:20:d2:0c:14:c5:13:9d:10:a0:20:da:fb:8d:21: e3:72:bd:a4:a9:43:23:e5:8e:c4:08:b7:6e:03:68:95:d0:5d: e4:90:9c:c9:82:5a:b9:80:1d:ac:78:a7:e4:ea:c1:90:0c:6d: 30:aa:c7:45:d5:53:12:41:09:8a:94:01:34:88:f8:66:1a:af: 3b:b6:51:38:25:5a:ba:02:de:47:97:12:fd:34:db:ee:64:ca: 01:6c:fa:b3:fe:fd:2a:e1:bc:b3:2c:e9:e2:e1:3d:f3:fa:26: 86:68:18:63:29:d1:8a:fb:13:5f:3d:09:6b:f5:f5:80:44:7b: ae:b2:b0:99:67:17:79:90:1a:b7:55:c0:75:c9:12:2e:5b:23: ab:6f:b5:f8:1a:b2:7c:a6:e1:a7:ba:1a:a6:7d:bf:4f:8d:e4: 78:1a:e7:4f:3c:0f:67:65:0b:5e:cb:9e:c0:6b:1d:78:55:2b: f3:98:45:bc:36:20:e5:f4:55:5e:ab:97:37:90:2d:1e:c1:7e: 87:e6:30:88:da:86:48:89:c4:83:c7:54:1e:34:3b:e6:69:55: 37:76:91:67:20:6e:bf:47:1a:de:28:b9:a7:97:ae:35:8e:39: 14:8e:03:86:5d:d7:8f:ef:4d:7b:39:ea:03:04:1a:68:e9:7a: 32:65:61:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPkFzMHlgdtFwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OTk3ZmI2OWItYzY2Ni00ODM2LTg0M2MtOTlhOTcwYWE0ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzWDAX62POB4nAdBZAq5/s9AKtWPZuHUofRa EvgyWmL6Biuubwl4xQZ4h58BTMNiRKoQYoP/KzTf7i/sIWjT452DLTOcS+oe+IV4 rDDKcN0FjEamy/b1X9KDlihoMG4IDbV9i0VnlgJBMPYwbx+TUIJ2zkgbmizbN+/D +H81eazHTLWT5iXolpkNu3/6uuSyv+myfCPTgQeUo4FLqMk7LofXscp8eQZRylUh E9bdiYdnfmmQfuS+KeQcjFWZkVhupqKOsi3ClogM+B3aid8DQKHNYzS6fAlqCJuZ 76uYSlqr+agD5TRTEjrhsdspIvcZ3pJbx1Zsa17dECZ/i7GBBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKgGZkK5vb66NH3fB2m3zDQHEr0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJlMmIwNzEtNDUyYS0z MzE2LWFmMTUtNGRjNjBhZWNkN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1QC/1INIMFMUTnRCgINr7jSHjcr2kqUMj5Y7ECLduA2iV0F3kkJzJ glq5gB2seKfk6sGQDG0wqsdF1VMSQQmKlAE0iPhmGq87tlE4JVq6At5HlxL9NNvu ZMoBbPqz/v0q4byzLOni4T3z+iaGaBhjKdGK+xNfPQlr9fWARHuusrCZZxd5kBq3 VcB1yRIuWyOrb7X4GrJ8puGnuhqmfb9PjeR4GudPPA9nZQtey57Aax14VSvzmEW8 NiDl9FVeq5c3kC0ewX6H5jCI2oZIicSDx1QeNDvmaVU3dpFnIG6/RxreKLmnl641 jjkUjgOGXdeP7017OeoDBBpo6XoyZWEI -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:35 2026 by rpki-client