$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe0aedb-4b79-35bf-bad1-deac582b812b.roa File: 2fe0aedb-4b79-35bf-bad1-deac582b812b.roa (raw, json) Hash identifier: qm5j+Q3zBXDwmexQ5i/e7hCD7gV0v5WCzV0zlbcUyIk= Subject key identifier: 95:32:E3:65:77:AF:77:7E:1D:EB:52:20:CE:E6:1D:5D:34:EA:37:01 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FED9AC0C0DA67B6ACE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe0aedb-4b79-35bf-bad1-deac582b812b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36620 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fe:d9:ac:0c:0d:a6:7b:6a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=8f1e503d-dd62-4e8b-b9af-4711829fb45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:92:e3:7e:25:87:d4:d8:06:f8:a9:02:12: 9b:e5:18:0e:7e:c9:38:01:f3:46:11:e6:bc:27:7e: 93:bd:6c:92:39:a1:ee:42:4b:4b:5e:a1:c4:d6:37: ad:6b:53:37:75:d0:c4:1a:25:59:3c:09:9e:7c:42: bb:ac:d4:c2:2a:75:e3:4f:c5:f0:b7:e5:80:a5:7b: 70:4f:fd:37:93:2a:a9:b2:fb:bf:28:28:ab:8d:c9: 99:de:7a:21:cc:45:6a:32:0f:32:80:14:31:30:d0: f9:72:fe:76:e2:7a:fb:eb:5a:6c:67:38:21:87:53: d2:9c:7d:fa:b6:cd:62:b1:c7:36:7e:6a:21:54:68: c2:89:4f:9d:72:20:dd:0e:22:f4:e1:fc:f6:3e:97: 11:d0:d8:db:77:cb:a5:97:65:83:e6:84:60:2d:d1: 25:6c:d8:9c:43:cd:de:aa:92:4d:cc:04:34:b2:13: ec:97:9a:82:fb:7d:3d:c1:17:a3:3a:a6:17:59:9b: 94:a2:d6:2b:b6:f6:4f:32:0f:b2:52:7b:eb:97:c1: 34:80:f7:3a:50:a6:ea:a0:6c:ff:e1:fb:a0:85:25: d6:99:69:de:71:10:8f:97:d3:64:f4:01:3b:88:8d: cc:e7:b7:fe:b1:1f:35:25:60:f7:fa:92:b9:a9:b8: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:32:E3:65:77:AF:77:7E:1D:EB:52:20:CE:E6:1D:5D:34:EA:37:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fe0aedb-4b79-35bf-bad1-deac582b812b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:94:10:fa:f8:bd:a6:4c:32:86:e8:92:e9:dc:14:e2:b1:8c: 62:69:5a:c1:02:3f:87:5a:5b:35:60:a0:e2:ce:75:8d:83:ac: d4:54:4b:30:49:cb:45:c1:f6:a1:9d:3a:f9:f5:b4:4f:68:de: ee:ae:cb:da:5e:f6:28:bc:c6:94:a3:dd:ed:3a:94:5d:29:2a: bc:92:58:d0:de:36:39:80:0d:76:73:ed:c9:85:cf:7f:88:9f: 92:ef:1c:49:47:cd:d9:44:07:ad:21:44:b4:ad:59:27:27:c1: 6f:f3:87:a4:c6:17:e0:32:02:f1:a4:77:e5:20:37:b1:38:2a: a6:ed:03:79:42:8a:ff:35:27:c8:cd:fc:26:b2:81:70:b6:7b: 89:a9:81:20:e9:f8:18:2c:4f:16:2e:61:dc:23:49:cc:4d:a0: a6:43:ca:01:c5:41:ad:7c:04:34:e4:51:65:38:26:0d:de:a8: af:b8:39:27:ca:99:2f:27:df:f6:63:a8:88:57:8c:78:70:c0: ed:08:d5:2a:f5:36:4c:8d:bf:18:d4:1c:56:55:ba:da:36:ce: d2:f2:1d:a2:ee:8d:ca:2f:29:0e:a6:86:67:5f:f9:e1:06:85: 49:ae:96:cd:af:84:7b:25:4a:4e:07:41:f0:33:1b:14:c7:e4: 86:07:d0:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP7ZrAwNpntqzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OGYxZTUwM2QtZGQ2Mi00ZThiLWI5YWYtNDcxMTgyOWZiNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNWS434lh9TYBvipAhKb5RgOfsk4AfNGEea8 J36TvWySOaHuQktLXqHE1jeta1M3ddDEGiVZPAmefEK7rNTCKnXjT8Xwt+WApXtw T/03kyqpsvu/KCirjcmZ3nohzEVqMg8ygBQxMND5cv524nr761psZzghh1PSnH36 ts1iscc2fmohVGjCiU+dciDdDiL04fz2PpcR0Njbd8ull2WD5oRgLdElbNicQ83e qpJNzAQ0shPsl5qC+309wRejOqYXWZuUotYrtvZPMg+yUnvrl8E0gPc6UKbqoGz/ 4fughSXWmWnecRCPl9Nk9AE7iI3M57f+sR81JWD3+pK5qbhNDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJUy42V3r3d+HetSIM7mHV006jcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZlMGFlZGItNGI3OS0z NWJmLWJhZDEtZGVhYzU4MmI4MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKlBD6+L2mTDKG6JLp3BTisYxiaVrBAj+HWls1YKDiznWNg6zUVEsw SctFwfahnTr59bRPaN7ursvaXvYovMaUo93tOpRdKSq8kljQ3jY5gA12c+3Jhc9/ iJ+S7xxJR83ZRAetIUS0rVknJ8Fv84ekxhfgMgLxpHflIDexOCqm7QN5Qor/NSfI zfwmsoFwtnuJqYEg6fgYLE8WLmHcI0nMTaCmQ8oBxUGtfAQ05FFlOCYN3qivuDkn ypkvJ9/2Y6iIV4x4cMDtCNUq9TZMjb8Y1BxWVbraNs7S8h2i7o3KLykOpoZnX/nh BoVJrpbNr4R7JUpOB0HwMxsUx+SGB9DV -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:42 2026 by rpki-client