$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa File: 32457c4d-3c91-3d94-bcdd-950431e64872.roa (raw, json) Hash identifier: RSh7bzCmfNjRSY5IHYnUDqx3uZmJuXflNtNfnwVP1XU= Subject key identifier: D9:B6:62:56:AF:D1:89:EE:89:43:C8:1E:3C:30:06:31:DE:39:8E:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3B34E8DE062E1027B7B0CEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 0 IP address blocks: 216.87.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e8:de:06:2e:10:27:b7:b0:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=7145a9b9-c395-4c00-b1b2-9a9368a42208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:f9:9f:f7:dc:12:a2:cd:da:73:71:67:0e: 9a:b0:44:54:9c:e0:03:b3:80:d3:f6:e0:50:d1:00: 6d:73:eb:e5:a4:84:a7:bd:a9:6f:8b:89:f0:f3:18: a7:1f:c7:6e:11:a9:71:a2:47:c8:b8:1a:6a:70:a9: 6c:7d:52:55:e1:45:7d:17:6e:b3:f8:f4:d1:9f:9a: 18:0d:57:93:6b:93:88:b4:15:61:ac:7d:cf:c1:34: af:3e:09:70:a8:ae:1f:b3:a1:c7:67:21:03:a2:56: a6:c6:43:c0:6e:fd:51:d3:f9:1a:53:31:f7:26:d9: f4:4c:b8:d9:33:3d:73:a5:9f:a6:f8:72:a4:44:6f: 33:f6:d8:19:66:0b:f4:f0:75:c9:b3:51:77:69:12: fc:7f:75:ab:4c:9c:90:66:09:da:3d:55:5d:f7:61: 2c:28:93:c2:c8:f0:0e:b4:90:d0:2c:3d:51:39:d2: 4f:8c:e2:71:54:69:bf:7c:8d:82:3e:92:c9:55:69: c8:70:60:37:91:f4:7e:c9:e5:7b:2a:8c:bb:53:c4: 86:e6:b0:a2:bc:87:9a:6e:cb:1d:d9:9e:6d:06:c4: c9:01:e4:b2:f9:dc:8a:20:50:41:1b:e5:52:4a:e0: 35:4a:2f:92:27:e3:7d:c0:a4:e8:61:a8:d9:fc:00: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B6:62:56:AF:D1:89:EE:89:43:C8:1E:3C:30:06:31:DE:39:8E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32457c4d-3c91-3d94-bcdd-950431e64872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0a:6b:60:0a:0c:be:6b:7c:bb:23:70:bf:5f:fa:ed:72:38: 0d:47:e8:ed:9c:bc:2e:18:b0:82:61:2f:86:45:a5:aa:20:35: ce:56:dc:0e:64:93:43:05:9f:56:ee:9e:6a:d3:c0:41:15:51: 9a:0b:99:cb:6e:c1:29:5f:01:2c:8b:b5:6c:59:c1:86:9f:76: fa:e8:cb:75:19:17:36:1a:05:24:f9:5c:94:08:36:c5:40:e6: 74:63:ce:bb:19:87:88:e9:76:10:23:f3:a4:d9:a6:df:94:61: d6:41:2a:cf:2a:f0:f2:f3:6d:05:3e:6f:8d:2e:a7:c9:28:11: 0d:b1:34:69:53:46:eb:2f:a5:5d:51:c3:e1:e9:48:40:90:a8: c7:7b:8e:bd:9f:cc:0d:af:39:97:a5:5b:5a:c2:60:73:f9:99: 78:45:15:fd:24:d6:3f:db:ee:ca:ad:22:3a:24:da:5d:ee:52: 4a:c4:5a:b6:dc:c9:d8:9d:73:86:5f:84:5c:78:87:cc:0e:b1: 40:51:c8:61:2d:0b:64:e9:03:c8:89:f1:c6:92:7b:9c:7d:ac: c6:49:9a:a9:16:c8:b7:2e:12:e5:f3:cb:a3:d5:89:2d:82:65: fd:60:40:88:ac:e8:94:d2:75:77:09:a0:e0:5a:e3:b9:3c:a9: e7:56:42:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOjeBi4QJ7ewzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NzE0NWE5YjktYzM5NS00YzAwLWIxYjItOWE5MzY4YTQyMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiD5n/fcEqLN2nNxZw6asERUnOADs4DT9uBQ 0QBtc+vlpISnvalvi4nw8xinH8duEalxokfIuBpqcKlsfVJV4UV9F26z+PTRn5oY DVeTa5OItBVhrH3PwTSvPglwqK4fs6HHZyEDolamxkPAbv1R0/kaUzH3Jtn0TLjZ Mz1zpZ+m+HKkRG8z9tgZZgv08HXJs1F3aRL8f3WrTJyQZgnaPVVd92EsKJPCyPAO tJDQLD1ROdJPjOJxVGm/fI2CPpLJVWnIcGA3kfR+yeV7Koy7U8SG5rCivIeabssd 2Z5tBsTJAeSy+dyKIFBBG+VSSuA1Si+SJ+N9wKToYajZ/AB2cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm2Ylav0YnuiUPIHjwwBjHeOY4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI0NTdjNGQtM2M5MS0z ZDk0LWJjZGQtOTUwNDMxZTY0ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4Ka2AKDL5rfLsjcL9f+u1yOA1H6O2cvC4YsIJhL4ZFpaogNc5W3A5k k0MFn1bunmrTwEEVUZoLmctuwSlfASyLtWxZwYafdvroy3UZFzYaBST5XJQINsVA 5nRjzrsZh4jpdhAj86TZpt+UYdZBKs8q8PLzbQU+b40up8koEQ2xNGlTRusvpV1R w+HpSECQqMd7jr2fzA2vOZelW1rCYHP5mXhFFf0k1j/b7sqtIjok2l3uUkrEWrbc ydidc4ZfhFx4h8wOsUBRyGEtC2TpA8iJ8caSe5x9rMZJmqkWyLcuEuXzy6PViS2C Zf1gQIis6JTSdXcJoOBa47k8qedWQg4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:39 2026 by rpki-client