$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa File: 32a5b28a-eed1-3c80-907f-6a1b787516eb.roa (raw, json) Hash identifier: pJKUDt0KAzNMlUpWEDGQrPxCSlLLPGgOSrPBpViBE/A= Subject key identifier: C4:5A:78:37:FC:46:A0:E7:23:D9:CC:E0:50:95:76:17:90:70:4D:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F94D695853B0D9E463380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 21313 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:94:d6:95:85:3b:0d:9e:46:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=00b2b33e-c36b-47c1-abaf-f77baf07e81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:22:da:38:e0:25:1a:d6:db:61:75:42:9b: 57:89:fe:23:7f:76:9a:e4:28:ef:0b:04:aa:b9:bb: ae:18:c1:60:ca:11:c6:07:ff:6b:1c:0e:11:18:7c: 7a:84:a1:16:98:81:b5:fa:43:a5:65:a0:9e:a9:61: 2e:f1:15:07:ed:dd:d2:1a:64:c5:25:b6:c8:60:3d: 8a:8c:99:03:47:d4:a7:57:22:bb:be:3d:bf:fd:49: 3b:b2:75:b6:44:56:50:b4:74:7f:5b:20:54:1c:39: 6b:aa:ad:9c:a4:71:99:eb:94:ef:33:8f:65:cf:91: fa:b6:de:fd:d2:af:5c:87:e0:7f:9a:be:20:48:ab: eb:41:f4:6b:c6:d1:0e:f5:d0:76:47:4b:3b:8e:aa: e8:19:c9:a7:94:ed:33:3f:35:7a:ba:b9:30:9e:a3: c5:d1:28:a6:95:e8:41:d4:ba:9e:59:4d:0c:94:63: 8b:e2:b8:c4:64:4c:b1:d6:06:f5:9e:98:a9:27:e1: ae:2d:81:32:77:80:dd:29:81:a9:0f:87:5e:fd:06: 06:22:63:00:d2:ff:00:8c:f3:32:2d:10:42:71:a9: 6a:a5:21:fe:0b:52:60:d5:e9:17:81:76:28:89:e5: 99:1d:32:96:c5:be:21:5b:a6:b4:75:f0:46:6c:c8: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:78:37:FC:46:A0:E7:23:D9:CC:E0:50:95:76:17:90:70:4D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32a5b28a-eed1-3c80-907f-6a1b787516eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:38:06:4c:3f:01:9c:c7:5a:56:da:11:93:3c:12:3d:98:93: 12:94:39:ae:ac:97:6f:ec:61:1b:8e:2b:e6:3c:f1:b8:15:e5: 4f:07:f5:aa:2d:7a:7b:11:51:17:4a:1a:39:3e:8d:20:2e:95: ff:5b:da:bb:6e:ca:90:58:7c:5d:8f:a4:5c:98:df:4f:fb:4e: 4a:6c:38:d3:0a:68:cb:49:4c:e1:49:b8:cd:7f:57:77:fd:01: 3c:73:b8:7a:ee:2a:84:cc:2b:19:c5:31:e6:d9:4b:bc:5a:b1: e0:12:c5:8f:db:bc:12:8d:e5:1e:a7:da:e5:f4:58:45:f6:f7: c2:0e:79:7c:e2:20:3b:22:2c:53:99:5f:b8:5f:33:6a:d3:6b: 8e:da:d1:49:8d:c3:21:02:6e:f1:da:dd:4a:cc:db:62:e6:92: 06:c2:56:0d:84:5f:50:a4:51:16:54:ca:cb:df:ce:50:01:9b: e6:01:04:12:e4:42:83:e5:1c:5a:62:b3:5e:b8:25:45:b0:84: 25:39:fb:ca:5e:02:b5:a2:9e:ad:d3:d6:0c:9d:4f:4c:7b:db: 2a:62:be:4d:60:92:9f:aa:d5:fb:1a:47:92:39:2a:05:e8:69: 5d:59:3c:09:df:3f:25:d5:a4:dd:d9:e2:ee:2c:52:3b:47:9e: a5:48:92:42 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5TWlYU7DZ5GM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MDBiMmIzM2UtYzM2Yi00N2MxLWFiYWYtZjc3YmFmMDdlODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j4i2jjgJRrW22F1QptXif4jf3aa5CjvCwSq ubuuGMFgyhHGB/9rHA4RGHx6hKEWmIG1+kOlZaCeqWEu8RUH7d3SGmTFJbbIYD2K jJkDR9SnVyK7vj2//Uk7snW2RFZQtHR/WyBUHDlrqq2cpHGZ65TvM49lz5H6tt79 0q9ch+B/mr4gSKvrQfRrxtEO9dB2R0s7jqroGcmnlO0zPzV6urkwnqPF0SimlehB 1LqeWU0MlGOL4rjEZEyx1gb1npipJ+GuLYEyd4DdKYGpD4de/QYGImMA0v8AjPMy LRBCcalqpSH+C1Jg1ekXgXYoieWZHTKWxb4hW6a0dfBGbMg98QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMRaeDf8RqDnI9nM4FCVdheQcE3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJhNWIyOGEtZWVkMS0z YzgwLTkwN2YtNmExYjc4NzUxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOOAZMPwGcx1pW2hGTPBI9mJMSlDmurJdv7GEbjivmPPG4FeVPB/Wq LXp7EVEXSho5Po0gLpX/W9q7bsqQWHxdj6RcmN9P+05KbDjTCmjLSUzhSbjNf1d3 /QE8c7h67iqEzCsZxTHm2Uu8WrHgEsWP27wSjeUep9rl9FhF9vfCDnl84iA7IixT mV+4XzNq02uO2tFJjcMhAm7x2t1KzNti5pIGwlYNhF9QpFEWVMrL385QAZvmAQQS 5EKD5RxaYrNeuCVFsIQlOfvKXgK1op6t09YMnU9Me9sqYr5NYJKfqtX7GkeSOSoF 6GldWTwJ3z8l1aTd2eLuLFI7R56lSJJC -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:24 2026 by rpki-client