$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa File: 33018004-ef85-3ba0-a2dd-2ab891abc96e.roa (raw, json) Hash identifier: 7iN1Bk9cQoQjH70BKxOPUYIwojb3od/wk2kHgCEOng0= Subject key identifier: C2:DA:CC:CF:91:71:F1:70:45:94:03:7E:FB:AA:CF:5D:51:86:58:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FC90C0022F4699A0B780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396572 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fc:90:c0:02:2f:46:99:a0:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=2ff8a0e8-cd49-4e36-abcc-873f87016d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:41:8c:bb:21:f4:a4:62:94:6f:e0:34:08: 93:08:d6:95:fb:65:25:13:f2:95:f6:2d:e3:b5:e3: 32:b2:e6:f4:b9:58:6e:98:b0:04:a6:05:a0:dc:28: 66:db:67:10:ff:91:1e:13:57:90:4e:d0:b1:50:72: 16:fd:a6:c8:78:cf:ac:c7:86:45:10:a7:50:63:34: 77:22:86:8f:f6:55:02:98:fa:1f:e5:bf:18:2f:a3: 90:db:96:8f:77:e2:ff:17:f2:95:f7:00:75:d1:3d: c2:10:40:00:25:f1:cc:32:30:f6:7c:e6:3e:c7:c9: 5a:4b:ca:c4:ea:9f:92:4f:4b:9c:95:b0:f7:95:db: 71:12:71:6e:58:76:46:fc:e0:6e:37:7c:fd:44:3d: c3:d6:11:7e:e7:d2:21:be:c2:1a:16:e2:83:de:a2: 99:cf:56:3a:b2:0b:82:45:f8:da:e0:c6:ae:8e:c5: 2b:a3:66:83:1b:a5:51:e8:34:dd:f7:c1:28:fe:83: 18:7a:8b:9e:05:4f:f7:3a:a9:01:47:b0:77:39:61: 12:c8:e9:06:12:99:20:ba:67:00:af:78:1c:6f:72: 1b:49:3f:08:ad:5b:f7:1b:9d:21:f5:36:89:1f:22: 7f:04:11:4b:79:b5:af:74:6b:31:22:24:47:54:d3: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:CC:CF:91:71:F1:70:45:94:03:7E:FB:AA:CF:5D:51:86:58:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33018004-ef85-3ba0-a2dd-2ab891abc96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6e:2e:d1:31:c0:2d:35:33:89:7f:57:f6:b8:e8:bb:60:87: d0:dc:41:cc:88:49:f9:3f:67:54:d1:0f:92:ae:84:3c:b8:18: 86:33:28:ad:e6:10:a4:74:2e:9d:7e:39:d5:84:1e:13:cb:90: 1e:a6:b8:95:6d:7a:5f:4c:69:28:18:6a:e9:59:6a:9c:02:6d: 37:ce:67:68:5f:88:5e:d5:e9:7d:21:6c:ff:79:18:ce:79:b9: a2:4d:8b:7e:3c:5a:e5:c7:ed:65:65:8c:a3:c6:9a:b5:3f:e2: d1:a9:ac:80:0a:1e:3c:87:ce:2e:a7:22:b4:22:34:8f:5c:a3: 07:72:85:e8:2e:f8:08:9c:a5:22:3e:b1:03:81:71:e6:74:83: 41:a6:5e:d8:0b:9e:48:7f:69:de:b8:71:be:15:dc:ef:d4:89: b9:a2:cc:82:11:e7:0c:10:0b:a4:70:b7:32:a8:df:2b:5c:78: 94:3f:55:fd:75:37:0e:e3:43:64:47:d3:ab:94:46:83:29:a9: 15:e6:e1:7a:8e:e7:5e:0d:1e:dc:f9:33:13:3c:86:4a:7c:e8: 1c:5f:11:de:34:78:7f:89:4f:9f:28:df:07:a6:9e:6a:1d:60: 76:cb:a9:ae:dd:2b:f8:16:4f:f1:f6:b3:9d:b6:63:c1:15:48: 12:07:85:63 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPyQwAIvRpmgt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MmZmOGEwZTgtY2Q0OS00ZTM2LWFiY2MtODczZjg3MDE2ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApepBjLsh9KRilG/gNAiTCNaV+2UlE/KV9i3j teMysub0uVhumLAEpgWg3Chm22cQ/5EeE1eQTtCxUHIW/abIeM+sx4ZFEKdQYzR3 IoaP9lUCmPof5b8YL6OQ25aPd+L/F/KV9wB10T3CEEAAJfHMMjD2fOY+x8laS8rE 6p+ST0uclbD3ldtxEnFuWHZG/OBuN3z9RD3D1hF+59IhvsIaFuKD3qKZz1Y6sguC Rfja4MaujsUro2aDG6VR6DTd98Eo/oMYeoueBU/3OqkBR7B3OWESyOkGEpkgumcA r3gcb3IbST8IrVv3G50h9TaJHyJ/BBFLebWvdGsxIiRHVNPhvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMLazM+RcfFwRZQDfvuqz11RhlisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzMwMTgwMDQtZWY4NS0z YmEwLWEyZGQtMmFiODkxYWJjOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4bi7RMcAtNTOJf1f2uOi7YIfQ3EHMiEn5P2dU0Q+SroQ8uBiGMyit 5hCkdC6dfjnVhB4Ty5AepriVbXpfTGkoGGrpWWqcAm03zmdoX4he1el9IWz/eRjO ebmiTYt+PFrlx+1lZYyjxpq1P+LRqayACh48h84upyK0IjSPXKMHcoXoLvgInKUi PrEDgXHmdINBpl7YC55If2neuHG+Fdzv1Im5osyCEecMEAukcLcyqN8rXHiUP1X9 dTcO40NkR9OrlEaDKakV5uF6judeDR7c+TMTPIZKfOgcXxHeNHh/iU+fKN8Hpp5q HWB2y6mu3Sv4Fk/x9rOdtmPBFUgSB4Vj -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:54 2026 by rpki-client