$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa File: 36402e01-d5fb-3945-b412-c19d180b92ba.roa (raw, json) Hash identifier: IYN6Ds9f/WLcW+sggvZQ4/Eeshrb8QPST28JLZxjNRI= Subject key identifier: 2D:A6:44:61:C5:10:EB:60:8A:B8:A8:B4:F9:15:04:A0:7B:F5:10:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FBC2B5083AAC46EA62C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 397206 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fb:c2:b5:08:3a:ac:46:ea:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=d51660af-4a5a-4b53-868d-be21f9a0b40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:92:fa:17:7c:4b:cd:74:73:81:94:84:03:ca: eb:20:af:bb:2d:29:bd:c1:99:7e:cd:4e:5c:ca:20: 8b:1b:86:57:b3:ec:af:56:c0:ce:91:ca:39:8d:c7: 52:a4:9b:5a:ec:e3:3e:55:61:71:b0:55:35:4f:4e: ac:ec:f9:20:57:94:88:30:30:af:ee:c1:e0:de:27: 65:8a:32:20:27:45:a7:8a:23:27:08:81:9d:34:60: a0:bf:01:d4:93:34:95:7b:fd:61:80:ed:15:ec:0c: e4:4c:5b:b5:4c:e7:fd:66:7e:fd:05:d5:55:b7:0d: 11:50:e4:d2:36:6f:f0:b4:be:44:e1:77:63:e6:d7: bc:9c:42:2d:a2:5a:44:0d:63:98:df:e4:25:dd:40: 8e:97:e8:3b:90:1c:d1:4e:fc:10:a7:99:bd:c0:ea: a9:58:c1:39:e5:72:e9:53:62:26:a6:17:f9:4a:80: 2b:43:17:88:8a:c4:f0:d2:a4:e6:31:4e:00:79:a9: 37:d4:a1:ba:06:d3:f8:b0:7a:ee:50:42:ce:de:f8: d6:03:b5:92:13:03:ba:62:49:98:63:12:05:08:4d: 0a:b5:fc:a0:a2:d4:70:02:6e:e8:f9:db:64:55:34: fb:84:f3:02:f6:cf:6c:c7:6d:7c:3b:70:fa:e4:28: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:44:61:C5:10:EB:60:8A:B8:A8:B4:F9:15:04:A0:7B:F5:10:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/36402e01-d5fb-3945-b412-c19d180b92ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e9:de:7f:a8:22:2d:95:12:35:60:f3:4e:39:c3:09:4d:f8: ab:31:03:0b:14:37:74:db:6b:e5:51:e2:54:6b:de:79:5c:29: 86:2b:9e:42:90:e1:b4:94:54:e2:7e:d6:cf:95:7e:cb:96:ac: dc:17:3c:09:d5:76:86:3f:0c:c6:72:db:03:e5:b0:c9:f2:bf: d7:ee:ed:9a:46:69:c1:34:1b:40:85:af:96:f2:60:58:ed:94: 04:44:91:60:ae:2e:9a:d9:c4:37:fa:51:c4:9f:ca:54:64:fa: c8:9c:68:78:cc:f8:78:b3:8a:b0:9f:8a:1b:11:bd:34:bc:8b: 70:22:85:59:e4:08:65:13:a2:b7:dd:d9:9f:e3:a9:53:a5:bd: be:83:99:3c:80:18:d5:fa:5a:d3:06:50:9b:06:31:f9:2a:b5: 10:12:56:d5:28:8e:12:e6:e9:f7:ef:86:e7:75:3f:b3:ab:4a: e0:ad:87:bc:d9:80:66:29:87:d0:e9:ac:ec:96:19:d4:99:4c: d2:75:aa:40:a6:1d:c6:d8:ed:7f:b8:37:2f:4b:aa:35:46:7f: ef:c5:f1:7e:db:59:d8:24:02:38:53:9a:7c:53:d5:8d:33:9f: 8a:bc:6f:0f:6c:fe:81:47:b6:ec:d4:2f:48:65:06:f8:a8:01: e6:f1:3c:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZPvCtQg6rEbqYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDUxNjYwYWYtNGE1YS00YjUzLTg2OGQtYmUyMWY5YTBiNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZL6F3xLzXRzgZSEA8rrIK+7LSm9wZl+zU5c yiCLG4ZXs+yvVsDOkco5jcdSpJta7OM+VWFxsFU1T06s7PkgV5SIMDCv7sHg3idl ijIgJ0WniiMnCIGdNGCgvwHUkzSVe/1hgO0V7AzkTFu1TOf9Zn79BdVVtw0RUOTS Nm/wtL5E4Xdj5te8nEItolpEDWOY3+Ql3UCOl+g7kBzRTvwQp5m9wOqpWME55XLp U2Imphf5SoArQxeIisTw0qTmMU4Aeak31KG6BtP4sHruUELO3vjWA7WSEwO6YkmY YxIFCE0KtfygotRwAm7o+dtkVTT7hPMC9s9sx218O3D65CjaCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC2mRGHFEOtgiriotPkVBKB79RDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY0MDJlMDEtZDVmYi0z OTQ1LWI0MTItYzE5ZDE4MGI5MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBK6d5/qCItlRI1YPNOOcMJTfirMQMLFDd022vlUeJUa955XCmGK55C kOG0lFTiftbPlX7LlqzcFzwJ1XaGPwzGctsD5bDJ8r/X7u2aRmnBNBtAha+W8mBY 7ZQERJFgri6a2cQ3+lHEn8pUZPrInGh4zPh4s4qwn4obEb00vItwIoVZ5AhlE6K3 3dmf46lTpb2+g5k8gBjV+lrTBlCbBjH5KrUQElbVKI4S5un374bndT+zq0rgrYe8 2YBmKYfQ6azslhnUmUzSdapAph3G2O1/uDcvS6o1Rn/vxfF+21nYJAI4U5p8U9WN M5+KvG8PbP6BR7bs1C9IZQb4qAHm8TzC -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:30 2026 by rpki-client