$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa File: 3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa (raw, json) Hash identifier: B3HOoqYas27JE76zIMk7sIkLPlCIUsw/GXiEtDfiif4= Subject key identifier: 04:5B:FC:82:B8:3E:C4:A5:0D:7A:02:BA:C5:4D:C3:66:67:11:03:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9A21485C1A9CA8FADE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36620 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9a:21:48:5c:1a:9c:a8:fa:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=aa640fbc-cca5-47d7-a73f-21e2228b1241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:f5:d0:85:a0:bd:3b:48:31:ee:2a:9c:37: df:19:e3:3c:61:fc:aa:13:c5:8c:0e:9f:d5:81:54: 30:5a:b9:fd:e2:72:a8:bc:ba:ac:4f:96:ba:e2:f7: db:53:85:f5:4d:2b:92:a3:71:20:0e:e4:b4:63:fe: 05:d4:8f:9e:73:41:fa:2b:f8:8e:ea:1f:ad:ff:cd: 20:de:20:fe:09:b4:f3:13:44:b4:f9:8b:d0:d0:a0: f2:88:f0:9e:9a:fc:e9:1b:4f:ad:a5:c1:d9:8e:03: 88:3b:eb:ff:68:26:74:ff:bc:c7:35:6e:c6:cd:7b: e9:a3:07:c7:53:b0:d2:7e:5c:b5:60:f1:d7:67:2c: a4:43:d7:9e:c8:2a:2f:68:2d:8b:f9:36:d5:34:0e: fa:5a:9d:8e:bb:1b:58:a6:77:52:23:2a:cb:2a:b2: 52:44:ba:bb:9b:66:25:0b:1a:61:aa:50:e9:c9:7e: 36:f6:c2:2d:09:f6:c4:cd:4f:af:c6:be:b8:82:9d: 94:a1:50:1b:cb:f2:8f:0d:89:c3:b4:a3:f8:d5:92: ed:4f:9a:96:81:fd:cb:a6:99:06:18:80:1a:06:6c: 99:55:3d:f3:c0:4e:67:88:b5:6e:e3:51:05:b9:db: cc:3d:a6:e6:71:d5:ae:2c:c8:e0:fc:de:38:69:7b: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:FC:82:B8:3E:C4:A5:0D:7A:02:BA:C5:4D:C3:66:67:11:03:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a2b8daf-f493-3e68-82e3-43e075b4c3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:56:9a:22:41:bf:9f:32:7f:f6:1d:cd:cd:00:c2:da:42:a6: 45:30:82:0d:26:ff:4f:78:d0:f7:c5:a5:6f:b7:fc:7b:10:42: 14:c7:d4:98:81:5d:b5:d2:e5:8f:2b:81:ca:71:d2:0f:58:8b: c9:57:15:e8:b2:ad:f5:d3:7e:00:13:b8:7d:c2:31:77:51:3e: 46:fa:97:2e:8d:b1:02:8f:b9:9c:3c:8d:4a:b8:f2:33:ae:21: ff:f8:5b:f8:46:22:dd:05:7e:bc:b1:cd:46:d9:65:bc:95:f0: 2d:20:b3:d1:dc:4e:23:92:60:a4:39:18:ff:72:f1:24:d7:63: 5a:a0:7f:36:d7:d6:87:8d:ad:07:39:35:6e:25:ba:04:dc:0d: 14:03:7e:38:a3:4c:1d:97:f4:57:cf:66:40:9e:65:43:32:55: 24:16:e2:d2:4f:cb:ee:aa:00:41:81:5f:89:18:f8:5a:e5:2a: 9f:2a:f2:ad:29:30:0d:a6:58:00:d6:0e:77:9a:a1:7b:34:a7: 45:bf:8a:6f:ea:a7:bf:5a:09:8b:21:fa:54:3e:9f:48:55:43: 64:a1:24:83:ef:2a:ee:4a:55:28:b5:25:e1:90:81:a5:96:4e: ab:31:00:3d:d5:3d:f6:5c:9b:94:2b:66:75:30:1b:7f:0c:0a: 54:ff:be:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5ohSFwanKj63gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YWE2NDBmYmMtY2NhNS00N2Q3LWE3M2YtMjFlMjIyOGIxMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJv10IWgvTtIMe4qnDffGeM8YfyqE8WMDp/V gVQwWrn94nKovLqsT5a64vfbU4X1TSuSo3EgDuS0Y/4F1I+ec0H6K/iO6h+t/80g 3iD+CbTzE0S0+YvQ0KDyiPCemvzpG0+tpcHZjgOIO+v/aCZ0/7zHNW7GzXvpowfH U7DSfly1YPHXZyykQ9eeyCovaC2L+TbVNA76Wp2OuxtYpndSIyrLKrJSRLq7m2Yl CxphqlDpyX429sItCfbEzU+vxr64gp2UoVAby/KPDYnDtKP41ZLtT5qWgf3LppkG GIAaBmyZVT3zwE5niLVu41EFudvMPabmcdWuLMjg/N44aXtsrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFARb/IK4PsSlDXoCusVNw2ZnEQO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EyYjhkYWYtZjQ5My0z ZTY4LTgyZTMtNDNlMDc1YjRjM2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6VpoiQb+fMn/2Hc3NAMLaQqZFMIINJv9PeND3xaVvt/x7EEIUx9SY gV210uWPK4HKcdIPWIvJVxXosq31034AE7h9wjF3UT5G+pcujbECj7mcPI1KuPIz riH/+Fv4RiLdBX68sc1G2WW8lfAtILPR3E4jkmCkORj/cvEk12NaoH8219aHja0H OTVuJboE3A0UA344o0wdl/RXz2ZAnmVDMlUkFuLST8vuqgBBgV+JGPha5SqfKvKt KTANplgA1g53mqF7NKdFv4pv6qe/WgmLIfpUPp9IVUNkoSSD7yruSlUotSXhkIGl lk6rMQA91T32XJuUK2Z1MBt/DApU/77X -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:40 2026 by rpki-client