$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa File: 40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa (raw, json) Hash identifier: pMvVBWkxGTor5GRUyJLBnvEom72T+2hwkINLelu9q50= Subject key identifier: FE:33:99:87:60:E3:91:3D:E5:DD:E8:23:33:52:9C:22:52:35:93:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F9640AC011FC6B6A73140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397210 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:96:40:ac:01:1f:c6:b6:a7:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=62518106-11e6-4c6e-847b-22a765b7e456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:8a:87:fb:73:6f:06:58:4d:27:28:86:c5: 1b:76:44:24:ce:d4:5a:39:10:a3:1f:30:0b:69:41: 1d:0d:c0:ed:c0:7d:fb:ec:41:f7:d7:2c:04:43:38: c3:17:d2:6a:33:f0:68:be:52:06:19:00:bd:c0:0d: 4b:15:3c:e4:42:ce:4d:c0:23:62:af:da:27:73:54: f1:f5:9c:9c:a3:ad:29:7e:67:bc:43:a7:84:da:79: b6:b2:28:ec:a8:d0:01:54:5d:eb:ab:89:07:9b:60: 54:80:97:db:2b:19:ce:bb:91:80:3c:8f:fa:e4:a3: c2:38:16:36:76:7c:73:4f:2b:18:e6:da:f6:1e:66: 43:7b:b5:f4:58:cc:58:e4:f4:42:af:c7:3a:03:08: a7:07:33:8f:69:63:a6:81:7f:ab:76:1d:2d:96:b4: 94:b0:96:37:39:8a:5e:ad:4a:76:d2:12:6d:85:5b: db:02:a7:2e:09:b6:33:97:a2:41:02:65:c4:cd:9b: ed:72:64:d9:b2:2e:5b:51:dc:31:cc:68:fc:7e:ee: f4:89:93:32:fa:b0:1a:a0:72:4b:03:97:58:b1:99: 72:af:9d:46:ba:e1:6b:e9:5e:76:e7:ad:a5:3f:68: 6d:64:cd:9c:0e:b7:d3:7c:e4:c5:93:5f:0e:98:ec: 34:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:99:87:60:E3:91:3D:E5:DD:E8:23:33:52:9C:22:52:35:93:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5c:5b:53:c6:3a:61:bc:76:1e:6e:72:02:d3:45:99:17:26: ea:cb:07:fd:ee:bf:86:92:e3:cc:d8:8a:78:4c:29:5b:cc:5b: dc:40:80:3e:88:e2:72:2e:35:f7:9e:a5:43:72:58:ee:b0:66: 01:48:32:04:93:1d:7c:ab:aa:68:c9:3e:bc:da:5e:41:11:cf: ab:0a:f1:a0:d9:06:26:58:96:cd:30:a2:27:02:c2:66:68:62: d9:0b:ee:d7:4a:49:ef:c2:01:a5:2f:e1:4a:56:ce:65:68:36: 81:72:32:dd:fb:29:f9:47:e9:bb:9e:be:ed:8d:c7:ed:ed:f6: 96:bc:49:f6:32:d2:cd:b7:36:73:be:ae:91:ec:e9:f9:75:f0: d8:f0:d9:8d:ed:f5:94:04:03:50:4c:84:c2:e8:ba:43:37:84: c4:20:f7:7a:51:7a:c5:bf:83:67:6a:28:d0:53:63:ce:c8:b4: 9a:5a:0d:8e:97:df:d8:c0:00:31:e2:90:f1:04:e5:36:21:9c: 19:14:19:da:02:37:df:1b:f9:d8:8a:cd:62:e4:a8:cb:65:50: 20:1c:6a:c1:63:3c:37:29:60:d3:12:84:8c:e2:e1:fb:52:da: 8e:ec:d3:a4:2a:42:d7:64:de:02:a9:de:93:b4:84:4b:3a:1f: 20:9c:78:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5ZArAEfxranMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NjI1MTgxMDYtMTFlNi00YzZlLTg0N2ItMjJhNzY1YjdlNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteWKh/tzbwZYTScohsUbdkQkztRaORCjHzAL aUEdDcDtwH377EH31ywEQzjDF9JqM/BovlIGGQC9wA1LFTzkQs5NwCNir9onc1Tx 9Zyco60pfme8Q6eE2nm2sijsqNABVF3rq4kHm2BUgJfbKxnOu5GAPI/65KPCOBY2 dnxzTysY5tr2HmZDe7X0WMxY5PRCr8c6AwinBzOPaWOmgX+rdh0tlrSUsJY3OYpe rUp20hJthVvbAqcuCbYzl6JBAmXEzZvtcmTZsi5bUdwxzGj8fu70iZMy+rAaoHJL A5dYsZlyr51GuuFr6V52562lP2htZM2cDrfTfOTFk18OmOw0eQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP4zmYdg45E95d3oIzNSnCJSNZPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA1OTVhOTYtZTFmYi0z MWI2LTg1MDktOGJkYTBhY2UxYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsXFtTxjphvHYebnIC00WZFybqywf97r+GkuPM2Ip4TClbzFvcQIA+ iOJyLjX3nqVDcljusGYBSDIEkx18q6poyT682l5BEc+rCvGg2QYmWJbNMKInAsJm aGLZC+7XSknvwgGlL+FKVs5laDaBcjLd+yn5R+m7nr7tjcft7faWvEn2MtLNtzZz vq6R7On5dfDY8NmN7fWUBANQTITC6LpDN4TEIPd6UXrFv4NnaijQU2POyLSaWg2O l9/YwAAx4pDxBOU2IZwZFBnaAjffG/nYis1i5KjLZVAgHGrBYzw3KWDTEoSM4uH7 UtqO7NOkKkLXZN4Cqd6TtIRLOh8gnHh8 -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:47 2026 by rpki-client