$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa File: 409745a2-a259-32e0-9c65-d389d0992fea.roa (raw, json) Hash identifier: kTOMvQ++WKDfZGLCnN9A1PPdA3WfRJ5LSd2pE+ps62k= Subject key identifier: AB:87:2B:A4:38:45:CA:19:8C:83:3A:EE:31:38:5F:AF:32:6D:68:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F99E0C63A036BC2808080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397194 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:99:e0:c6:3a:03:6b:c2:80:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=66faf4d5-ea81-4c9f-9849-bedad37498fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:b1:40:4e:aa:ab:39:c6:d1:73:47:74:f2: c3:98:7e:50:23:ae:ee:a5:44:02:20:56:50:74:ff: c1:a1:87:b9:f0:5d:0a:ac:d9:7e:f5:de:82:5b:7a: f6:e8:24:9b:e2:dd:d4:17:bb:de:e3:e3:cf:02:0c: c6:48:ba:12:98:dc:18:93:1a:e5:e3:ff:c2:8e:03: fa:b1:11:10:dd:56:5e:3b:f6:f1:b1:87:61:a0:b2: 10:78:16:bf:87:44:6c:18:50:d9:e8:1a:e8:7f:6a: 17:c0:a5:4f:e6:19:1d:19:8b:36:3d:c0:27:05:33: ea:35:d4:bd:26:bd:16:26:64:95:dc:68:49:45:b0: 47:9f:c0:e4:ed:ad:08:c0:8d:57:38:58:4c:ad:58: 09:73:b2:ed:e2:02:bc:13:75:ab:5f:25:66:ec:1c: 46:5b:8c:a8:a5:9e:b5:cb:6d:c4:fa:12:30:1b:36: 6e:02:30:f7:ed:92:43:eb:fc:22:87:cb:e4:06:20: 0e:69:d1:d8:5f:4e:6a:64:f0:12:3e:1b:18:e7:51: b3:d8:c0:47:98:6c:ac:e1:ea:12:3a:64:91:68:61: 12:21:fd:32:54:ce:ea:d3:2e:d0:d7:38:5e:07:36: 67:3e:8a:28:14:b8:77:5d:9c:a5:33:6e:1b:da:23: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:87:2B:A4:38:45:CA:19:8C:83:3A:EE:31:38:5F:AF:32:6D:68:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/409745a2-a259-32e0-9c65-d389d0992fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:5d:03:69:9a:03:00:3d:cc:d5:d6:77:07:29:c2:2d:6b:58: 0a:5e:b3:8e:88:17:82:ef:8a:20:70:aa:72:4a:c3:5b:10:91: ed:10:98:3c:55:e8:a2:a5:81:05:b4:b1:29:de:8d:83:9f:e2: 2d:49:93:f0:98:ca:d5:df:41:09:9d:33:76:a9:96:82:80:24: 79:b2:99:36:15:b0:79:82:ce:fc:48:e6:29:4c:0c:fc:f4:5e: f8:5c:62:ca:4b:04:c3:6d:7a:60:32:af:7e:5b:2c:26:c8:de: 11:ff:5c:bd:c5:7c:24:b6:ae:72:f5:4f:7b:24:c0:df:b8:c4: 15:36:00:13:a0:3b:6b:d0:e2:58:d7:5f:1c:28:6f:46:cc:03: 52:07:4d:f4:57:3f:ae:9c:e9:4c:3f:0e:d4:05:94:7b:6d:8a: 63:54:8d:ca:e8:ef:af:43:e1:d6:c3:8b:fe:e9:3e:49:a9:11: 65:93:9a:7b:cc:f4:08:7a:df:de:25:9b:7f:93:d1:2a:e5:1b: 26:48:dc:cb:b2:d9:ad:73:4c:68:cc:73:5c:3d:89:e8:3b:be: 29:46:02:8a:68:63:23:ef:c6:94:32:c2:5f:02:8e:73:73:ee: f2:cb:b1:7c:35:21:56:4d:94:d4:76:61:ef:78:91:0e:78:7a: a4:0a:71:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5ngxjoDa8KAgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NjZmYWY0ZDUtZWE4MS00YzlmLTk4NDktYmVkYWQzNzQ5OGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkouxQE6qqznG0XNHdPLDmH5QI67upUQCIFZQ dP/BoYe58F0KrNl+9d6CW3r26CSb4t3UF7ve4+PPAgzGSLoSmNwYkxrl4//CjgP6 sREQ3VZeO/bxsYdhoLIQeBa/h0RsGFDZ6Brof2oXwKVP5hkdGYs2PcAnBTPqNdS9 Jr0WJmSV3GhJRbBHn8Dk7a0IwI1XOFhMrVgJc7Lt4gK8E3WrXyVm7BxGW4yopZ61 y23E+hIwGzZuAjD37ZJD6/wih8vkBiAOadHYX05qZPASPhsY51Gz2MBHmGys4eoS OmSRaGESIf0yVM7q0y7Q1zheBzZnPoooFLh3XZylM24b2iNQuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKuHK6Q4RcoZjIM67jE4X68ybWgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA5NzQ1YTItYTI1OS0z MmUwLTljNjUtZDM4OWQwOTkyZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATXQNpmgMAPczV1ncHKcIta1gKXrOOiBeC74ogcKpySsNbEJHtEJg8 VeiipYEFtLEp3o2Dn+ItSZPwmMrV30EJnTN2qZaCgCR5spk2FbB5gs78SOYpTAz8 9F74XGLKSwTDbXpgMq9+WywmyN4R/1y9xXwktq5y9U97JMDfuMQVNgAToDtr0OJY 118cKG9GzANSB030Vz+unOlMPw7UBZR7bYpjVI3K6O+vQ+HWw4v+6T5JqRFlk5p7 zPQIet/eJZt/k9Eq5RsmSNzLstmtc0xozHNcPYnoO74pRgKKaGMj78aUMsJfAo5z c+7yy7F8NSFWTZTUdmHveJEOeHqkCnGw -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:31 2026 by rpki-client