$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa File: 40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa (raw, json) Hash identifier: VUbnaLHLa2h1OGCovIaq8GBZ7rDrOj7YfsZABryyAOA= Subject key identifier: 5F:BB:2D:AB:77:86:2F:98:FE:DA:3A:5D:A6:A6:24:63:E1:35:3D:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FD816525BAD34B0F1940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 20431 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fd:81:65:25:ba:d3:4b:0f:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=2a2bda8e-54ce-420b-ab25-bf6aa7f0179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:2c:36:6e:c1:b1:79:2b:54:99:6a:1f:17: c8:f7:07:87:0f:f2:2f:4b:24:9f:af:a3:4f:ff:07: e7:76:41:8a:dd:32:bf:9d:cc:ad:94:33:06:e5:9c: 19:82:67:04:66:08:95:9f:fc:3e:dd:08:9d:6e:9d: 1e:c9:4e:f1:ca:1e:13:65:2e:c8:56:3d:69:88:8d: a5:2a:56:31:6b:2e:77:51:ae:fa:dc:2c:e2:a7:7f: 3f:e4:6e:c3:a8:c9:f8:8f:02:43:a6:ec:65:59:10: a3:82:4a:1e:97:6a:f1:98:ec:c0:e1:02:78:4e:e4: 1f:b6:64:42:4e:e9:7e:00:52:50:37:5e:82:9a:bf: b3:0d:45:b8:46:c1:3c:d8:07:95:53:17:f3:56:26: 8c:f7:8f:62:51:7b:15:40:93:86:f4:96:f4:83:97: d4:db:6b:cd:d7:97:78:a4:16:a0:94:f0:f3:91:cb: e3:06:d9:f2:04:7d:56:e2:c1:ab:2b:e1:e3:15:21: 22:13:4c:c5:ad:25:b7:b5:3b:32:90:a0:c4:f4:13: 12:c2:cb:38:d2:0b:f9:5a:b3:6f:b1:39:a0:ff:9c: c4:05:96:e1:2e:71:53:0c:d9:b7:85:6d:3c:a2:71: db:4d:44:9d:b3:55:e8:c7:4f:e9:cf:35:66:d6:4f: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BB:2D:AB:77:86:2F:98:FE:DA:3A:5D:A6:A6:24:63:E1:35:3D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40eb7a1e-8063-3ad6-ac73-450b4aa42a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9d:c5:01:5e:0c:e7:6c:ba:6b:0e:8d:c2:6b:98:9c:b0:30: b7:43:05:c2:a9:c8:11:20:7b:2a:08:c5:e4:3b:3d:0f:aa:89: c4:ab:87:8e:a9:11:0c:70:e7:2c:29:ac:79:14:a8:08:4c:de: 47:b1:c2:6e:16:72:01:55:84:36:e2:43:97:93:86:cf:e2:4e: 13:b2:93:0e:af:5a:21:6e:cc:f9:5a:ff:e1:a8:42:7d:06:3b: cc:06:4a:69:cc:1e:e9:ca:b1:81:96:f2:e0:a0:2c:3b:11:20: 10:1f:07:79:85:98:d0:a0:4a:07:7e:f8:77:95:01:e1:ee:14: dd:d7:f2:74:db:9c:8b:ec:e3:2a:8d:b3:14:9b:f9:e0:27:92: c0:70:05:8b:18:d7:7f:96:87:d0:ef:f2:d0:fc:f0:7b:3a:61: 61:3c:61:a6:cd:43:97:29:46:d0:eb:60:e0:f7:43:7a:ac:da: 88:bf:7c:18:cb:43:89:e0:0a:8f:f1:8c:a9:da:7b:85:35:d4: b7:92:a6:4a:c6:d7:ac:4a:56:af:c3:46:40:c5:c4:32:f2:1f: df:98:38:10:64:0d:27:4d:f6:48:26:0a:72:fc:a2:57:b7:6b: b5:38:3a:58:e2:9d:14:0f:bd:3f:4d:55:6c:36:f3:bf:9e:73: a6:5e:8c:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP2BZSW600sPGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MmEyYmRhOGUtNTRjZS00MjBiLWFiMjUtYmY2YWE3ZjAxNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sUsNm7BsXkrVJlqHxfI9weHD/IvSySfr6NP /wfndkGK3TK/ncytlDMG5ZwZgmcEZgiVn/w+3Qidbp0eyU7xyh4TZS7IVj1piI2l KlYxay53Ua763Czip38/5G7DqMn4jwJDpuxlWRCjgkoel2rxmOzA4QJ4TuQftmRC Tul+AFJQN16Cmr+zDUW4RsE82AeVUxfzViaM949iUXsVQJOG9Jb0g5fU22vN15d4 pBaglPDzkcvjBtnyBH1W4sGrK+HjFSEiE0zFrSW3tTsykKDE9BMSwss40gv5WrNv sTmg/5zEBZbhLnFTDNm3hW08onHbTUSds1Xox0/pzzVm1k+pkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF+7Lat3hi+Y/to6XaamJGPhNT2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlYjdhMWUtODA2My0z YWQ2LWFjNzMtNDUwYjRhYTQyYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnncUBXgznbLprDo3Ca5icsDC3QwXCqcgRIHsqCMXkOz0PqonEq4eO qREMcOcsKax5FKgITN5HscJuFnIBVYQ24kOXk4bP4k4TspMOr1ohbsz5Wv/hqEJ9 BjvMBkppzB7pyrGBlvLgoCw7ESAQHwd5hZjQoEoHfvh3lQHh7hTd1/J025yL7OMq jbMUm/ngJ5LAcAWLGNd/lofQ7/LQ/PB7OmFhPGGmzUOXKUbQ62Dg90N6rNqIv3wY y0OJ4AqP8Yyp2nuFNdS3kqZKxtesSlavw0ZAxcQy8h/fmDgQZA0nTfZIJgpy/KJX t2u1ODpY4p0UD70/TVVsNvO/nnOmXowu -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:21 2026 by rpki-client