$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499515cc-3158-36f6-a75c-2f37e75fd63b.roa File: 499515cc-3158-36f6-a75c-2f37e75fd63b.roa (raw, json) Hash identifier: G71hB7rhNyUyNwUuT9Z8MgdroervhWTzXq3+MlfIlPE= Subject key identifier: 89:54:B5:3D:8E:DA:10:81:89:51:F3:35:2E:24:D9:25:A6:2B:D2:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FF6355AEFDB85CCABB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499515cc-3158-36f6-a75c-2f37e75fd63b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 396585 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ff:63:55:ae:fd:b8:5c:ca:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=cb3376e7-f596-41ad-b004-e6dcc228f581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:61:96:33:44:27:7f:a2:54:39:21:33:3b: 5f:d8:c4:a8:83:a6:a1:bc:df:66:e7:66:61:f0:09: 3a:0d:e4:00:ce:2b:3c:82:21:4d:51:83:81:81:bb: 03:b7:41:df:7f:1a:23:25:0f:b9:6b:12:d7:72:23: 02:1c:ec:6a:6e:c3:4c:75:42:bd:91:43:3c:d2:04: de:1b:b7:e1:78:86:20:29:4b:da:16:20:36:9d:09: d3:25:81:d9:5d:67:9b:b9:b8:ef:2d:f8:e3:f5:98: d2:ef:48:19:f9:0e:a4:c4:f1:9e:19:dd:9d:f9:67: 06:2d:9a:d9:79:2c:8b:62:49:e5:bb:32:4d:b2:29: a7:56:2d:99:e5:03:e0:15:52:1d:7d:f6:5d:5e:a1: 3e:0c:c7:61:75:2e:18:13:5e:33:03:21:1b:68:cc: 15:be:8c:4e:db:5d:96:fc:eb:50:9e:14:bb:b9:1b: ce:34:66:36:47:d8:f1:5b:e9:cf:6d:96:56:1d:53: 72:40:63:c5:c0:0b:76:17:6c:48:d4:55:2a:0a:d0: a9:77:90:a6:9f:ec:9c:45:33:d5:e3:f7:de:2a:8c: af:65:cb:f9:1f:7e:dd:83:ab:21:60:3a:a6:bc:9d: 68:3a:b3:c2:5b:2c:37:db:2a:f0:69:d5:c7:00:10: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:B5:3D:8E:DA:10:81:89:51:F3:35:2E:24:D9:25:A6:2B:D2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499515cc-3158-36f6-a75c-2f37e75fd63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:95:fd:f8:c7:5c:60:e0:29:8c:f1:7e:2d:49:67:bb:11:f0: 13:f3:8b:d2:ea:58:8b:71:e2:c8:41:7a:9e:5d:d7:52:8d:4e: 62:9b:b6:e6:30:0f:e5:05:29:b5:e6:2a:96:29:22:03:6b:eb: 83:df:22:9b:95:81:53:c9:b5:a0:64:24:55:4c:17:7d:83:7d: c5:f7:85:2a:50:f8:cc:58:c0:0a:63:30:a9:a3:fd:25:17:a8: 10:ea:56:99:a3:16:f6:fd:17:92:b5:24:1c:a7:10:53:0c:6c: a4:d0:27:c0:a2:32:e9:28:84:2b:bf:e4:26:50:01:f3:b0:f1: f7:0f:13:c3:3c:8d:51:4f:db:32:51:b2:b8:1f:e9:aa:36:a0: 5d:c9:e6:06:2b:29:ef:86:1f:4b:28:c0:4b:f7:3a:be:f7:08: 7f:2b:79:b3:0e:91:2d:5b:3f:77:bc:08:49:05:f8:21:73:a9: 32:b1:2d:68:1f:38:c7:8a:b8:7c:1a:72:4d:3d:ad:e9:50:39: ff:da:93:22:ef:46:c2:86:01:ea:47:d7:c6:97:68:a8:d5:2f: d8:d8:b3:d2:07:0d:f7:3d:25:98:7e:58:ab:1b:38:bb:75:4d: d6:5c:d3:3a:71:75:0a:10:81:0a:fe:51:0f:3e:2d:f8:b1:51: e8:8c:c7:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP9jVa79uFzKu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2IzMzc2ZTctZjU5Ni00MWFkLWIwMDQtZTZkY2MyMjhmNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd5hljNEJ3+iVDkhMztf2MSog6ahvN9m52Zh 8Ak6DeQAzis8giFNUYOBgbsDt0HffxojJQ+5axLXciMCHOxqbsNMdUK9kUM80gTe G7fheIYgKUvaFiA2nQnTJYHZXWebubjvLfjj9ZjS70gZ+Q6kxPGeGd2d+WcGLZrZ eSyLYknluzJNsimnVi2Z5QPgFVIdffZdXqE+DMdhdS4YE14zAyEbaMwVvoxO212W /OtQnhS7uRvONGY2R9jxW+nPbZZWHVNyQGPFwAt2F2xI1FUqCtCpd5Cmn+ycRTPV 4/feKoyvZcv5H37dg6shYDqmvJ1oOrPCWyw32yrwadXHABAR9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIlUtT2O2hCBiVHzNS4k2SWmK9KMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDk5NTE1Y2MtMzE1OC0z NmY2LWE3NWMtMmYzN2U3NWZkNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZlf34x1xg4CmM8X4tSWe7EfAT84vS6liLceLIQXqeXddSjU5im7bm MA/lBSm15iqWKSIDa+uD3yKblYFTybWgZCRVTBd9g33F94UqUPjMWMAKYzCpo/0l F6gQ6laZoxb2/ReStSQcpxBTDGyk0CfAojLpKIQrv+QmUAHzsPH3DxPDPI1RT9sy UbK4H+mqNqBdyeYGKynvhh9LKMBL9zq+9wh/K3mzDpEtWz93vAhJBfghc6kysS1o HzjHirh8GnJNPa3pUDn/2pMi70bChgHqR9fGl2io1S/Y2LPSBw33PSWYflirGzi7 dU3WXNM6cXUKEIEK/lEPPi34sVHojMff -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:37 2026 by rpki-client