$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa File: 4af9227c-5b03-3294-9ff8-b4e25c39e237.roa (raw, json) Hash identifier: ju/nExzdPWC/Dfl2BEVeyoOSL6Jxx4M72u6UyRnuU/8= Subject key identifier: 11:07:30:47:9B:32:F5:F5:21:6B:4C:D2:E9:2D:09:D9:28:24:F2:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F964F5714BE8A9C377A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 397205 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:96:4f:57:14:be:8a:9c:37:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=b17e981b-c457-4097-bf93-5737e3a6cda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:cf:41:7e:f2:f8:da:7d:41:31:b7:09:3e: f0:5a:d1:26:b7:f2:30:ca:da:3d:78:27:26:38:c2: 1c:20:54:71:b3:bb:5d:c4:68:1e:20:4a:3a:0a:7c: 1a:7a:9b:6b:c9:36:1b:e1:06:cf:96:51:28:7f:1f: 14:f3:1f:e2:bc:b5:33:d1:b4:8b:bf:10:bd:9d:85: 19:51:ae:f3:7b:cf:e6:b0:10:e2:83:14:09:96:af: 8f:ca:b0:97:c6:01:50:c9:6f:4f:35:4b:8d:28:19: c3:14:9f:83:aa:bc:19:4c:c2:f2:5a:57:65:99:51: 6f:8b:ea:0b:96:52:66:37:19:34:7a:be:a9:33:6c: b0:46:0c:22:42:d4:be:9c:40:b0:d7:90:8a:41:f7: 89:9f:5d:82:d4:df:51:8f:58:62:f5:2e:14:18:d1: 6f:08:7c:35:e4:1c:73:cb:61:3f:08:5b:e7:e1:b8: 42:91:92:d0:26:24:3d:07:3a:7a:6a:2b:9a:9b:9c: 58:84:35:6e:27:c3:80:cb:5f:62:c5:98:65:3d:bd: 6a:04:0b:80:22:61:61:f2:2c:7f:6d:ae:b6:6d:87: 5e:02:f9:55:49:b7:3e:eb:74:2d:b2:ac:94:95:35: ad:b1:40:10:f6:06:ed:0a:a9:df:8e:7c:b2:67:23: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:30:47:9B:32:F5:F5:21:6B:4C:D2:E9:2D:09:D9:28:24:F2:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4af9227c-5b03-3294-9ff8-b4e25c39e237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4e:57:d8:e3:7d:64:51:ea:3d:83:8c:0d:ba:55:73:43:76: 18:46:cd:46:2a:20:a4:0e:9d:38:5e:38:f7:43:fa:4f:ce:b1: 18:28:3a:2f:ef:3c:c7:c2:ae:5c:b0:68:f0:51:35:08:3a:95: 5c:cd:63:c6:27:08:6a:77:ba:40:c2:76:fd:70:09:02:b4:5a: 0a:2e:39:2d:1f:1c:94:e2:ed:7a:1a:66:f3:6f:3c:34:4c:16: 6e:c7:a5:36:1f:c5:01:d0:8b:df:75:21:87:ea:55:e7:2c:f4: 9f:39:49:ef:03:8a:94:ca:a4:e7:c3:35:7b:9c:3b:39:68:d1: a6:2c:a8:23:1d:5b:bc:8d:41:73:c2:a5:ce:ee:8a:bc:6a:ed: 96:39:42:b6:eb:e8:e7:8f:74:3d:01:d8:90:a4:aa:c4:8f:11: 29:9a:5c:5f:cc:71:cb:29:79:77:fa:be:26:e3:28:7f:55:04: f0:5b:0a:d9:99:d5:1f:8c:f7:aa:c3:35:08:79:2b:bb:59:63: 27:26:32:49:7f:06:67:7d:84:18:62:9a:74:16:a4:0a:3a:57: ba:0d:92:cc:f2:da:80:a9:33:b4:b2:fc:e4:94:6d:ef:ec:9f: 6f:c4:9e:76:b2:ae:fb:3f:d6:13:29:b0:00:bd:61:65:08:5c: b7:82:8e:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5ZPVxS+ipw3egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YjE3ZTk4MWItYzQ1Ny00MDk3LWJmOTMtNTczN2UzYTZjZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpPPQX7y+Np9QTG3CT7wWtEmt/Iwyto9eCcm OMIcIFRxs7tdxGgeIEo6CnwaeptryTYb4QbPllEofx8U8x/ivLUz0bSLvxC9nYUZ Ua7ze8/msBDigxQJlq+PyrCXxgFQyW9PNUuNKBnDFJ+DqrwZTMLyWldlmVFvi+oL llJmNxk0er6pM2ywRgwiQtS+nECw15CKQfeJn12C1N9Rj1hi9S4UGNFvCHw15Bxz y2E/CFvn4bhCkZLQJiQ9Bzp6aiuam5xYhDVuJ8OAy19ixZhlPb1qBAuAImFh8ix/ ba62bYdeAvlVSbc+63QtsqyUlTWtsUAQ9gbtCqnfjnyyZyO9DQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBEHMEebMvX1IWtM0uktCdkoJPJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFmOTIyN2MtNWIwMy0z Mjk0LTlmZjgtYjRlMjVjMzllMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaTlfY431kUeo9g4wNulVzQ3YYRs1GKiCkDp04Xjj3Q/pPzrEYKDov 7zzHwq5csGjwUTUIOpVczWPGJwhqd7pAwnb9cAkCtFoKLjktHxyU4u16Gmbzbzw0 TBZux6U2H8UB0IvfdSGH6lXnLPSfOUnvA4qUyqTnwzV7nDs5aNGmLKgjHVu8jUFz wqXO7oq8au2WOUK26+jnj3Q9AdiQpKrEjxEpmlxfzHHLKXl3+r4m4yh/VQTwWwrZ mdUfjPeqwzUIeSu7WWMnJjJJfwZnfYQYYpp0FqQKOle6DZLM8tqAqTO0svzklG3v 7J9vxJ52sq77P9YTKbAAvWFlCFy3go5r -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:03 2026 by rpki-client