$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa File: 4de38486-00f8-322f-ab21-b6f3878c6517.roa (raw, json) Hash identifier: JCZDp4D+aVqTwrkfu4sttct5e11BeoBLZBvpHsg0hvg= Subject key identifier: 64:2B:63:9C:C6:CC:09:27:5E:FD:68:C5:3A:89:D7:BB:52:A2:42:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D2D3F95C856B82608E89303C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36630 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:95:c8:56:b8:26:08:e8:93:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=4de64bff-f022-4ace-9127-947c42d80b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:8b:89:13:ad:02:99:ec:a6:94:cb:db:b7: 2f:2c:45:84:bd:7d:3c:ed:fa:4d:9d:f3:bc:21:a0: 79:9c:ed:a6:f7:aa:f3:2a:96:20:16:fd:15:7b:9d: 35:da:59:73:6e:17:af:06:69:8d:ee:44:59:6e:fa: dd:b9:a7:8e:b9:4a:fa:f1:b7:c8:f4:ec:34:6c:6e: 71:c4:7a:3f:33:c2:a1:3c:ce:5a:9d:f0:91:c7:85: c1:54:77:4b:41:b8:7f:74:f7:55:1d:64:e4:52:5a: fd:81:59:c5:e9:79:a7:b6:c8:47:70:88:f0:e1:7a: 52:3f:4c:66:03:6e:a6:de:e0:3a:35:89:a4:27:22: 3a:3e:26:12:ba:ca:0d:d8:6b:c6:1d:19:23:79:e5: 30:38:53:fc:ef:c9:16:54:36:95:c2:90:c3:8a:57: 72:9f:9f:18:ec:14:db:31:fb:01:31:c7:97:01:3d: 44:73:4e:68:3e:08:3c:0b:07:34:2d:a3:02:39:a3: 7a:92:c4:f5:84:84:7c:30:ca:d8:f8:5e:64:a8:8a: 23:f9:9b:8a:d7:7c:94:2d:7f:92:b9:c3:a3:91:9c: 27:3d:2d:32:45:95:56:cd:92:eb:83:6c:a0:5f:ca: 10:88:d9:de:e5:97:0e:db:92:99:17:76:06:69:43: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:63:9C:C6:CC:09:27:5E:FD:68:C5:3A:89:D7:BB:52:A2:42:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4de38486-00f8-322f-ab21-b6f3878c6517.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:00:aa:82:40:63:f6:c5:89:4c:d0:c9:bc:8b:72:2a:0a:a0: ad:1f:74:53:3d:3b:35:cc:0a:9a:f5:ff:43:3c:31:0d:46:2c: 03:93:2a:be:85:cd:29:37:2c:bb:11:0d:80:68:44:8f:ca:80: 70:9b:ed:d5:88:b9:2a:dc:38:0f:b3:03:51:10:aa:0d:63:5b: c8:c4:0e:a3:05:9a:4a:b0:31:08:c7:36:3c:56:76:7c:af:5a: 68:ec:9c:46:83:11:f1:33:0b:1d:ce:5d:a9:cd:f6:b1:4e:32: 0e:90:15:9a:11:6c:12:2b:da:ce:59:92:70:a6:e7:78:2b:e7: b1:25:f4:2a:6a:44:0f:74:ba:78:fc:55:cb:fb:78:21:c2:d9: a0:0e:24:a1:25:12:70:aa:18:16:77:9f:f5:a6:c7:38:c2:1d: 59:35:17:d2:d0:80:5a:94:38:b3:18:32:59:27:f8:4d:6f:16: 9a:c3:f9:34:7f:29:10:ce:0f:66:99:5d:eb:4f:9a:ca:35:0e: b4:02:7b:48:5e:f6:05:c1:0a:00:a3:84:42:4c:54:6c:31:06: 23:9b:29:28:85:cf:bc:a4:b5:14:5b:cf:c8:47:0e:17:43:3a: a4:92:b9:a3:27:36:86:40:bb:da:77:12:06:70:fd:b1:6f:54: b7:7b:3b:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0tP5XIVrgmCOiTA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NGRlNjRiZmYtZjAyMi00YWNlLTkxMjctOTQ3YzQyZDgwYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEqLiROtApnsppTL27cvLEWEvX087fpNnfO8 IaB5nO2m96rzKpYgFv0Ve5012llzbhevBmmN7kRZbvrduaeOuUr68bfI9Ow0bG5x xHo/M8KhPM5anfCRx4XBVHdLQbh/dPdVHWTkUlr9gVnF6XmntshHcIjw4XpSP0xm A26m3uA6NYmkJyI6PiYSusoN2GvGHRkjeeUwOFP878kWVDaVwpDDildyn58Y7BTb MfsBMceXAT1Ec05oPgg8Cwc0LaMCOaN6ksT1hIR8MMrY+F5kqIoj+ZuK13yULX+S ucOjkZwnPS0yRZVWzZLrg2ygX8oQiNne5ZcO25KZF3YGaUOqAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQrY5zGzAknXv1oxTqJ17tSokKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGRlMzg0ODYtMDBmOC0z MjJmLWFiMjEtYjZmMzg3OGM2NTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQADAKqCQGP2xYlM0Mm8i3IqCqCtH3RTPTs1zAqa9f9DPDENRiwDkyq+ hc0pNyy7EQ2AaESPyoBwm+3ViLkq3DgPswNREKoNY1vIxA6jBZpKsDEIxzY8VnZ8 r1po7JxGgxHxMwsdzl2pzfaxTjIOkBWaEWwSK9rOWZJwpud4K+exJfQqakQPdLp4 /FXL+3ghwtmgDiShJRJwqhgWd5/1psc4wh1ZNRfS0IBalDizGDJZJ/hNbxaaw/k0 fykQzg9mmV3rT5rKNQ60AntIXvYFwQoAo4RCTFRsMQYjmykohc+8pLUUW8/IRw4X QzqkkrmjJzaGQLvadxIGcP2xb1S3ezuG -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:09 2026 by rpki-client