$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa File: 535be0a1-254e-39da-b317-25ebb54be9fc.roa (raw, json) Hash identifier: oAYYbEETaMIh1Q68+je2PbK99ZAO1Rg5jqpzjyB/c4M= Subject key identifier: AC:B8:01:78:5E:02:E0:DE:46:50:EE:73:84:4F:59:24:56:67:87:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D3F64FEE845AB62FA8C667260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 397212 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:fe:e8:45:ab:62:fa:8c:66:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=72b0d5a1-fecc-455d-91be-0abe7fbf7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:01:34:97:69:85:f5:a0:5b:e5:76:f5:fd: f2:9c:86:3e:b3:f9:e0:20:8b:f9:65:c2:10:23:9f: 57:26:f2:10:c7:56:18:cc:10:41:82:bd:63:a1:67: d2:5b:9d:74:ae:5f:32:4c:87:28:26:18:88:a3:ab: a1:09:43:49:55:10:f5:05:ed:bc:a8:8b:2e:d1:c8: 0c:4f:22:81:bf:14:ec:8f:fb:82:8d:d6:6c:ad:92: c2:a9:2e:de:41:1a:3b:58:20:f4:5c:33:67:01:c4: 4a:a5:78:00:ab:78:83:04:46:8c:14:67:99:07:dc: c3:50:ff:f8:d3:13:74:7e:a0:3a:04:a8:25:73:da: 13:9f:ff:9e:03:2b:20:9d:a0:db:6e:a6:30:23:aa: c4:e9:19:6c:2b:4b:35:c3:77:a0:dc:c6:f0:5f:08: c8:10:64:24:b2:7c:7b:80:52:05:51:fa:9c:d8:2c: da:ec:19:f8:1d:74:a4:e1:63:c7:f9:11:8c:9a:13: a2:37:b7:ee:36:bd:d1:7d:5e:2e:46:c9:0c:8e:d0: 04:65:e2:ed:d6:24:8f:33:fe:ed:56:d7:73:f2:56: 11:6e:99:33:68:dd:08:d4:43:8a:b6:70:0c:6a:03: 4c:41:84:c6:62:19:bb:ea:d7:bd:af:d9:90:9c:49: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B8:01:78:5E:02:E0:DE:46:50:EE:73:84:4F:59:24:56:67:87:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/535be0a1-254e-39da-b317-25ebb54be9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e5:f7:80:ba:85:0b:d0:67:5e:e6:5b:2c:4a:f1:c6:af:6e: 3e:98:d2:69:05:85:b7:10:b2:98:50:3a:ec:90:0e:15:40:cb: 48:f9:f2:59:19:e1:c6:ea:7a:18:0d:32:0a:c0:5d:75:f1:4c: 2b:83:55:0a:6b:62:58:fe:e4:b2:31:3a:e7:86:68:70:3d:90: bb:a6:32:21:e8:c2:d9:da:cb:62:43:cb:08:78:0d:0f:40:98: 8c:47:72:58:d1:70:4c:20:16:f2:5f:6e:3f:9b:73:ac:b4:84: 15:28:1e:ea:b7:28:92:4f:8c:ec:57:42:fe:a7:5b:96:7d:9a: 88:5c:3e:91:77:de:b8:ab:74:84:70:ef:9e:31:b5:fc:b2:26: ff:c2:b8:aa:3e:c7:f2:5f:ac:99:63:05:77:7d:db:94:62:65: 82:40:d5:a6:1a:dc:c3:bf:ce:02:d5:b0:5c:9a:3b:4e:41:21: 69:91:82:c2:8d:e4:b1:ab:6b:b9:01:58:2b:dd:0b:c5:96:4d: e1:78:87:98:99:ad:86:f4:41:2b:67:54:0b:25:b1:e6:1e:3e: a6:6e:3f:70:ca:b3:7d:fb:dc:f1:7a:e9:fd:0e:96:bf:73:17: 89:09:a2:36:a8:a5:ce:51:be:df:d8:fe:8b:b0:91:21:0d:99: ed:1d:36:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZP7oRati+oxmcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzJiMGQ1YTEtZmVjYy00NTVkLTkxYmUtMGFiZTdmYmY3Mjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4IBNJdphfWgW+V29f3ynIY+s/ngIIv5ZcIQ I59XJvIQx1YYzBBBgr1joWfSW510rl8yTIcoJhiIo6uhCUNJVRD1Be28qIsu0cgM TyKBvxTsj/uCjdZsrZLCqS7eQRo7WCD0XDNnAcRKpXgAq3iDBEaMFGeZB9zDUP/4 0xN0fqA6BKglc9oTn/+eAysgnaDbbqYwI6rE6RlsK0s1w3eg3MbwXwjIEGQksnx7 gFIFUfqc2Cza7Bn4HXSk4WPH+RGMmhOiN7fuNr3RfV4uRskMjtAEZeLt1iSPM/7t Vtdz8lYRbpkzaN0I1EOKtnAMagNMQYTGYhm76te9r9mQnEnHgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKy4AXheAuDeRlDuc4RPWSRWZ4c4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTM1YmUwYTEtMjU0ZS0z OWRhLWIzMTctMjVlYmI1NGJlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs5feAuoUL0Gde5lssSvHGr24+mNJpBYW3ELKYUDrskA4VQMtI+fJZ GeHG6noYDTIKwF118Uwrg1UKa2JY/uSyMTrnhmhwPZC7pjIh6MLZ2stiQ8sIeA0P QJiMR3JY0XBMIBbyX24/m3OstIQVKB7qtyiST4zsV0L+p1uWfZqIXD6Rd964q3SE cO+eMbX8sib/wriqPsfyX6yZYwV3fduUYmWCQNWmGtzDv84C1bBcmjtOQSFpkYLC jeSxq2u5AVgr3QvFlk3heIeYma2G9EErZ1QLJbHmHj6mbj9wyrN9+9zxeun9Dpa/ cxeJCaI2qKXOUb7f2P6LsJEhDZntHTZT -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:31 2026 by rpki-client